last executing test programs: 8.802139438s ago: executing program 2 (id=555): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c48, 0x4, 0x1, 0x7b}) unshare(0x2c020400) r0 = msgget$private(0x0, 0x351) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x8, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 8.77905613s ago: executing program 2 (id=557): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x800) 7.648681218s ago: executing program 2 (id=564): timer_create(0x2, 0x0, &(0x7f00000002c0)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_delete(r0) 6.378158013s ago: executing program 4 (id=569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000800)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 6.178205232s ago: executing program 4 (id=572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="400c0e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4e}, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x12, "ba9bb13c3c1558ac447080f44d89dcd6fdc3"}, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) 5.7647617s ago: executing program 2 (id=574): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x800) 5.484691282s ago: executing program 0 (id=577): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000980)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) 4.556208863s ago: executing program 2 (id=580): socket$inet6(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000200000010961b01000000000800010902"], 0x0) syz_open_dev$dvb_dvr(0x0, 0x0, 0x13f) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) listen(r0, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) signalfd4(r4, 0x0, 0x0, 0x800) 4.545808483s ago: executing program 3 (id=581): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 4.441897877s ago: executing program 3 (id=582): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.506528958s ago: executing program 3 (id=584): chmod(0x0, 0x35e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) 3.394139483s ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 3.105386545s ago: executing program 3 (id=586): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) 3.025902869s ago: executing program 3 (id=587): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) write$hidraw(r0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x82000000) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x67, &(0x7f0000000440)=@string={0x67, 0x3, "8a691326af28900c470bca875d1083ac2fbb250d928993370cad541d463827efaf344e62a142310939e9eeeec48559d186f8e14ec2f092c9248ee3f5709c61e9fa6f522288ace1c52c2a2d5ef87e66ed21c2cd335f48c83d7e06114eb21fd47c3fd4b25bad"}}, {0x0, 0x0}, {0x7f, &(0x7f00000005c0)=@string={0x7f, 0x3, "a90c504b514652b55851344dc951c054ab4ae75072056a8eadd615b640b798f2c37c245223b70fd63706d28336c128540db921e42c8fb95e34ad8cd1b5a256a09b17c53e922c3f493358b292b3e2db02f9e79b700e8e6a7be456bfc33475333978d9db65502d0bbc4bbdbe58aee60718c5862ddcd02cffd1787bcd098a"}}, {0xa7, &(0x7f0000000c80)=@string={0xa7, 0x3, "8041f20a1dcde5d99c57a6ba33f3a7fe105872b0ccc92782435bf1dc1c66c46292aedbfe968fba9f814dd11a984c7bcb294d1cc3435e6dbc8621d05433d12df529ee6211a916ba85d64870feec8d0e3c11bb1203bee93a27c89e95622ecb4f2e4f941739cd113b0f549b8ffc6d17f93a70c55a9a9c6220d128363842099601c1ba28323ea5c016eb877c533640d1d2268cb003043324e501e0929b4cb154f25adea3f5aa8b"}}, {0x4b, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"]}, {0xd9, &(0x7f00000009c0)=@string={0xd9, 0x3, "cb4d3555a87c32fabc8d60eec43b87dc9651bb4ad65c5c869326309add2025ae6da6a9b3c6b2dabacd11a7b403a6e29778a3c147409e91ba3aae34cbba67139a7fb27da83ae1caf0780f5a09112ded2741c8ca515c81cfa2fa4cfe343771f9a146218c2ca99af7986e1a32557bdf3b7380bd8cb5e6e303e4f8bf80f0a572011f59664106659ea0f1a13c41eecd10fef49cb3661c1bab3a1f2857fc7ddaaf9a821f2a7c6c881c89a589baa40707ab4a58449939cb5683f6baf1be1e547651e498a583c50c16eb0128e6a50b58ef3bf042b9354a9ef680b8"}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x3491, 0x4}]}, 0x14, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x80241, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000740)=0xfffffffe) truncate(&(0x7f0000000700)='./cgroup/cgroup.procs/file0\x00', 0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="201401000000d4"], 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) r3 = socket(0x11, 0x3, 0x0) bind$packet(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.214747804s ago: executing program 0 (id=589): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x800) 2.174540655s ago: executing program 4 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640fffffb000800034000000018"], 0xe4}}, 0x0) 2.034244161s ago: executing program 4 (id=591): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.817933641s ago: executing program 4 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000013c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x1, 0xa86}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "8f3889", 0x1e, 0x21, 0x0, @private1, @private0, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x0, "581ed9", 0x1, "b52f55"}, "2227a92d93fb2a036e7d186d9971"}}}}}}}, 0x60) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x18, r7, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 1.192244088s ago: executing program 2 (id=593): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008894}, 0x6010) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.070126743s ago: executing program 0 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.011070516s ago: executing program 1 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 711.472159ms ago: executing program 4 (id=597): poll(&(0x7f0000000580), 0x0, 0x3) chmod(0x0, 0x80) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000209904371040000102030109026900030109400c080b0201012520070904000000010120000924010800070900060904010000010220000904010101010220000905010940000702000825010003020100090402c184010220000904020101010220000905820900027f0e0008250103304506006e5df7b70ce4e444ac0228125ba22213e47639a9be12ff89e9fa000000004ff1e41cf3a5df809f2d8611c70e2e691d3fff56d9"], &(0x7f0000002ac0)={0x0, 0x0, 0x19, &(0x7f0000002940)=ANY=[@ANYBLOB="1f0f19000114100406"], 0x1, [{0x6, 0x0}]}) shutdown(0xffffffffffffffff, 0x1) 694.26679ms ago: executing program 1 (id=598): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 612.674483ms ago: executing program 0 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x147, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 552.590976ms ago: executing program 0 (id=600): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) fsync(0xffffffffffffffff) 434.062871ms ago: executing program 0 (id=601): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x81, 0x1200, 0x0, 0x0}], 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 243.06009ms ago: executing program 1 (id=602): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 151.752593ms ago: executing program 1 (id=603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 62.313327ms ago: executing program 1 (id=604): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) 0s ago: executing program 1 (id=605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x100001}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f00004e220000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 59.506762][ T4177] cgroup: Unknown subsys name 'net' [ 59.651550][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.100507][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.584580][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.604016][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 62.669848][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.713113][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.739540][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.787028][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.794123][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.802579][ T4202] device bridge_slave_0 entered promiscuous mode [ 62.832597][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.840043][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.847888][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.855940][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.863029][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.871461][ T4202] device bridge_slave_1 entered promiscuous mode [ 62.892849][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.900129][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.908687][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.968370][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.986557][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.999084][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.006441][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.014316][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.023447][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.053424][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.075995][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083090][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.091231][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.106820][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.113999][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.122755][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.132568][ T4202] team0: Port device team_slave_0 added [ 63.158810][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.166292][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.174166][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.182780][ T4202] team0: Port device team_slave_1 added [ 63.198257][ T4190] team0: Port device team_slave_0 added [ 63.204161][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.211381][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.219664][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.228880][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.240494][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.263259][ T4190] team0: Port device team_slave_1 added [ 63.269612][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.277188][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.285154][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.307506][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.314507][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.341596][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.379725][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.389473][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.397256][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.423463][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.446439][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.458190][ T4191] team0: Port device team_slave_0 added [ 63.466158][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.477174][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.494424][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.501832][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.528393][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.541017][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.548270][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.574699][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.587545][ T4191] team0: Port device team_slave_1 added [ 63.637212][ T4189] team0: Port device team_slave_0 added [ 63.650104][ T4192] team0: Port device team_slave_0 added [ 63.658151][ T4192] team0: Port device team_slave_1 added [ 63.669719][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.677364][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.704022][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.716452][ T4189] team0: Port device team_slave_1 added [ 63.749073][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.756318][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.782675][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.802100][ T4202] device hsr_slave_0 entered promiscuous mode [ 63.809410][ T4202] device hsr_slave_1 entered promiscuous mode [ 63.817133][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.824105][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.850379][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.865422][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.872345][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.879737][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.887752][ T4190] Cannot create hsr debugfs directory [ 63.914339][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.921575][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.948033][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.970851][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.978146][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.004750][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.018913][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.026059][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.052148][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.119246][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.126299][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.132992][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.141162][ T4191] Cannot create hsr debugfs directory [ 64.218193][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.225223][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.232365][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.240200][ T4192] Cannot create hsr debugfs directory [ 64.276163][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 64.276163][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 64.276644][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 64.282348][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 64.288637][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 64.297369][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.313780][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.320734][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.328628][ T4189] Cannot create hsr debugfs directory [ 