last executing test programs: 14.438774105s ago: executing program 1 (id=458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 12.02108427s ago: executing program 2 (id=467): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r5, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) 11.962913878s ago: executing program 4 (id=468): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 10.626169892s ago: executing program 2 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)=0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' '], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) 10.625601242s ago: executing program 4 (id=470): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") utimes(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}) 10.431679629s ago: executing program 1 (id=472): syz_io_uring_setup(0x599e, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000140)) write$tun(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1fc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x20040014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) unshare(0x8040480) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc, "0020742010000000000000000000fffb00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="10", 0x1, 0xffffffffffffffff) 9.544892213s ago: executing program 2 (id=473): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) 9.224150291s ago: executing program 0 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 8.728350242s ago: executing program 1 (id=476): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f0000000100)=@fd={0xfffffffe, 0x1, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x82, ';\'S;'}, 0x4}) 8.693243464s ago: executing program 0 (id=477): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getrlimit(0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) 7.937989027s ago: executing program 2 (id=478): syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 7.896513887s ago: executing program 1 (id=480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) 7.86181534s ago: executing program 3 (id=481): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 7.850680528s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 6.59559702s ago: executing program 0 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)=0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' '], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) 5.824193759s ago: executing program 3 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.436281123s ago: executing program 4 (id=485): syz_open_dev$loop(&(0x7f0000000000), 0x760, 0x82283) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32=0x0], 0x38}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60"], 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.437928982s ago: executing program 2 (id=486): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) capget(0x0, 0x0) request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) openat$nullb(0xffffffffffffff9c, 0x0, 0x101242, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0}) 4.435983722s ago: executing program 4 (id=487): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 4.417420838s ago: executing program 1 (id=488): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r3, 0x2) 3.231800046s ago: executing program 2 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3.110487139s ago: executing program 0 (id=490): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)) 2.017451627s ago: executing program 1 (id=491): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f0000000100)=@fd={0xfffffffe, 0x1, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x82, ';\'S;'}, 0x4}) 1.988762711s ago: executing program 3 (id=492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000540)=[@free_buffer, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) 1.93838192s ago: executing program 3 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x20, 0x0, 0xf}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x1, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0x4, 0x0, 0x0, 0x8, 0x32, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x7}, {0x4000, 0x25000, 0xb, 0x0, 0x0, 0xff, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x80}, {0xc000, 0x50000, 0xf, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7a, 0x7}, {0xc000, 0x9}, {0xdddd0000}, 0x80000008, 0x0, 0x0, 0x200008, 0x8, 0x800, 0x100000, [0xdd01, 0x0, 0x2]}) 1.735614335s ago: executing program 3 (id=494): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 1.131081581s ago: executing program 4 (id=495): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 57.210273ms ago: executing program 4 (id=496): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r5, &(0x7f0000000900)='B', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) 37.107969ms ago: executing program 3 (id=497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) utime(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 0s ago: executing program 0 (id=498): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 51.811822][ T4170] cgroup: Unknown subsys name 'net' [ 51.927861][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.267135][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.541534][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.659988][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.669003][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.677869][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.690277][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.697641][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.706701][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.714177][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.723556][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.736934][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.795559][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.808908][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.834193][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.908076][ T4184] team0: Port device team_slave_0 added [ 54.914166][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.921195][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.929402][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.942957][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.950022][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.957949][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.976631][ T4184] team0: Port device team_slave_1 added [ 54.982764][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.989917][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.998225][ T4192] device bridge_slave_1 entered promiscuous mode [ 55.015868][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.023826][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.031614][ T4185] device bridge_slave_1 entered promiscuous mode [ 55.065967][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.073775][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.081740][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.095347][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.102587][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.110214][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.118679][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.126152][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.152225][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.165552][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.175013][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.182068][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.190747][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.199291][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.208702][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.216074][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.223983][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.231143][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.238308][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.264629][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.277401][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.298635][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.336725][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.353559][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.370996][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.382877][ T4192] team0: Port device team_slave_0 added [ 55.390018][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.430076][ T4186] team0: Port device team_slave_0 added [ 55.437081][ T4192] team0: Port device team_slave_1 added [ 55.444691][ T4185] team0: Port device team_slave_0 added [ 