64.560008][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.571580][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.581260][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.601077][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.653087][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.663185][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.691440][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.701972][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.734890][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.744569][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.759593][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.776081][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.850498][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.863182][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.873458][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.883819][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.922061][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.972890][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.998908][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.010196][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.019031][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.031218][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.041348][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.051963][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.059260][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.077397][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.091309][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.103880][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.121843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.131844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.140546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.147762][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.164069][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.181700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.195667][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.214760][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.225177][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.234520][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.244508][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.252532][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.264009][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.272865][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.283975][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.298438][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.309265][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.334838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.344089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.353023][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.360156][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.370027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.378895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.389153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.406783][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.416103][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.424524][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.431668][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.439482][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.448280][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.463107][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.471992][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.480943][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.493459][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.516698][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.537643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.547512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.556816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.566300][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.573381][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.582170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.591639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.600871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.611096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.619985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.629791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.641141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.649775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.659041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.668361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.677630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.684693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.718060][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.737669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.754899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.764623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.775219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.785745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.812363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.821394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.837004][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.856802][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.864553][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.872983][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.884719][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.894462][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.903124][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.921617][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.936709][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.967068][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.978617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.995098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.010110][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.033056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.043085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.059911][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.067061][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.082469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.092517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.103162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.112253][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.119473][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.141161][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.156698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.164214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.179145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.189635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.215857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.229797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.238854][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.245978][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.254285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.263395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.281949][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.296720][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.312693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.324848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.339490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.351748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.360941][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 66.365667][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 66.372855][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 66.373107][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 66.386749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.395228][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.402345][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.410310][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 66.453878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.463599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.473143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.482097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.493114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.502051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.511175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.520525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.529663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.538420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.549176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.558229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.567160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.575600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.598710][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.613548][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.633050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.648910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.662265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.673011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.681202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.690786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.701837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.712061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.723558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.733489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.749412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.759436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.774747][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.805433][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.861134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.869708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.880461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.889841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.898405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.907061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.916680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.926660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.940989][ T4202] device veth0_vlan entered promiscuous mode [ 66.951079][ T4190] device veth0_vlan entered promiscuous mode [ 67.013088][ T4190] device veth1_vlan entered promiscuous mode [ 67.028178][ T4202] device veth1_vlan entered promiscuous mode [ 67.119330][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.132107][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.143355][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.162754][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.172259][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.181796][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.208869][ T4190] device veth0_macvtap entered promiscuous mode [ 67.217897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.229210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.239004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.252811][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.261270][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.274699][ T4190] device veth1_macvtap entered promiscuous mode [ 67.291404][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.299639][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.308312][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.317513][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.341086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.352375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.363413][ T4202] device veth0_macvtap entered promiscuous mode [ 67.380084][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.392039][ T4189] device veth0_vlan entered promiscuous mode [ 67.400201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.408669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.417498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.425900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.434353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.451984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.461451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.474332][ T4202] device veth1_macvtap entered promiscuous mode [ 67.489183][ T4189] device veth1_vlan entered promiscuous mode [ 67.507215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.515781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.523901][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.531731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.541343][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.553710][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.565180][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.579587][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.602377][ T4191] device veth0_vlan entered promiscuous mode [ 67.611909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.620503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.629695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.640622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.649473][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.658190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.667190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.675572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.683360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.694831][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704352][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.714280][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.723437][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747616][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.756878][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.767723][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.779140][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.787487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.796845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.832202][ T4191] device veth1_vlan entered promiscuous mode [ 67.843040][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.854164][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863650][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.872742][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.893526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.902748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.914458][ T4189] device veth0_macvtap entered promiscuous mode [ 67.924667][ T4189] device veth1_macvtap entered promiscuous mode [ 67.956711][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.964849][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.980975][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.002878][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.047077][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.057819][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.068527][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.079506][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.090983][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.116548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.130822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.155093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.167110][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.177231][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.188269][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.206356][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.235070][ T4192] device veth0_vlan entered promiscuous mode [ 68.245000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.254122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.262992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.273138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.282511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.290904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.300862][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.310751][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320110][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.329481][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362590][ T4192] device veth1_vlan entered promiscuous mode [ 68.370977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.379416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.389512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.404442][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.414979][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.436223][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 68.436309][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 68.448912][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 68.454961][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 68.461644][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 68.463072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.478096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.492227][ T4191] device veth0_macvtap entered promiscuous mode [ 68.514809][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.521563][ T4191] device veth1_macvtap entered promiscuous mode [ 68.529567][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.549455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.559756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.568096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.576540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.585060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.596388][ T4192] device veth0_macvtap entered promiscuous mode [ 68.607326][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.615196][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.624243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.634694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.656471][ T4192] device veth1_macvtap entered promiscuous mode [ 68.728648][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.741105][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.747008][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.756256][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.775998][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.779108][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.793791][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.804384][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.816577][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.831180][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.842629][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.853042][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.864539][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.875148][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.886308][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.898935][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.907931][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.919851][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.930614][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.941354][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.951310][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.962314][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.972465][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.983333][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.994538][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.004196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.012638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.021138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.031012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.044818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.059120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.085769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.095550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.117911][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.127983][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.136625][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.143230][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.162825][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.172805][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.191100][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.202446][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.212481][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.223511][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.233664][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.245604][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.255584][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.267449][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.279458][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.298366][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.306883][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.318154][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.340213][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.350056][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.366913][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.390344][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440159][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.525990][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.569324][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.706664][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.714631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.775653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.788201][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.833629][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.888124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.896463][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.904393][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.928835][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.962955][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.981070][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.009602][ T4291] loop4: detected capacity change from 0 to 2048 [ 70.022233][ T4295] loop2: detected capacity change from 0 to 512 [ 70.022899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.031792][ T4293] loop3: detected capacity change from 0 to 512 [ 70.057933][ T4295] ======================================================= [ 70.057933][ T4295] WARNING: The mand mount option has been deprecated and [ 70.057933][ T4295] and is ignored by this kernel. Remove the mand [ 70.057933][ T4295] option from the mount to silence this warning. [ 70.057933][ T4295] ======================================================= [ 70.125453][ T4295] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.180256][ T4295] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.278083][ T4291] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 70.314502][ T4295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 70.325507][ T4295] System zones: 1-12 [ 70.341959][ T4295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.430860][ T4295] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.12: invalid indirect mapped block 2 (level 2) [ 70.476230][ T4291] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.490278][ T4295] EXT4-fs (loop2): Remounting filesystem read-only [ 70.513552][ T4295] EXT4-fs (loop2): 1 truncate cleaned up [ 70.516281][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 70.555673][ T4295] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback. [ 70.559973][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 70.674441][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 70.695586][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 70.709661][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 71.042644][ T4318] loop1: detected capacity change from 0 to 2048 [ 71.099794][ T4318] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 71.116786][ T4318] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 71.182942][ T4318] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 71.198670][ T4324] IPv4: Oversized IP packet from 127.202.26.0 [ 71.257394][ T4318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.17: bg 0: block 234: padding at end of block bitmap is not set [ 71.292967][ T4318] EXT4-fs (loop1): Remounting filesystem read-only [ 71.320419][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327219][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413922][ T4327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.782937][ T4344] loop0: detected capacity change from 0 to 512 [ 71.839461][ T4344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.886056][ T4344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.952925][ T4344] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.27: invalid indirect mapped block 4294967295 (level 0) [ 72.085708][ T4344] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.27: invalid indirect mapped block 4294967295 (level 1) [ 72.102859][ T4344] EXT4-fs (loop0): 1 orphan inode deleted [ 72.108846][ T4344] EXT4-fs (loop0): 1 truncate cleaned up [ 72.114718][ T4344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.218981][ T4344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.27'. [ 73.568528][ T4391] loop3: detected capacity change from 0 to 256 [ 74.319662][ T4200] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 74.327785][ T4354] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.363749][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 74.393003][ T4411] device gretap0 entered promiscuous mode [ 74.447966][ T4415] loop2: detected capacity change from 0 to 512 [ 74.511693][ T4415] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 34)! [ 74.549627][ T4415] EXT4-fs (loop2): group descriptors corrupted! [ 74.580273][ T4421] 8021q: VLANs not supported on xfrm0 [ 75.455435][ T4453] loop4: detected capacity change from 0 to 1024 [ 75.508714][ T4453] EXT4-fs (loop4): invalid inodes per group: 150994976 [ 75.508714][ T4453] [ 75.904325][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.912666][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.377800][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 76.386163][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 76.548050][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.614650][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.735201][ T4468] loop4: detected capacity change from 0 to 2048 [ 76.813757][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 76.845731][ T26] audit: type=1800 audit(1778592440.714:2): pid=4468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 77.172228][ T4433] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.188389][ T4433] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.202670][ T4433] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.214604][ T4433] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.358311][ T4433] syz.1.61 (4433) used greatest stack depth: 20688 bytes left [ 77.399565][ T4477] tipc: Started in network mode [ 77.432833][ T4477] tipc: Node identity 36cea42817d6, cluster identity 4711 [ 77.439916][ T4481] loop1: detected capacity change from 0 to 512 [ 77.444152][ T4477] tipc: Enabled bearer , priority 0 [ 77.496454][ T4481] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.684614][ T4477] device syzkaller0 entered promiscuous mode [ 77.693694][ T4481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.764103][ T4481] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.73: Allocating blocks 41-42 which overlap fs metadata [ 77.782547][ T4481] Quota error (device loop1): write_blk: dquota write failed [ 77.790415][ T4481] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.800554][ T4481] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.73: Failed to acquire dquot type 0 [ 77.813793][ T4481] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.830798][ T4481] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.73: corrupted inode contents [ 77.846371][ T4481] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.73: mark_inode_dirty error [ 77.858131][ T4481] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.73: corrupted inode contents [ 77.872020][ T4481] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.73: mark_inode_dirty error [ 77.884042][ T4481] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.73: corrupted inode contents [ 77.899864][ T4481] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 77.909114][ T4481] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.73: corrupted inode contents [ 77.922881][ T4481] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.73: mark_inode_dirty error [ 77.934430][ T4481] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 77.945452][ T4481] EXT4-fs (loop1): 1 truncate cleaned up [ 77.951546][ T4481] EXT4-fs (loop1): pa ffff888075b5c620: logic 1, phys. 41, len 23 [ 77.959482][ T4481] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 77.970940][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 78.243442][ T4495] loop2: detected capacity change from 0 to 2048 [ 78.591605][ T4238] Bluetooth: hci5: command 0x1001 tx timeout [ 78.598211][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 78.735395][ T4476] tipc: Resetting bearer [ 78.795476][ T4501] loop0: detected capacity change from 0 to 1024 [ 78.891445][ T4501] EXT4-fs (loop0): invalid inodes per group: 150994976 [ 78.891445][ T4501] [ 78.907777][ T4476] tipc: Disabling bearer [ 78.961328][ T4237] tipc: Node number set to 555263016 [ 79.235216][ T4516] xt_ecn: cannot match TCP bits for non-tcp packets [ 79.260825][ T4516] loop4: detected capacity change from 0 to 512 [ 79.353007][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 79.373843][ T4516] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.391881][ T4516] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.86: iget: bad i_size value: 2533274857506816 [ 79.751417][ T4523] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 80.744523][ T2858] Bluetooth: hci5: command 0x1009 tx timeout [ 81.081989][ T4237] Bluetooth: hci6: command 0x1003 tx timeout [ 81.091994][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 81.366274][ T4542] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.717298][ T4539] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.726916][ T4539] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.735808][ T4539] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.744539][ T4539] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.860900][ T4539] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 82.075196][ T4546] loop4: detected capacity change from 0 to 512 [ 82.124883][ T4546] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.215856][ T4546] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 82.224146][ T4546] System zones: 0-2, 18-18, 34-35 [ 82.251629][ T4546] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000080000,dioread_nolock,stripe=0x0000000000008001,minixdf,debug,,errors=continue. Quota mode: writeback. [ 82.310489][ T4546] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.470618][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 82.485576][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 82.525699][ T4563] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 82.561647][ T4563] netlink: 152 bytes leftover after parsing attributes in process `syz.1.99'. [ 82.644734][ T4563] .`: renamed from bond0 [ 82.675069][ T4563] syz.1.99 (4563) used greatest stack depth: 20624 bytes left [ 82.760272][ T4569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 82.972701][ T4580] loop4: detected capacity change from 0 to 512 [ 83.066982][ T4580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.215541][ T4580] EXT4-fs (loop4): 1 truncate cleaned up [ 83.261123][ T4580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.829016][ T4233] Bluetooth: hci6: command 0x1001 tx timeout [ 83.835462][ T4201] Bluetooth: hci6: sending frame failed (-49) [ 84.045714][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 84.096881][ T4596] loop4: detected capacity change from 0 to 128 [ 84.114614][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 84.125176][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 84.153433][ T4597] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 84.161903][ T4597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.113'. [ 84.179135][ T4597] .`: renamed from bond0 [ 84.217485][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,errors=remount-ro,nodioread_nolock,nolazytime,. Quota mode: none. [ 84.235511][ T4596] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.350839][ T4596] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.110: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 84.383127][ T4596] EXT4-fs (loop4): Remounting filesystem read-only [ 84.483244][ T4609] loop1: detected capacity change from 0 to 512 [ 84.539383][ T4609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.606329][ T4609] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.669737][ T4617] tipc: Failed to remove unknown binding: 66,0,0/0:1307927296/1307927298 [ 84.685667][ T4609] EXT4-fs (loop1): 1 truncate cleaned up [ 84.691582][ T4617] tipc: Failed to remove unknown binding: 66,0,0/0:1307927296/1307927297 [ 84.706738][ T4609] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 84.737764][ T4618] tipc: Failed to remove unknown binding: 66,0,0/0:1307927296/1307927298 [ 84.754259][ T4618] tipc: Failed to remove unknown binding: 66,0,0/0:1307927296/1307927297 [ 85.326902][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 85.352351][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 85.452523][ T4635] netlink: 'syz.3.126': attribute type 4 has an invalid length. [ 85.493521][ T4635] .`: renamed from bond0 [ 86.003324][ T4233] Bluetooth: hci6: command 0x1009 tx timeout [ 86.681730][ T1326] cfg80211: failed to load regulatory.db [ 87.266161][ T4685] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 87.593019][ T4674] ODEBUG: Out of memory. ODEBUG disabled [ 87.785756][ T4693] device syzkaller0 entered promiscuous mode [ 88.372447][ T4715] capability: warning: `syz.4.157' uses 32-bit capabilities (legacy support in use) [ 88.434514][ T2858] kernel write not supported for file /vcs (pid: 2858 comm: kworker/1:2) [ 89.948835][ T4751] device batadv_slave_0 entered promiscuous mode [ 90.257770][ T4751] device batadv_slave_0 left promiscuous mode [ 90.798062][ T4763] syz.2.177 uses obsolete (PF_INET,SOCK_PACKET) [ 90.945823][ T4496] tipc: Subscription rejected, illegal request [ 91.060754][ T4774] autofs4:pid:4774:autofs_fill_super: called with bogus options [ 91.232853][ T4777] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.523909][ T4788] loop0: detected capacity change from 0 to 4096 [ 91.714740][ T4792] loop2: detected capacity change from 0 to 128 [ 92.825379][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,nobarrier,discard,stripe=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 93.285289][ C0] sched: RT throttling activated [ 93.323420][ T4801] __nla_validate_parse: 2 callbacks suppressed [ 93.323437][ T4801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 93.472770][ T4792] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.185'. [ 94.822391][ T4812] loop3: detected capacity change from 0 to 764 [ 95.302727][ T4497] attempt to access beyond end of device [ 95.302727][ T4497] loop2: rw=1, want=1041, limit=128 [ 96.744997][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 96.754052][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 99.149826][ T4896] loop0: detected capacity change from 0 to 136 [ 99.305859][ T4896] Attempt to read inode for relocated directory [ 99.375640][ T4907] netlink: 'syz.2.229': attribute type 1 has an invalid length. [ 100.378880][ T4911] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.427457][ T4925] loop0: detected capacity change from 0 to 164 [ 100.434994][ T4911] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 100.520721][ T4914] bond1: (slave gretap1): making interface the new active one [ 100.592504][ T4914] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.664951][ T4914] syz.2.229 (4914) used greatest stack depth: 19352 bytes left [ 100.672842][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 101.104137][ T4947] loop4: detected capacity change from 0 to 128 [ 101.241846][ T4947] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 101.247593][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 103.117211][ T4989] loop3: detected capacity change from 0 to 128 [ 103.198404][ T4989] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 104.573595][ T5009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.911190][ T5011] loop2: detected capacity change from 0 to 512 [ 105.004840][ T5011] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.023197][ T5011] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.380185][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 105.582820][ T5034] loop2: detected capacity change from 0 to 128 [ 105.657546][ T5034] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 106.242732][ T4993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.366564][ T5024] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 106.719152][ T5053] loop3: detected capacity change from 0 to 512 [ 106.794603][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 106.888024][ T5063] binder: 5054:5063 ioctl c0285840 200000000000 returned -22 [ 106.976860][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 107.250562][ T5053] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.008399][ T5081] loop1: detected capacity change from 0 to 128 [ 108.108510][ T5081] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.286229][ T5109] netlink: 144 bytes leftover after parsing attributes in process `syz.4.295'. [ 110.046239][ T5182] loop3: detected capacity change from 0 to 128 [ 110.097546][ T5184] raw_sendmsg: syz.0.308 forgot to set AF_INET. Fix it! [ 110.116240][ T5182] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 110.351529][ T5186] loop1: detected capacity change from 0 to 1024 [ 110.464259][ T5186] EXT4-fs (loop1): invalid inodes per group: 150994976 [ 110.464259][ T5186] [ 111.103227][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 111.427916][ T5220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 111.484827][ T5223] loop0: detected capacity change from 0 to 128 [ 111.575442][ T5223] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 112.520593][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 112.612132][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 112.731667][ T5270] loop2: detected capacity change from 0 to 512 [ 112.798798][ T5270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.854790][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/131.tmp-b7:2' failed: Read-only file system [ 112.880990][ T5270] EXT4-fs (loop2): 1 truncate cleaned up [ 112.881781][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/130.tmp-b7:0' failed: Read-only file system [ 112.891062][ T5270] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 112.908644][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 112.954404][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/131.tmp-b7:2' failed: Read-only file system [ 112.972989][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 113.013399][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/131.tmp-b7:2' failed: Read-only file system [ 113.034016][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.036929][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/130.tmp-b7:0' failed: Read-only file system [ 113.066727][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 113.145970][ T5282] loop3: detected capacity change from 0 to 128 [ 113.189295][ T5282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 113.445454][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 113.797725][ T4232] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 113.807283][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.819474][ T4232] usb 2-1: Product: syz [ 113.823696][ T4232] usb 2-1: Manufacturer: syz [ 113.828360][ T4232] usb 2-1: SerialNumber: syz [ 113.844000][ T4232] usb 2-1: config 0 descriptor?? [ 113.892875][ T4232] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 114.095742][ T4232] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 114.107664][ T4232] visor: probe of 2-1:0.0 failed with error -71 [ 114.131263][ T4232] usb 2-1: USB disconnect, device number 2 [ 114.465531][ T4233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.735377][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 114.876483][ T4233] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 114.884816][ T4233] usb 4-1: config 0 has no interface number 0 [ 114.891201][ T4233] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 114.915953][ T5243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.146499][ T4233] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.162250][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.188671][ T4233] usb 4-1: Product: syz [ 115.204714][ T4233] usb 4-1: Manufacturer: syz [ 115.226282][ T4233] usb 4-1: SerialNumber: syz [ 115.285014][ T4233] usb 4-1: config 0 descriptor?? [ 115.326618][ T5294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.563162][ T5294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.695619][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.955646][ T4237] usb 5-1: Using ep0 maxpacket: 8 [ 116.086230][ T4237] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.295977][ T4237] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 116.361653][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.388137][ T4237] usb 5-1: Product: syz [ 116.425787][ T4237] usb 5-1: Manufacturer: syz [ 116.430451][ T4237] usb 5-1: SerialNumber: syz [ 116.450552][ T5343] loop0: detected capacity change from 0 to 512 [ 116.512823][ T5343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.532449][ T5343] EXT4-fs (loop0): 1 truncate cleaned up [ 116.538336][ T5343] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 116.561052][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.807782][ T4237] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 116.825353][ T5349] wireguard: wg1: Could not create IPv4 socket [ 117.174106][ T4237] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 117.314395][ T4237] usb 5-1: USB disconnect, device number 2 [ 117.494536][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 117.580043][ T4288] udevd[4288]: symlink '../../loop0' '/dev/disk/by-diskseq/135.tmp-b7:0' failed: Read-only file system [ 117.623411][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.656256][ T4288] udevd[4288]: symlink '../../loop0' '/dev/disk/by-diskseq/135.tmp-b7:0' failed: Read-only file system [ 117.715675][ T4288] udevd[4288]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 118.275960][ T4288] udevd[4288]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 118.419594][ T5366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.520634][ T4233] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.533664][ T4233] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 118.545222][ T4233] asix: probe of 4-1:0.188 failed with error -71 [ 118.562254][ T4233] usb 4-1: USB disconnect, device number 2 [ 118.574907][ T4266] udevd[4266]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 118.638351][ T4308] udevd[4308]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 119.196590][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 119.480881][ T4308] udevd[4308]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 119.568582][ T4308] udevd[4308]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 120.095504][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.477240][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.518421][ T4237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.643198][ T4237] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 120.662884][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.680973][ T4237] usb 5-1: config 0 descriptor?? [ 121.673594][ T4237] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 121.681430][ T4237] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 121.690393][ T4237] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 121.698244][ T4237] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 121.706602][ T4237] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 121.720561][ T4237] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 121.737383][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 121.846740][ T4237] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 32 [ 121.856240][ T4237] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 121.875717][ T4237] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 121.898554][ T4237] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 121.943632][ T4237] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 122.121285][ T4233] usb 5-1: USB disconnect, device number 3 [ 122.205988][ T5005] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.455474][ T5005] usb 2-1: Using ep0 maxpacket: 32 [ 122.575537][ T5005] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 122.584059][ T5005] usb 2-1: config 0 has no interface number 0 [ 122.590799][ T5005] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.601515][ T5005] usb 2-1: config 0 interface 89 has no altsetting 0 [ 122.765994][ T5005] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 122.775085][ T5005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.787518][ T5005] usb 2-1: Product: syz [ 122.791922][ T5005] usb 2-1: Manufacturer: syz [ 122.797794][ T5005] usb 2-1: SerialNumber: syz [ 122.811451][ T5005] usb 2-1: config 0 descriptor?? [ 122.857919][ T5005] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 122.871197][ T5005] em28xx 2-1:0.89: Video interface 89 found: [ 122.925390][ T26] audit: type=1326 audit(1778592486.794:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.0.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a8ad6dd9 code=0x7fc00000 [ 122.949350][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.951029][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 123.003678][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 123.084905][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 123.361797][ T5465] loop0: detected capacity change from 0 to 1024 [ 123.383211][ T5465] EXT4-fs (loop0): invalid inodes per group: 150994976 [ 123.383211][ T5465] [ 123.409235][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system [ 123.422606][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 123.505430][ T5005] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 123.516724][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system [ 123.546167][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/137.tmp-b7:0' failed: Read-only file system [ 124.005348][ T5005] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 124.036597][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 124.069079][ T5469] binder: 5468:5469 ioctl 4018620d 0 returned -22 [ 124.195572][ T5005] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 124.205611][ T5005] em28xx 2-1:0.89: board has no eeprom [ 124.315484][ T5005] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 124.322825][ T5005] em28xx 2-1:0.89: analog set to bulk mode. [ 124.336603][ T5005] usb 2-1: USB disconnect, device number 3 [ 124.343239][ T5005] em28xx 2-1:0.89: Disconnecting em28xx [ 124.349411][ T4235] em28xx 2-1:0.89: Registering V4L2 extension [ 124.377105][ T4235] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 124.384619][ T4235] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 124.391934][ T4235] em28xx 2-1:0.89: No AC97 audio processor [ 124.405198][ T4235] usb 2-1: Decoder not found [ 124.409969][ T4235] em28xx 2-1:0.89: failed to create media graph [ 124.416720][ T4235] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 124.426964][ T4235] em28xx 2-1:0.89: Registering snapshot button... [ 124.435177][ T4235] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 124.448853][ T4235] em28xx 2-1:0.89: Remote control support is not available for this card. [ 124.457800][ T5005] em28xx 2-1:0.89: Closing input extension [ 124.464751][ T5005] em28xx 2-1:0.89: Deregistering snapshot button [ 124.490541][ T5005] em28xx 2-1:0.89: Freeing device [ 124.752935][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 124.792417][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/127.tmp-b7:1' failed: Read-only file system [ 125.354196][ T5442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.905342][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.268834][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.354402][ T5514] loop1: detected capacity change from 0 to 1024 [ 126.394789][ T5514] EXT4-fs (loop1): invalid inodes per group: 150994976 [ 126.394789][ T5514] [ 126.674942][ T4233] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.684131][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.707125][ T4233] usb 5-1: config 0 descriptor?? [ 126.757437][ T4233] pwc: Askey VC010 type 2 USB webcam detected. [ 127.135750][ T2858] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 127.175423][ T4233] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.185031][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 127.194388][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 127.204580][ T5533] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 127.212731][ T5533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.431'. [ 127.215423][ T4233] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.285421][ T4233] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.340949][ T4233] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.385423][ T4233] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.435699][ T4233] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.445449][ T5005] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.495607][ T4233] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.516288][ T2858] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 127.534177][ T2858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 127.546047][ T4233] pwc: recv_control_msg error -32 req 02 val 2100 [ 127.565825][ T2858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 127.585383][ T4233] pwc: recv_control_msg error -32 req 04 val 1500 [ 127.599756][ T2858] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 127.618987][ T2858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.649542][ T2858] usb 1-1: config 0 descriptor?? [ 127.675613][ T5523] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.845415][ T4233] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.875501][ T4233] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.887030][ T5005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.905348][ T5005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.905455][ T4233] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.945466][ T4233] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.975434][ T4233] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.999162][ T4233] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.034747][ T4233] pwc: Registered as video103. [ 128.043180][ T4233] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 128.045615][ T5005] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.070965][ T4233] usb 5-1: USB disconnect, device number 4 [ 128.101642][ T5005] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 128.120198][ T5005] usb 3-1: Manufacturer: syz [ 128.129246][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.131905][ T5005] usb 3-1: config 0 descriptor?? [ 128.164461][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.193456][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.223533][ T4305] udevd[4305]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 128.225813][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.292106][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.311662][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.336689][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.354423][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.373745][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.387120][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.402216][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.417408][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.432586][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.470139][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.491023][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.495210][ T5549] udevd[5549]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 128.510287][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.533454][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.592273][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.621952][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.625176][ T5549] udevd[5549]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 128.642283][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.665882][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.683509][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.706063][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.730142][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.749997][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.765385][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.782439][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.800180][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.817565][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.835927][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.877567][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.884724][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.907470][ T5549] udevd[5549]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 128.936431][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.943818][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 128.989243][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.021670][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.044955][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.069916][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.102165][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.119901][ T2858] uclogic 0003:2179:0077.0002: unknown main item tag 0x0 [ 129.141559][ T5005] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 129.145738][ T2858] uclogic 0003:2179:0077.0002: No inputs registered, leaving [ 129.213125][ T2858] uclogic 0003:2179:0077.0002: hidraw0: USB HID v0.01 Device [HID 2179:0077] on usb-dummy_hcd.0-1/input0 [ 129.291058][ T5549] udevd[5549]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 129.292523][ T2858] usb 1-1: USB disconnect, device number 2 [ 129.311249][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system [ 129.327810][ T5569] loop3: detected capacity change from 0 to 128 [ 129.364487][ T4233] usb 3-1: USB disconnect, device number 2 [ 129.469881][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,errors=remount-ro,nodioread_nolock,nolazytime,. Quota mode: none. [ 129.501543][ T5575] fido_id[5575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 129.523397][ T5569] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.555775][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.582567][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/141.tmp-b7:3' failed: Read-only file system [ 129.632288][ T5569] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.441: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 129.634486][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 129.736751][ T5569] EXT4-fs (loop3): Remounting filesystem read-only [ 129.741896][ T4308] udevd[4308]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 129.810617][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 129.849194][ T5581] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 129.892615][ T5581] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 129.916281][ T5581] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 129.969867][ T5586] loop2: detected capacity change from 0 to 512 [ 129.991296][ T5586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.100959][ T5587] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 130.105512][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.125205][ T5586] EXT4-fs (loop2): 1 truncate cleaned up [ 130.134691][ T5586] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 130.161161][ T5589] bond2: (slave gretap1): making interface the new active one [ 130.170189][ T5589] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 130.245813][ T5591] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 130.373881][ T5591] team0: Port device netdevsim0 added [ 130.527069][ T5595] wireguard: wg1: Could not create IPv4 socket [ 131.233136][ T5606] loop2: detected capacity change from 0 to 512 [ 131.325373][ T2858] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 131.341852][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.412146][ T5604] binder: 