55.467105][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.474001][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.481771][ T4185] team0: Port device team_slave_1 added [ 55.489092][ T4186] team0: Port device team_slave_1 added [ 55.497183][ T4183] team0: Port device team_slave_0 added [ 55.526393][ T4183] team0: Port device team_slave_1 added [ 55.539750][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.546756][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.573170][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.595746][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.602914][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.629005][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.659870][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.666894][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.693041][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.704598][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.711540][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.737748][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.749352][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.756538][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.782563][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.794257][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.801207][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.827655][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.848377][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.855384][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.881384][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.896530][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.904003][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.930142][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.995794][ T4192] device hsr_slave_0 entered promiscuous mode [ 56.002496][ T4192] device hsr_slave_1 entered promiscuous mode [ 56.009158][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.017310][ T4192] Cannot create hsr debugfs directory [ 56.042761][ T4185] device hsr_slave_0 entered promiscuous mode [ 56.049289][ T4185] device hsr_slave_1 entered promiscuous mode [ 56.056530][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.064274][ T4185] Cannot create hsr debugfs directory [ 56.106592][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.114183][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.120753][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.128477][ T4186] Cannot create hsr debugfs directory [ 56.160629][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.167330][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.174261][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.181802][ T4183] Cannot create hsr debugfs directory [ 56.292908][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 56.299534][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 56.372776][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 56.373231][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 56.378860][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 56.428671][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.442095][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.456428][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.465650][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.515628][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.528236][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.540219][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.561109][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.577823][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.590041][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.607695][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.629680][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.657823][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.690005][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.699701][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.708916][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.721421][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.731967][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.745167][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.755566][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.801834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.811254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.820979][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.828183][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.836826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.848246][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.857034][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.865488][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.872594][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.894077][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.919079][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.928001][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.938974][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.948519][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.960146][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.969378][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.999723][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.011294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.019536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.028674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.037923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.046620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.066612][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.074940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.084436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.094410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.103138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.129316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.138190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.148006][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.155130][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.166065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.175000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.183493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.201154][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.217633][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.226927][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.233958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.242004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.267577][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.282640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.291842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.301905][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.308983][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.317349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.327265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.337302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.345313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.353543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.362047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.370591][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.377648][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.386129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.395142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.403948][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.411001][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.461567][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.474505][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.487987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.497231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.506712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.515715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.525352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.536253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.547301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.558910][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.565971][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.575640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.585673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.596135][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.603210][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.610909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.619807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