5603:5604 ioctl c0285840 200000000000 returned -22 [ 131.422902][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.422967][ T5606] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.471492][ T5606] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 131.481902][ T5606] System zones: 0-2, 18-18, 34-35 [ 131.494574][ T5606] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000080000,dioread_nolock,stripe=0x0000000000008001,minixdf,debug,,errors=continue. Quota mode: writeback. [ 131.515513][ T5606] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.526309][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.544990][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 131.565375][ T7] usb 1-1: SerialNumber: syz [ 131.710719][ T5612] loop2: detected capacity change from 0 to 512 [ 131.731734][ T5612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.751324][ T5612] EXT4-fs (loop2): 1 truncate cleaned up [ 131.758589][ T5612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.796144][ T2858] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 131.815650][ T2858] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 131.823934][ T2858] usb 4-1: config 0 has no interface number 0 [ 131.838882][ T2858] usb 4-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 131.854253][ T2858] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 131.858134][ T7] usb 1-1: 0:2 : does not exist [ 131.876149][ T7] usb 1-1: USB disconnect, device number 3 [ 131.904604][ T2858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.951241][ T2858] usb 4-1: config 0 descriptor?? [ 132.758272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774820][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165769][ T5629] binder: 5616:5629 ioctl c0285840 200000000000 returned -22 [ 133.241108][ T4308] udevd[4308]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 133.368345][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 133.388594][ T5641] netlink: 'syz.0.463': attribute type 10 has an invalid length. [ 133.462043][ T5641] team0: Port device netdevsim0 added [ 133.462097][ T5549] udevd[5549]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 133.495124][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 133.558271][ T5549] udevd[5549]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 133.560906][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.667230][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 133.707711][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 133.790071][ T5549] udevd[5549]: symlink '../../loop0' '/dev/disk/by-diskseq/138.tmp-b7:0' failed: Read-only file system [ 133.806631][ T4233] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 133.828240][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 133.839470][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 133.873416][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/140.tmp-b7:1' failed: Read-only file system [ 133.901442][ T5663] loop1: detected capacity change from 0 to 512 [ 133.960987][ T5663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.980518][ T5663] EXT4-fs (loop1): 1 truncate cleaned up [ 133.986567][ T5663] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 134.043631][ T4238] usb 4-1: USB disconnect, device number 3 [ 134.175567][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 134.194389][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.206815][ T23] usb 3-1: Product: syz [ 134.211090][ T23] usb 3-1: Manufacturer: syz [ 134.221601][ T23] usb 3-1: SerialNumber: syz [ 134.235894][ T23] usb 3-1: config 0 descriptor?? [ 134.249151][ T4233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 134.725295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.745284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.755279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.765293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.775280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.785279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.795278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.805278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.815276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.825277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 134.969990][ T4233] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.988437][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.995591][ T4233] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 135.004742][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.044274][ T5673] binder: 5668:5673 ioctl c0285840 200000000000 returned -22 [ 135.059523][ T4233] usb 5-1: config 0 descriptor?? [ 135.145652][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.491697][ T5690] loop0: detected capacity change from 0 to 1024 [ 135.548067][ T4233] hid-generic 0003:0955:7214.0004: unknown main item tag 0x1 [ 135.567849][ T4233] hid-generic 0003:0955:7214.0004: item fetching failed at offset 5/40 [ 135.579626][ T5690] EXT4-fs (loop0): invalid inodes per group: 150994976 [ 135.579626][ T5690] [ 135.596063][ T4233] hid-generic: probe of 0003:0955:7214.0004 failed with error -22 [ 135.675569][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 135.703817][ T23] usb 3-1: USB disconnect, device number 3 [ 135.764607][ T4233] usb 5-1: USB disconnect, device number 5 [ 135.956090][ T4235] Bluetooth: hci4: command 0x0405 tx timeout [ 136.911511][ T5715] binder: 5708:5715 ioctl c0285840 200000000000 returned -22 [ 137.136673][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 137.211296][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 137.316486][ T5721] netlink: 'syz.2.493': attribute type 4 has an invalid length. [ 137.348706][ T5721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.493'. [ 137.374288][ T5721] .`: renamed from bond0 [ 137.656906][ T5733] binder: 5728:5733 ioctl c0285840 200000000000 returned -22 [ 137.666517][ T5735] device syzkaller0 entered promiscuous mode [ 137.822084][ T5741] netlink: 216 bytes leftover after parsing attributes in process `syz.3.500'. [ 137.915879][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.165543][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 138.285594][ T4235] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 138.371662][ T4235] usb 1-1: config 1 has no interface number 0 [ 138.606584][ T4235] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.759783][ T5549] udevd[5549]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 138.822502][ T4235] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.933453][ T4235] usb 1-1: config 1 interface 105 has no altsetting 0 [ 138.942905][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 139.048578][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/150.tmp-b7:1' failed: Read-only file system [ 139.092366][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 139.105571][ T4235] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 139.134680][ T5549] udevd[5549]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 139.135353][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 139.176012][ T4235] usb 1-1: Product: syz [ 139.180291][ T4235] usb 1-1: Manufacturer: syz [ 139.191363][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 139.203372][ T4235] usb 1-1: SerialNumber: syz [ 139.245625][ T5737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.253467][ T4308] udevd[4308]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 139.256663][ T5781] binder: 5777:5781 ioctl c0285840 200000000000 returned -22 [ 139.284684][ T5737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.336922][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/150.tmp-b7:1' failed: Read-only file system [ 139.393666][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 139.455041][ T4266] udevd[4266]: symlink '../../loop2' '/dev/disk/by-diskseq/148.tmp-b7:2' failed: Read-only file system [ 139.524993][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/150.tmp-b7:1' failed: Read-only file system [ 139.995415][ T2858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.251282][ T5737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.326615][ T5737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.742108][ T5806] loop2: detected capacity change from 0 to 512 [ 140.837833][ T5806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.867543][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 140.885195][ T5806] EXT4-fs (loop2): 1 truncate cleaned up [ 140.891311][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 141.101002][ T4235] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 141.155944][ T2858] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.235575][ T5817] wireguard: wg1: Could not create IPv4 socket [ 141.641166][ T2858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.681695][ T2858] usb 4-1: config 0 descriptor?? [ 141.822716][ T4235] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 141.853810][ T4235] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:03:1b:e6:47:b0 [ 141.870754][ T4235] usb 1-1: USB disconnect, device number 4 [ 141.879375][ T4235] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 141.992316][ T4235] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 142.004540][ T5821] tmpfs: Unknown parameter 'usrquota' [ 142.010266][ T2858] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 142.010730][ T4235] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 142.025355][ T2858] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 142.059759][ T4235] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 142.095525][ T2858] [drm:udl_init] *ERROR* Selecting channel failed [ 142.150106][ T2858] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 142.168216][ T2858] [drm] Initialized udl on minor 2 [ 142.203137][ T2858] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.226494][ T2858] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 142.260667][ T2858] usb 4-1: USB disconnect, device number 4 [ 142.307347][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 142.323074][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 142.356218][ T5829] device batadv_slave_0 entered promiscuous mode [ 142.373397][ T5829] device batadv_slave_0 left promiscuous mode [ 142.386093][ T23] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 142.404789][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.655467][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 142.845517][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.975908][ T2858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.983774][ T5843] binder: 5842:5843 ioctl c0306201 200000002080 returned -14 [ 143.085570][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 143.112533][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.140107][ T7] usb 5-1: Product: syz [ 143.144352][ T7] usb 5-1: Manufacturer: syz [ 143.173634][ T7] usb 5-1: SerialNumber: syz [ 143.225516][ T2858] usb 4-1: Using ep0 maxpacket: 8 [ 143.365674][ T2858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.381611][ T2858] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 143.401198][ T2858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.420289][ T2858] usb 4-1: config 0 descriptor?? [ 143.467628][ T2858] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 143.545856][ T7] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 143.585748][ T7] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 143.642896][ T7] usb 5-1: USB disconnect, device number 6 [ 143.810512][ T4237] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 143.883637][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 143.947201][ T4308] udevd[4308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.978239][ T5871] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 144.004110][ T4288] udevd[4288]: symlink '../../loop2' '/dev/disk/by-diskseq/154.tmp-b7:2' failed: Read-only file system [ 144.283241][ T5877] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 144.294952][ T5877] bond0: (slave vxcan1): Error -22 calling dev_set_mtu [ 144.314199][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 144.345565][ T4237] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.353635][ T4237] usb 2-1: config 0 has no interface number 0 [ 144.374899][ T5883] loop2: detected capacity change from 0 to 1024 [ 144.376345][ T4237] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.414778][ T4237] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 144.432636][ T5883] EXT4-fs (loop2): invalid inodes per group: 150994976 [ 144.432636][ T5883] [ 144.468717][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 144.472144][ T4237] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.498785][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 144.532670][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 144.540773][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.576428][ T4266] udevd[4266]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 144.598965][ T4237] usb 2-1: config 0 descriptor?? [ 144.625772][ T5864] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 144.628690][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 144.668439][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 144.686520][ T4237] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.797124][ T4308] udevd[4308]: symlink '../../loop2' '/dev/disk/by-diskseq/155.tmp-b7:2' failed: Read-only file system [ 144.977495][ T2858] usb 2-1: USB disconnect, device number 4 [ 145.095428][ T4237] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 145.112875][ T23] usb 4-1: USB disconnect, device number 5 [ 145.327037][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 145.336638][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 145.367878][ T5894] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 145.398387][ T5894] netlink: 152 bytes leftover after parsing attributes in process `syz.4.556'. [ 145.413037][ T5894] .