.630898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.639665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.649330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.658532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.667363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.675932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.684842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.693625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.701845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.710636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.719220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.749254][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.761102][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.780616][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.800615][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.819432][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.827779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.837719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.851225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.861694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.875759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.888427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.897942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.909133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.918134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.927035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.936055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.945256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.954966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.963910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.972139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.981019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.989185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.019067][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.046398][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.077539][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.100360][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.122794][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.132904][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.169894][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.183362][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.203244][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.210311][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.235499][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.253283][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.273139][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.285557][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.292649][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.301396][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.310688][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.319619][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.347280][ T4184] device veth0_vlan entered promiscuous mode [ 58.358118][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.369301][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.377943][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.386142][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 58.392935][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 58.400199][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.408887][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.416473][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.425478][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.437993][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.445936][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.453513][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 58.459629][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 58.466531][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.473930][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 58.485312][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.499423][ T4184] device veth1_vlan entered promiscuous mode [ 58.520565][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.531179][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.538898][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.548934][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.557639][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.566433][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.575904][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.584571][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.591939][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.599406][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.608122][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.620288][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.632964][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.646090][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.678505][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.689105][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.698024][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.728947][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.737553][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.747334][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.756486][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.766339][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.775993][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.785088][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.794869][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.816644][ T4184] device veth0_macvtap entered promiscuous mode [ 58.827354][ T4186] device veth0_vlan entered promiscuous mode [ 58.834605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.843688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.852117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.875057][ T4184] device veth1_macvtap entered promiscuous mode [ 58.896301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.909742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.921810][ T4186] device veth1_vlan entered promiscuous mode [ 58.935552][ T4192] device veth0_vlan entered promiscuous mode [ 58.947531][ T4185] device veth0_vlan entered promiscuous mode [ 58.960672][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.969195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.978064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.986693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.995359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.003967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.014315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.022905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.030534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.046034][ T4192] device veth1_vlan entered promiscuous mode [ 59.073947][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.084846][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.095185][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.103416][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.111720][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.120579][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.129401][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.140236][ T4185] device veth1_vlan entered promiscuous mode [ 59.157281][ T4186] device veth0_macvtap entered promiscuous mode [ 59.166454][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.177531][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.186989][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.195887][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.207479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.216064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.224414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.231853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.254928][ T4186] device veth1_macvtap entered promiscuous mode [ 59.269541][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.299242][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.316370][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.332121][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.358408][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.367221][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.376433][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.385193][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.394903][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.404331][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.417163][ T4185] device veth0_macvtap entered promiscuous mode [ 59.428935][ T4192] device veth0_macvtap entered promiscuous mode [ 59.444579][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.459933][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.471077][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.483916][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.497810][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.506407][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.515288][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.524329][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.533134][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.543742][ T4185] device veth1_macvtap entered promiscuous mode [ 59.562541][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.571259][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.582981][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.591694][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.622008][ T4192] device veth1_macvtap entered promiscuous mode [ 59.698497][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.712710][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.720189][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.734493][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.744856][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.755533][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.766890][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.778152][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.790113][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.800333][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.810854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.821764][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.832929][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.845134][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.860578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.869769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.878723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.887322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.903221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.911711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.920564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.936063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.945430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.958040][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.968610][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.979570][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.990392][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.001429][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.016063][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.026659][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.037109][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.047582][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.057772][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.068248][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.079291][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.089809][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.099051][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.108170][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.117093][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.137148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.146473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.155435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.166719][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.175898][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.184837][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.194042][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.220019][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.249048][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.278902][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.281671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.298288][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.298587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.314492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.323782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.340729][ T4183] device veth0_vlan entered promiscuous mode [ 60.359116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.372229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.410458][ T4183] device veth1_vlan entered promiscuous mode [ 60.420628][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.422625][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.438635][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.453177][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 60.460179][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 60.475506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.484919][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.494947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.508784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.518325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.533195][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 60.547005][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.554962][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 60.572339][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 60.590744][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.621097][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.688872][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.797713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.821038][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.823653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 60.838185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 60.851670][ T4269] loop0: detected capacity change from 0 to 8 [ 60.858921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 60.867858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.876770][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.885674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.894594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.903527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.912523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.484705][ T4183] device veth0_macvtap entered promiscuous mode [ 61.563538][ T4269] ======================================================= [ 61.563538][ T4269] WARNING: The mand mount option has been deprecated and [ 61.563538][ T4269] and is ignored by this kernel. Remove the mand [ 61.563538][ T4269] option from the mount to silence this warning. [ 61.563538][ T4269] ======================================================= [ 61.611779][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.635748][ T4269] SQUASHFS error: lzo decompression failed, data probably corrupt [ 61.643716][ T4269] SQUASHFS error: Failed to read block 0x91: -5 [ 61.649940][ T4269] SQUASHFS error: Unable to read metadata cache entry [8f] [ 61.657478][ T4269] SQUASHFS error: Unable to read inode 0x11f [ 61.679251][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.697042][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.863549][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.978300][ T4183] device veth1_macvtap entered promiscuous mode [ 62.042366][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.224240][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.238712][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.258671][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.397259][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.412781][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.439587][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.501928][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.535480][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 62.623915][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 62.625111][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.640561][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.754118][ T4261] Bluetooth: hci3: command 0x0419 tx timeout [ 62.762628][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 62.774949][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.801847][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 62.881627][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.896446][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.907155][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.986213][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.173063][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.258211][ T4294] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6'. [ 63.443435][ T4274] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 63.443435][ T4274] program syz.1.2 not setting count and/or reply_len properly [ 63.466108][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.476273][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.497165][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.520121][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.543911][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.560630][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.584494][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.604330][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.634135][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.668550][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.689759][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699293][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.708397][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.717340][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.283647][ T4306] loop0: detected capacity change from 0 to 2048 [ 65.449964][ T4303] loop2: detected capacity change from 0 to 32768 [ 65.464597][ T4303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9 (4303) [ 65.478417][ T4306] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 65.489211][ T4306] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 65.501705][ T4306] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 65.513966][ T4306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.545700][ T4303] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 65.554601][ T4303] BTRFS info (device loop2): using free space tree [ 65.561103][ T4303] BTRFS info (device loop2): has skinny extents [ 65.578682][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.618240][ T4320] loop3: detected capacity change from 0 to 64 [ 65.624393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.641221][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.860591][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.885920][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.310631][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.363575][ T4303] BTRFS error (device loop2): open_ctree failed: -12 [ 67.425452][ T4353] loop4: detected capacity change from 0 to 128 [ 67.533271][ T4353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.553285][ T4353] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.599876][ T4370] loop3: detected capacity change from 0 to 8 [ 68.406603][ T4370] SQUASHFS error: lzo decompression failed, data probably corrupt [ 68.414681][ T4370] SQUASHFS error: Failed to read block 0x91: -5 [ 68.420957][ T4370] SQUASHFS error: Unable to read metadata cache entry [8f] [ 68.428209][ T4370] SQUASHFS error: Unable to read inode 0x11f [ 69.153446][ T4200] Bluetooth: Wrong link type (-22) [ 70.622297][ C1] sched: RT throttling activated [ 71.605483][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.612073][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.373499][ T4389] loop3: detected capacity change from 0 to 1024 [ 72.918651][ T4397] overlayfs: missing 'lowerdir' [ 73.373084][ T4404] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.976984][ T4408] loop1: detected capacity change from 0 to 64 [ 74.671275][ T4425] loop2: detected capacity change from 0 to 8 [ 75.183044][ T4425] SQUASHFS error: lzo decompression failed, data probably corrupt [ 75.190904][ T4425] SQUASHFS error: Failed to read block 0x91: -5 [ 75.197395][ T4425] SQUASHFS error: Unable to read metadata cache entry [8f] [ 75.204696][ T4425] SQUASHFS error: Unable to read inode 0x11f [ 75.304712][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 76.094784][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 76.587908][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 76.646097][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 76.683212][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 76.716082][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 76.763659][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 77.052577][ T4448] loop4: detected capacity change from 0 to 32768 [ 77.194085][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.217125][ T4448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.36 (4448) [ 77.402467][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.513952][ T4448] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 77.527157][ T4448] BTRFS info (device loop4): using free space tree [ 77.534809][ T4448] BTRFS info (device loop4): has skinny extents [ 77.645325][ T4366] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.702464][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 77.732592][ T4448] BTRFS info (device loop4): enabling ssd optimizations [ 77.862861][ T4227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.912473][ T4366] usb 4-1: Using ep0 maxpacket: 16 [ 77.930494][ T4227] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.033162][ T4366] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 78.213441][ T4227] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 78.261632][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.323265][ T4366] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.387677][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.396234][ T4227] usb 1-1: Product: syz [ 78.400432][ T4227] usb 1-1: Manufacturer: syz [ 78.421103][ T4366] usb 4-1: Product: syz [ 78.433564][ T4227] usb 1-1: SerialNumber: syz [ 78.447173][ T4366] usb 4-1: Manufacturer: syz [ 78.477370][ T4366] usb 4-1: SerialNumber: syz [ 78.483895][ T4227] usb 1-1: config 0 descriptor?? [ 78.675865][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.777834][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.778341][ T4358] usb 1-1: USB disconnect, device number 2 [ 78.802967][ T4487] device batadv_slave_0 entered promiscuous mode [ 78.845334][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 79.061582][ T13] usb 2-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config [ 79.072371][ T13] usb 2-1: config 225 has 0 interfaces, different from the descriptor's value: 1 [ 79.769721][ T4307] usb 4-1: USB disconnect, device number 2 [ 79.872719][ T13] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 79.892541][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.900626][ T13] usb 2-1: Product: syz [ 79.905603][ T13] usb 2-1: Manufacturer: syz [ 79.914519][ T13] usb 2-1: SerialNumber: syz [ 80.090031][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 80.097357][ T13] usb 2-1: can't set config #225, error -71 [ 80.213741][ T13] usb 2-1: USB disconnect, device number 2 [ 81.254038][ T1108] cfg80211: failed to load regulatory.db [ 81.784168][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 82.277232][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 82.884160][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 83.241451][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 83.477153][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 83.506700][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 83.642169][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 85.773223][ T4550] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 85.780828][ T4550] netlink: 1601 bytes leftover after parsing attributes in process `syz.3.57'. [ 88.774088][ T4582] loop1: detected capacity change from 0 to 512 [ 89.634896][ T4582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.725980][ T4595] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 91.727579][ T4582] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 91.799960][ T4609] loop0: detected capacity change from 0 to 256 [ 91.835731][ T4609] exfat: Deprecated parameter 'namecase' [ 91.934600][ T4609] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 93.112463][ T4200] Bluetooth: Wrong link type (-22) [ 94.002442][ T4356] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.010020][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.243211][ T4356] usb 5-1: Using ep0 maxpacket: 8 [ 94.272600][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 94.363259][ T4356] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.432729][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.443342][ T4356] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 94.451120][ T4356] usb 5-1: can't read configurations, error -71 [ 94.465536][ T23] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.480581][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 95.109062][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 95.300077][ T4645] syz.1.86 (4645): /proc/4641/oom_adj is deprecated, please use /proc/4641/oom_score_adj