`: renamed from bond0 [ 145.416646][ T5898] loop2: detected capacity change from 0 to 512 [ 145.494253][ T5898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.577397][ T5898] EXT4-fs (loop2): 1 truncate cleaned up [ 145.585484][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 145.615650][ T4237] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.629654][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.638210][ T4237] usb 1-1: Product: syz [ 145.643036][ T4237] usb 1-1: Manufacturer: syz [ 145.648276][ T4237] usb 1-1: SerialNumber: syz [ 145.664582][ T4237] usb 1-1: config 0 descriptor?? [ 146.133086][ T5916] wireguard: wg1: Could not create IPv4 socket [ 146.487668][ T5919] loop1: detected capacity change from 0 to 128 [ 146.767348][ T5919] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.562'. [ 147.031383][ T4237] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.495449][ T4237] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 148.509728][ T4237] usb 1-1: USB disconnect, device number 5 [ 148.520714][ T5961] loop2: detected capacity change from 0 to 512 [ 148.603954][ T5961] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.604993][ T5145] attempt to access beyond end of device [ 148.604993][ T5145] loop1: rw=1, want=1041, limit=128 [ 148.621642][ T5961] EXT4-fs (loop2): 1 truncate cleaned up [ 148.625433][ T5005] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.636794][ T5961] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 149.515864][ T5549] udevd[5549]: symlink '../../loop1' '/dev/disk/by-diskseq/161.tmp-b7:1' failed: Read-only file system [ 149.660764][ T5549] udevd[5549]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 149.713842][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/161.tmp-b7:1' failed: Read-only file system [ 149.730866][ T5549] udevd[5549]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system [ 149.757969][ T5549] udevd[5549]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system [ 149.790641][ T5549] udevd[5549]: symlink '../../loop2' '/dev/disk/by-diskseq/162.tmp-b7:2' failed: Read-only file system [ 149.815760][ T5005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.827314][ T4237] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.841909][ T5005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.852640][ T5005] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 149.870251][ T5005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.883423][ T5005] usb 5-1: config 0 descriptor?? [ 150.035535][ T1326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.090407][ T4308] udevd[4308]: symlink '../../loop1' '/dev/disk/by-diskseq/161.tmp-b7:1' failed: Read-only file system [ 150.187518][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.199889][ T4237] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.211865][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.229480][ T4237] usb 1-1: config 0 descriptor?? [ 150.268401][ T4237] pwc: Askey VC010 type 2 USB webcam detected. [ 150.285372][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 150.369269][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.389148][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.398320][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.411202][ T1326] usb 3-1: config 0 has no interfaces? [ 150.418275][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.430683][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.439615][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.452658][ T5005] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 150.470991][ T5005] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 150.495500][ T1326] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 150.511422][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 150.519955][ T1326] usb 3-1: Product: syz [ 150.534630][ T1326] usb 3-1: config 0 descriptor?? [ 150.585556][ T5005] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 150.679354][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 150.695448][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.742347][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.745523][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 150.785423][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.835527][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.875425][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.915402][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.955418][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.995505][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 151.035946][ T4237] pwc: recv_control_msg error -32 req 04 val 1500 [ 151.075524][ T4237] pwc: recv_control_msg error -32 req 02 val 2500 [ 151.089037][ T4266] udevd[4266]: symlink '../../loop3' '/dev/disk/by-diskseq/143.tmp-b7:3' failed: Read-only file system [ 151.125488][ T4237] pwc: recv_control_msg error -32 req 02 val 2400 [ 151.395565][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.415418][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.429981][ T1326] usb 5-1: USB disconnect, device number 7 [ 151.436107][ T4235] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 151.443888][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.465410][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.495996][ T4237] pwc: Registered as video103. [ 151.526982][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 151.545878][ T4237] usb 1-1: USB disconnect, device number 6 [ 151.705360][ T5005] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.835654][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.876079][ T4235] usb 4-1: not running at top speed; connect to a high speed hub [ 152.028574][ T6011] loop0: detected capacity change from 0 to 512 [ 152.064734][ T6011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.065683][ T5005] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 152.113554][ T5005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.135186][ T5005] usb 2-1: config 0 descriptor?? [ 152.139869][ T6011] EXT4-fs (loop0): 1 truncate cleaned up [ 152.152561][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 152.325641][ T4235] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 152.362406][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.391702][ T4235] usb 4-1: Product: ಩䭐䙑땒兘䴴凉哀䪫僧ղ蹪횭똕띀糃判뜣혏ط菒섶吨뤍輬庹괴톌ꊵꁖល㻅Ⲓ䤿堳銲˛炛踎筪囤쎿甴㤳旛ⵐ밋뵋墾᠇蛅Ⳑ퇿筸্ [ 152.545623][ T5005] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 152.601601][ T5005] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 152.785628][ T5005] [drm:udl_init] *ERROR* Selecting channel failed [ 152.890820][ T4235] usb 4-1: SerialNumber: 䆀૲총垜몦ﺧ堐끲짌舧孃昜拄꺒ﻛ辖龺䶁᫑䲘쭻䴩쌜幃뱭ↆ哐턳ᅢᚩ薺䣖ﹰ跬㰎묑̒✺黈投쬮⹏鑏㤗ᇍ༻魔ﲏ᝭㫹앰驚抜턠㘨䈸阉섁⢺㸲삥粇㙓텀⛒낌Ѓ␳ǥ鋠䲛咱嫲ꏞꫵ [ 152.961422][ T5005] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 153.014323][ T5005] [drm] Initialized udl on minor 2 [ 153.065738][ T5005] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 153.112495][ T5005] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 153.140173][ T5005] usb 2-1: USB disconnect, device number 5 [ 153.193672][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 153.204152][ T4237] usb 3-1: USB disconnect, device number 4 [ 153.246012][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 153.254515][ T1108] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 153.359151][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 153.377284][ T4235] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 153.594393][ T6043] loop1: detected capacity change from 0 to 512 [ 153.601118][ T4237] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 153.732414][ T6043] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.753395][ T6043] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.795430][ T2858] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.825450][ T4235] gp8psk: usb in 137 operation failed. [ 153.831362][ T4235] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 153.842355][ T4235] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 153.882860][ T4235] usb 4-1: USB disconnect, device number 6 [ 154.035376][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.075356][ T2858] usb 5-1: Using ep0 maxpacket: 32 [ 154.121902][ T6058] netlink: 'syz.1.604': attribute type 10 has an invalid length. [ 154.134663][ T6058] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 154.145792][ T4237] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 154.163313][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.172858][ T4237] usb 3-1: Product: syz [ 154.177442][ T4237] usb 3-1: Manufacturer: syz [ 154.182098][ T4237] usb 3-1: SerialNumber: syz [ 154.193444][ T4237] usb 3-1: config 0 descriptor?? [ 154.205792][ T6060] [ 154.208165][ T6060] ====================================================== [ 154.215351][ T6060] WARNING: possible circular locking dependency detected [ 154.222661][ T6060] syzkaller #0 Not tainted [ 154.227166][ T6060] ------------------------------------------------------ [ 154.234283][ T6060] syz.1.605/6060 is trying to acquire lock: [ 154.237172][ T4237] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 154.240502][ T6060] ffff88807d9d0120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.240562][ T6060] [ 154.240562][ T6060] but task is already holding lock: [ 154.240569][ T6060] ffffc9000182deb0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 154.274086][ T6060] [ 154.274086][ T6060] which lock already depends on the new lock. [ 154.274086][ T6060] [ 154.275315][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 154.284492][ T6060] [ 154.284492][ T6060] the existing dependency chain (in reverse order) is: [ 154.284503][ T6060] [ 154.284503][ T6060] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 154.284538][ T6060] _raw_spin_lock+0x2a/0x40 [ 154.311812][ T6060] __inet_hash+0xe3/0x960 [ 154.316755][ T6060] inet_csk_listen_start+0x22f/0x320 [ 154.322794][ T6060] inet_listen+0x2e1/0x590 [ 154.327900][ T6060] __sys_listen+0x19d/0x220 [ 154.332954][ T6060] __x64_sys_listen+0x56/0x60 [ 154.338315][ T6060] do_syscall_64+0x4c/0xa0 [ 154.343270][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.349718][ T6060] [ 154.349718][ T6060] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 154.357564][ T6060] __lock_acquire+0x2c42/0x7d10 [ 154.363187][ T6060] lock_acquire+0x19e/0x400 [ 154.368244][ T6060] mptcp_diag_get_info+0x1f2/0x9e0 [ 154.374218][ T6060] inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.379965][ T6060] mptcp_diag_dump+0xce6/0x12b0 [ 154.385503][ T6060] __inet_diag_dump+0x1f6/0x380 [ 154.391211][ T6060] netlink_dump+0x694/0xcf0 [ 154.396536][ T6060] __netlink_dump_start+0x523/0x700 [ 154.402541][ T6060] inet_diag_handler_cmd+0x1d3/0x2b0 [ 154.408444][ T6060] sock_diag_rcv_msg+0x164/0x3e0 [ 154.414007][ T6060] netlink_rcv_skb+0x1f5/0x440 [ 154.419314][ T6060] sock_diag_rcv+0x26/0x40 [ 154.424239][ T6060] netlink_unicast+0x774/0x920 [ 154.429518][ T6060] netlink_sendmsg+0x8ba/0xbe0 [ 154.434813][ T6060] sock_write_iter+0x2a6/0x3a0 [ 154.440233][ T6060] do_iter_readv_writev+0x47e/0x5f0 [ 154.446060][ T6060] do_iter_write+0x205/0x7b0 [ 154.451466][ T6060] do_writev+0x281/0x480 [ 154.456338][ T6060] do_syscall_64+0x4c/0xa0 [ 154.461357][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.467791][ T6060] [ 154.467791][ T6060] other info that might help us debug this: [ 154.467791][ T6060] [ 154.478201][ T6060] Possible unsafe locking scenario: [ 154.478201][ T6060] [ 154.485776][ T6060] CPU0 CPU1 [ 154.491239][ T6060] ---- ---- [ 154.496599][ T6060] lock(&h->lhash2[i].lock); [ 154.501452][ T6060] lock(sk_lock-AF_INET6); [ 154.508851][ T6060] lock(&h->lhash2[i].lock); [ 154.516271][ T6060] lock(sk_lock-AF_INET6); [ 154.520771][ T6060] [ 154.520771][ T6060] *** DEADLOCK *** [ 154.520771][ T6060] [ 154.529086][ T6060] 6 locks held by syz.1.605/6060: [ 154.534113][ T6060] #0: ffffffff8d446f68 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 154.543593][ T6060] #1: ffffffff8d446e28 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 154.554341][ T6060] #2: ffff8880205d5698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 154.565206][ T6060] #3: ffffffff8d521028 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 154.565490][ T7] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 154.575596][ T6060] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 154.575659][ T6060] #5: ffffc9000182deb0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 154.575705][ T6060] [ 154.575705][ T6060] stack backtrace: [ 154.575712][ T6060] CPU: 1 PID: 6060 Comm: syz.1.605 Not tainted syzkaller #0 [ 154.575729][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.575738][ T6060] Call Trace: [ 154.575745][ T6060] [ 154.575762][ T6060] dump_stack_lvl+0x188/0x250 [ 154.575782][ T6060] ? load_image+0x400/0x400 [ 154.575798][ T6060] ? show_regs_print_info+0x20/0x20 [ 154.575820][ T6060] ? print_circular_bug+0x12b/0x1a0 [ 154.575841][ T6060] check_noncircular+0x296/0x330 [ 154.575870][ T6060] ? add_chain_block+0x940/0x940 [ 154.575887][ T6060] ? lockdep_lock+0xf1/0x1f0 [ 154.575909][ T6060] ? mark_lock+0x94/0x320 [ 154.575927][ T6060] ? mark_lock+0x94/0x320 [ 154.575944][ T6060] __lock_acquire+0x2c42/0x7d10 [ 154.575973][ T6060] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 154.575996][ T6060] ? verify_lock_unused+0x140/0x140 [ 154.576019][ T6060] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 154.576042][ T6060] ? verify_lock_unused+0x140/0x140 [ 154.576063][ T6060] ? __local_bh_enable_ip+0xd7/0x1c0 [ 154.576082][ T6060] ? __local_bh_enable_ip+0x136/0x1c0 [ 154.588021][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.594808][ T6060] ? lockdep_hardirqs_on+0x94/0x140 [ 154.594844][ T6060] ? __local_bh_enable_ip+0x136/0x1c0 [ 154.594862][ T6060] ? _local_bh_enable+0xa0/0xa0 [ 154.594878][ T6060] ? nla_put+0x130/0x1e0 [ 154.594894][ T6060] lock_acquire+0x19e/0x400 [ 154.594915][ T6060] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.594938][ T6060] ? read_lock_is_recursive+0x10/0x10 [ 154.594959][ T6060] ? rcu_lock_release+0x5/0x20 [ 154.594978][ T6060] ? __lock_acquire+0x7d10/0x7d10 [ 154.594998][ T6060] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.595017][ T6060] mptcp_diag_get_info+0x1f2/0x9e0 [ 154.595035][ T6060] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.595055][ T6060] inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.595080][ T6060] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 154.612557][ T7] usb 1-1: Product: syz [ 154.619014][ T6060] ? do_raw_spin_lock+0x128/0x2f0 [ 154.619048][ T6060] ? __rwlock_init+0x140/0x140 [ 154.619066][ T6060] ? inet_diag_bc_sk+0x18b/0x1120 [ 154.619088][ T6060] mptcp_diag_dump+0xce6/0x12b0 [ 154.619116][ T6060] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 154.631357][ T7] usb 1-1: Manufacturer: syz [ 154.632553][ T6060] __inet_diag_dump+0x1f6/0x380 [ 154.635852][ T7] usb 1-1: SerialNumber: syz [ 154.640454][ T6060] netlink_dump+0x694/0xcf0 [ 154.640483][ T6060] ? netlink_lookup+0x1d0/0x1d0 [ 154.653854][ T7] usb 1-1: config 0 descriptor?? [ 154.655480][ T6060] ? __inet_diag_dump_start+0x805/0x970 [ 154.655512][ T6060] __netlink_dump_start+0x523/0x700 [ 154.655535][ T6060] inet_diag_handler_cmd+0x1d3/0x2b0 [ 154.655557][ T6060] ? rcu_lock_release+0x20/0x20 [ 154.655577][ T6060] ? inet_diag_handler_get_info+0xb90/0xb90 [ 154.655596][ T6060] ? inet_diag_dump_start+0x20/0x20 [ 154.698551][ T7] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 154.701764][ T6060] ? inet_diag_dump+0x50/0x50 [ 154.701797][ T6060] ? rcu_lock_release+0x20/0x20 [ 154.708960][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 154.712586][ T6060] sock_diag_rcv_msg+0x164/0x3e0 [ 154.718474][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.726262][ T6060] netlink_rcv_skb+0x1f5/0x440 [ 154.726286][ T6060] ? sock_diag_bind+0xa0/0xa0 [ 154.726305][ T6060] ? netlink_ack+0xb50/0xb50 [ 154.726321][ T6060] ? __lock_acquire+0x7d10/0x7d10 [ 154.726348][ T6060] sock_diag_rcv+0x26/0x40 [ 154.726365][ T6060] netlink_unicast+0x774/0x920 [ 154.726387][ T6060] netlink_sendmsg+0x8ba/0xbe0 [ 154.726408][ T6060] ? netlink_getsockopt+0x570/0x570 [ 154.726426][ T6060] ? aa_sock_msg_perm+0x94/0x150 [ 154.726446][ T6060] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 154.733892][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 154.737101][ T6060] ? security_socket_sendmsg+0x7c/0xa0 [ 154.737126][ T6060] sock_write_iter+0x2a6/0x3a0 [ 154.737147][ T6060] ? sock_read_iter+0x380/0x380 [ 154.742274][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.746239][ T6060] do_iter_readv_writev+0x47e/0x5f0 [ 154.746263][ T6060] ? aa_path_link+0x880/0x880 [ 154.746284][ T6060] ? generic_file_rw_checks+0x280/0x280 [ 154.746307][ T6060] ? common_file_perm+0x171/0x1c0 [ 154.746328][ T6060] ? fsnotify_perm+0x5d/0x560 [ 154.746349][ T6060] ? security_file_permission+0x75/0xa0 [ 154.746370][ T6060] do_iter_write+0x205/0x7b0 [ 154.759945][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.761924][ T6060] ? import_iovec+0x6f/0xa0 [ 154.761954][ T6060] do_writev+0x281/0x480 [ 154.787019][ T7] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 154.787504][ T6060] ? do_readv+0x460/0x460 [ 154.787535][ T6060] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 154.792670][ T7] usb 1-1: media controller created [ 154.798360][ T6060] ? lock_chain_count+0x20/0x20 [ 154.798383][ T6060] ? vtime_user_exit+0x2c8/0x3e0 [ 154.798405][ T6060] ? lockdep_hardirqs_on+0x94/0x140 [ 154.813246][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.817675][ T6060] do_syscall_64+0x4c/0xa0 [ 154.817703][ T6060] ? clear_bhb_loop+0x30/0x80 [ 154.817721][ T6060] ? clear_bhb_loop+0x30/0x80 [ 154.836866][ T7] usb 1-1: selecting invalid altsetting 3 [ 154.838875][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.843683][ T7] ttusb2: set interface to alts=3 failed [ 154.848192][ T6060] RIP: 0033:0x7f8351ebbdd9 [ 154.848221][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.848237][ T6060] RSP: 002b:00007f8350115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 154.848261][ T6060] RAX: ffffffffffffffda RBX: 00007f8352134fa0 RCX: 00007f8351ebbdd9 [ 154.848275][ T6060] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 154.848286][ T6060] RBP: 00007f8351f51d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.848298][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.848311][ T6060] R13: 00007f8352135038 R14: 00007f8352134fa0 R15: 00007fffc096ee38 [ 154.848331][ T6060] [ 154.848391][ T6060] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 154.848404][ T6060] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6060, name: syz.1.605 [ 154.848419][ T6060] INFO: lockdep is turned off. [ 154.848424][ T6060] Preemption disabled at: [ 154.848429][ T6060] [<0000000000000000>] 0x0 [ 154.848446][ T6060] CPU: 1 PID: 6060 Comm: syz.1.605 Not tainted syzkaller #0 [ 154.872661][ T7] DVB: Unable to find symbol tda10086_attach() [ 154.874568][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.874583][ T6060] Call Trace: [ 154.874590][ T6060] [ 154.874597][ T6060] dump_stack_lvl+0x188/0x250 [ 154.881055][ T7] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 154.885519][ T6060] ? show_regs_print_info+0x20/0x20 [ 154.885544][ T6060] ? load_image+0x400/0x400 [ 154.885567][ T6060] ___might_sleep+0x493/0x610 [ 154.885590][ T6060] ? __might_sleep+0xf0/0xf0 [ 154.885609][ T6060] ? read_lock_is_recursive+0x10/0x10 [ 154.885631][ T6060] ? rcu_lock_release+0x5/0x20 [ 154.885654][ T6060] __lock_sock_fast+0x2f/0xe0 [ 154.885673][ T6060] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.885693][ T6060] mptcp_diag_get_info+0x1fe/0x9e0 [ 154.926670][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 154.929740][ T6060] inet_sk_diag_fill+0xf5e/0x1ca0 [ 154.934788][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.939432][ T6060] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 154.939461][ T6060] ? do_raw_spin_lock+0x128/0x2f0 [ 154.939481][ T6060] ? __rwlock_init+0x140/0x140 [ 154.939497][ T6060] ? inet_diag_bc_sk+0x18b/0x1120 [ 154.939519][ T6060] mptcp_diag_dump+0xce6/0x12b0 [ 154.939545][ T6060] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 154.946720][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 154.949158][ T6060] __inet_diag_dump+0x1f6/0x380 [ 154.953633][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.958342][ T6060] netlink_dump+0x694/0xcf0 [ 154.958367][ T6060] ? netlink_lookup+0x1d0/0x1d0 [ 154.958388][ T6060] ? __inet_diag_dump_start+0x805/0x970 [ 154.958410][ T6060] __netlink_dump_start+0x523/0x700 [ 154.958432][ T6060] inet_diag_handler_cmd+0x1d3/0x2b0 [ 154.958454][ T6060] ? rcu_lock_release+0x20/0x20 [ 154.958471][ T6060] ? inet_diag_handler_get_info+0xb90/0xb90 [ 154.964281][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 154.968548][ T6060] ? inet_diag_dump_start+0x20/0x20 [ 154.968573][ T6060] ? inet_diag_dump+0x50/0x50 [ 154.968595][ T6060] ? rcu_lock_release+0x20/0x20 [ 154.968615][ T6060] sock_diag_rcv_msg+0x164/0x3e0 [ 154.968638][ T6060] netlink_rcv_skb+0x1f5/0x440 [ 154.968658][ T6060] ? sock_diag_bind+0xa0/0xa0 [ 154.968676][ T6060] ? netlink_ack+0xb50/0xb50 [ 154.987096][ T7] usb 1-1: USB disconnect, device number 7 [ 154.990114][ T6060] ? __lock_acquire+0x7d10/0x7d10 [ 155.032118][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 155.035473][ T6060] sock_diag_rcv+0x26/0x40 [ 155.035502][ T6060] netlink_unicast+0x774/0x920 [ 155.035524][ T6060] netlink_sendmsg+0x8ba/0xbe0 [ 155.035547][ T6060] ? netlink_getsockopt+0x570/0x570 [ 155.530111][ T6060] ? aa_sock_msg_perm+0x94/0x150 [ 155.535146][ T6060] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 155.540431][ T6060] ? security_socket_sendmsg+0x7c/0xa0 [ 155.545887][ T6060] sock_write_iter+0x2a6/0x3a0 [ 155.550654][ T6060] ? sock_read_iter+0x380/0x380 [ 155.555501][ T6060] do_iter_readv_writev+0x47e/0x5f0 [ 155.560759][ T6060] ? aa_path_link+0x880/0x880 [ 155.565430][ T6060] ? generic_file_rw_checks+0x280/0x280 [ 155.571101][ T6060] ? common_file_perm+0x171/0x1c0 [ 155.576119][ T6060] ? fsnotify_perm+0x5d/0x560 [ 155.580893][ T6060] ? security_file_permission+0x75/0xa0 [ 155.586516][ T6060] do_iter_write+0x205/0x7b0 [ 155.591109][ T6060] ? import_iovec+0x6f/0xa0 [ 155.595607][ T6060] do_writev+0x281/0x480 [ 155.599849][ T6060] ? do_readv+0x460/0x460 [ 155.604175][ T6060] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 155.610145][ T6060] ? lock_chain_count+0x20/0x20 [ 155.614987][ T6060] ? vtime_user_exit+0x2c8/0x3e0 [ 155.619916][ T6060] ? lockdep_hardirqs_on+0x94/0x140 [ 155.625112][ T6060] do_syscall_64+0x4c/0xa0 [ 155.629602][ T6060] ? clear_bhb_loop+0x30/0x80 [ 155.634356][ T6060] ? clear_bhb_loop+0x30/0x80 [ 155.639114][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.645109][ T6060] RIP: 0033:0x7f8351ebbdd9 [ 155.649519][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.669231][ T6060] RSP: 002b:00007f8350115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 155.677637][ T6060] RAX: ffffffffffffffda RBX: 00007f8352134fa0 RCX: 00007f8351ebbdd9 [ 155.685712][ T6060] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 155.693679][ T6060] RBP: 00007f8351f51d69 R08: 0000000000000000 R09: 0000000000000000 [ 155.701684][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.709745][ T6060] R13: 00007f8352135038 R14: 00007f8352134fa0 R15: 00007fffc096ee38 [ 155.717849][ T6060] [ 155.721135][ T6060] BUG: scheduling while atomic: syz.1.605/6060/0x00000002 [ 155.728342][ T6060] INFO: lockdep is turned off. [ 155.733264][ T6060] Modules linked in: [ 155.737279][ T6060] Preemption disabled at: [ 155.737287][ T6060] [<0000000000000000>] 0x0 [ 155.746034][ T6060] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 155.754969][ T6060] CPU: 1 PID: 6060 Comm: syz.1.605 Tainted: G W syzkaller #0 [ 155.763835][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.773908][ T6060] Call Trace: [ 155.777818][ T6060] [ 155.780759][ T6060] dump_stack_lvl+0x188/0x250 [ 155.785450][ T6060] ? show_regs_print_info+0x20/0x20 [ 155.790668][ T6060] ? load_image+0x400/0x400 [ 155.795189][ T6060] panic+0x2e5/0x810 [ 155.799265][ T6060] ? bpf_jit_dump+0xd0/0xd0 [ 155.803770][ T6060] ? vprintk_emit+0xf9/0x150 [ 155.808359][ T6060] ? _printk+0xda/0x130 [ 155.812515][ T6060] check_panic_on_warn+0x80/0xa0 [ 155.817580][ T6060] __schedule_bug+0x193/0x1f0 [ 155.822251][ T6060] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 155.827640][ T6060] __schedule+0x1324/0x43c0 [ 155.832141][ T6060] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 155.837853][ T6060] ? prepare_to_wait_exclusive+0xc5/0x220 [ 155.843564][ T6060] ? do_raw_spin_lock+0x128/0x2f0 [ 155.848714][ T6060] ? __kthread_should_park+0xa2/0xe0 [ 155.854102][ T6060] ? lock_chain_count+0x20/0x20 [ 155.858962][ T6060] ? lock_release+0xb5/0x8a0 [ 155.863541][ T6060] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 155.869854][ T6060] ? __lock_sock+0x159/0x2b0 [ 155.874464][ T6060] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.880376][ T6060] ? release_firmware_map_entry+0x190/0x190 [ 155.886283][ T6060] ? __lock_sock+0x159/0x2b0 [ 155.890889][ T6060] ? __local_bh_enable_ip+0x136/0x1c0 [ 155.896274][ T6060] ? _local_bh_enable+0xa0/0xa0 [ 155.901140][ T6060] schedule+0x11b/0x1e0 [ 155.905436][ T6060] __lock_sock+0x15e/0x2b0 [ 155.909879][ T6060] ? sk_page_frag_refill+0x200/0x200 [ 155.915480][ T6060] ? do_raw_spin_lock+0x128/0x2f0 [ 155.920707][ T6060] ? init_wait_entry+0xd0/0xd0 [ 155.925750][ T6060] ? __rwlock_init+0x140/0x140 [ 155.931087][ T6060] ? rcu_lock_release+0x5/0x20 [ 155.936040][ T6060] ? __lock_sock_fast+0x43/0xe0 [ 155.940980][ T6060] __lock_sock_fast+0x78/0xe0 [ 155.945672][ T6060] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 155.950874][ T6060] mptcp_diag_get_info+0x1fe/0x9e0 [ 155.956002][ T6060] inet_sk_diag_fill+0xf5e/0x1ca0 [ 155.961037][ T6060] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 155.967018][ T6060] ? do_raw_spin_lock+0x128/0x2f0 [ 155.972066][ T6060] ? __rwlock_init+0x140/0x140 [ 155.976934][ T6060] ? inet_diag_bc_sk+0x18b/0x1120 [ 155.982055][ T6060] mptcp_diag_dump+0xce6/0x12b0 [ 155.986908][ T6060] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 155.993587][ T6060] __inet_diag_dump+0x1f6/0x380 [ 155.998437][ T6060] netlink_dump+0x694/0xcf0 [ 156.003059][ T6060] ? netlink_lookup+0x1d0/0x1d0 [ 156.008921][ T6060] ? __inet_diag_dump_start+0x805/0x970 [ 156.014859][ T6060] __netlink_dump_start+0x523/0x700 [ 156.020363][ T6060] inet_diag_handler_cmd+0x1d3/0x2b0 [ 156.025833][ T6060] ? rcu_lock_release+0x20/0x20 [ 156.030689][ T6060] ? inet_diag_handler_get_info+0xb90/0xb90 [ 156.036751][ T6060] ? inet_diag_dump_start+0x20/0x20 [ 156.041938][ T6060] ? inet_diag_dump+0x50/0x50 [ 156.046710][ T6060] ? rcu_lock_release+0x20/0x20 [ 156.051549][ T6060] sock_diag_rcv_msg+0x164/0x3e0 [ 156.056477][ T6060] netlink_rcv_skb+0x1f5/0x440 [ 156.061232][ T6060] ? sock_diag_bind+0xa0/0xa0 [ 156.065985][ T6060] ? netlink_ack+0xb50/0xb50 [ 156.070572][ T6060] ? __lock_acquire+0x7d10/0x7d10 [ 156.075591][ T6060] sock_diag_rcv+0x26/0x40 [ 156.080011][ T6060] netlink_unicast+0x774/0x920 [ 156.084762][ T6060] netlink_sendmsg+0x8ba/0xbe0 [ 156.089984][ T6060] ? netlink_getsockopt+0x570/0x570 [ 156.095272][ T6060] ? aa_sock_msg_perm+0x94/0x150 [ 156.100213][ T6060] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 156.105687][ T6060] ? security_socket_sendmsg+0x7c/0xa0 [ 156.111232][ T6060] sock_write_iter+0x2a6/0x3a0 [ 156.116449][ T6060] ? sock_read_iter+0x380/0x380 [ 156.121307][ T6060] do_iter_readv_writev+0x47e/0x5f0 [ 156.126522][ T6060] ? aa_path_link+0x880/0x880 [ 156.131204][ T6060] ? generic_file_rw_checks+0x280/0x280 [ 156.136745][ T6060] ? common_file_perm+0x171/0x1c0 [ 156.141766][ T6060] ? fsnotify_perm+0x5d/0x560 [ 156.146889][ T6060] ? security_file_permission+0x75/0xa0 [ 156.152424][ T6060] do_iter_write+0x205/0x7b0 [ 156.157002][ T6060] ? import_iovec+0x6f/0xa0 [ 156.161521][ T6060] do_writev+0x281/0x480 [ 156.165754][ T6060] ? do_readv+0x460/0x460 [ 156.170185][ T6060] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 156.176160][ T6060] ? lock_chain_count+0x20/0x20 [ 156.181007][ T6060] ? vtime_user_exit+0x2c8/0x3e0 [ 156.185941][ T6060] ? lockdep_hardirqs_on+0x94/0x140 [ 156.191225][ T6060] do_syscall_64+0x4c/0xa0 [ 156.195635][ T6060] ? clear_bhb_loop+0x30/0x80 [ 156.200313][ T6060] ? clear_bhb_loop+0x30/0x80 [ 156.204987][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.211042][ T6060] RIP: 0033:0x7f8351ebbdd9 [ 156.215472][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.235168][ T6060] RSP: 002b:00007f8350115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 156.244004][ T6060] RAX: ffffffffffffffda RBX: 00007f8352134fa0 RCX: 00007f8351ebbdd9 [ 156.251974][ T6060] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 156.260048][ T6060] RBP: 00007f8351f51d69 R08: 0000000000000000 R09: 0000000000000000 [ 156.268010][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.275972][ T6060] R13: 00007f8352135038 R14: 00007f8352134fa0 R15: 00007fffc096ee38 [ 156.283958][ T6060] [ 156.287059][ T6060] Kernel Offset: disabled [ 156.291474][ T6060] Rebooting in 86400 seconds..