instead. [ 95.865485][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.883239][ T23] usb 4-1: Product: syz [ 95.896085][ T23] usb 4-1: Manufacturer: syz [ 95.911504][ T23] usb 4-1: SerialNumber: syz [ 96.712897][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 96.762470][ T3544] bcm5974 4-1:1.0: could not read from device [ 97.193474][ T23] usb 4-1: USB disconnect, device number 3 [ 98.684662][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 99.538113][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 99.732648][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.779210][ T4698] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 99.779210][ T4698] program syz.4.102 not setting count and/or reply_len properly [ 100.462636][ T21] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 100.487069][ T21] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.529316][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.743016][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.775592][ T21] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.867112][ T21] usb 1-1: Product: syz [ 100.903510][ T21] usb 1-1: Manufacturer: syz [ 100.947819][ T21] usb 1-1: SerialNumber: syz [ 101.156694][ T21] usb 1-1: config 0 descriptor?? [ 101.520478][ T21] hub 1-1:0.0: bad descriptor, ignoring hub [ 101.526960][ T21] hub: probe of 1-1:0.0 failed with error -5 [ 102.003900][ T21] usb 1-1: selecting invalid altsetting 0 [ 102.202642][ T21] usb 1-1: USB disconnect, device number 3 [ 102.411439][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.432585][ T4721] loop1: detected capacity change from 0 to 32768 [ 102.960378][ T4722] device batadv_slave_0 entered promiscuous mode [ 103.834464][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.937350][ T4721] JBD2: Ignoring recovery information on journal [ 104.229815][ T4721] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.381388][ T4721] (syz.1.100,4721,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 104.472147][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 104.597378][ T4365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.707102][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.737043][ T4750] device team_slave_0 entered promiscuous mode [ 104.743490][ T4750] device team_slave_1 entered promiscuous mode [ 104.753730][ T4750] device vlan2 entered promiscuous mode [ 104.759404][ T4750] device team0 entered promiscuous mode [ 104.817473][ T4752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 105.655268][ T4365] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.730092][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.740917][ T4365] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.750900][ T21] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.760704][ T4365] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 105.771768][ T4365] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.782534][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.812012][ T4762] loop1: detected capacity change from 0 to 256 [ 105.847112][ T4762] exfat: Deprecated parameter 'namecase' [ 107.095630][ T4762] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 107.192580][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 107.208042][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.217290][ T21] usb 1-1: Product: syz [ 107.221470][ T21] usb 1-1: Manufacturer: syz [ 107.232677][ T4365] usb 4-1: string descriptor 0 read error: -22 [ 107.255804][ T21] usb 1-1: config 0 descriptor?? [ 107.260912][ T4365] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.288562][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.332410][ T21] usb 1-1: can't set config #0, error -71 [ 107.352463][ T21] usb 1-1: USB disconnect, device number 4 [ 108.743575][ T4365] usb 4-1: can't set config #1, error -71 [ 108.817230][ T4365] usb 4-1: USB disconnect, device number 5 [ 108.972390][ T4232] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.980008][ T4232] usb 5-1: can't read configurations, error -71 [ 112.303851][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.732524][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.865694][ T4794] loop1: detected capacity change from 0 to 32768 [ 112.929432][ T4794] JBD2: Ignoring recovery information on journal [ 112.978269][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'. [ 113.066352][ T4794] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.092727][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.148128][ T26] audit: type=1800 audit(1772283037.201:2): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.133" name="file0" dev="loop1" ino=17058 res=0 errno=0 [ 113.192686][ T4232] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.211931][ T4232] usb 5-1: can't read configurations, error -71 [ 113.238854][ T4232] usb usb5-port1: attempt power cycle [ 113.272892][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 113.603496][ T4200] Bluetooth: Wrong link type (-22) [ 114.277532][ T4813] loop0: detected capacity change from 0 to 128 [ 116.224576][ T4829] loop4: detected capacity change from 0 to 256 [ 116.246684][ T4813] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.261099][ T4813] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.273272][ T4829] exfat: Deprecated parameter 'namecase' [ 118.944460][ T4829] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 119.192452][ T4365] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 121.792533][ T4365] usb 3-1: device descriptor read/all, error -71 [ 121.827686][ T4862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.151'. [ 122.083487][ T4865] ceph: No source [ 123.123876][ T4867] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns [ 126.092388][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.825826][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 126.982689][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.013911][ T1108] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.720618][ T4920] ODEBUG: Out of memory. ODEBUG disabled [ 128.781274][ T4920] syz.0.162 (4920): drop_caches: 2 [ 128.812503][ T1108] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 128.823918][ T4915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.163'. [ 129.295169][ T4199] Bluetooth: Wrong link type (-22) [ 129.886222][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.983414][ T1108] usb 4-1: config 0 descriptor?? [ 130.002577][ T1108] usb 4-1: can't set config #0, error -71 [ 130.009346][ T1108] usb 4-1: USB disconnect, device number 6 [ 130.233287][ T4933] Zero length message leads to an empty skb [ 132.472820][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.503437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.542516][ T4365] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.804198][ T4365] usb 3-1: Using ep0 maxpacket: 16 [ 132.910199][ T4928] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.922598][ T4365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.975846][ T4365] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.976324][ T4928] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 133.182514][ T4365] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 133.294911][ T4365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.312313][ T4365] usb 3-1: Product: syz [ 133.316495][ T4365] usb 3-1: Manufacturer: syz [ 133.321097][ T4365] usb 3-1: SerialNumber: syz [ 133.564477][ T4365] usb 3-1: config 0 descriptor?? [ 133.807184][ T4365] usb 3-1: USB disconnect, device number 4 [ 136.873837][ T4199] Bluetooth: Wrong link type (-22) [ 137.182339][ T4366] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.662414][ T4366] usb 4-1: device descriptor read/all, error -71 [ 137.712382][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.742358][ T4998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'. [ 139.922378][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 140.062626][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.127166][ T7] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 140.202636][ T7] usb 5-1: string descriptor 0 read error: -71 [ 140.209194][ T7] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 140.892375][ T4366] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.892420][ T4358] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.925044][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.955570][ T7] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 140.977515][ T7] usb 5-1: no configuration chosen from 1 choice [ 141.002084][ T7] usb 5-1: USB disconnect, device number 7 [ 141.982338][ T4358] usb 2-1: Using ep0 maxpacket: 16 [ 141.992478][ T4366] usb 4-1: Using ep0 maxpacket: 16 [ 142.108416][ T4358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.132517][ T4358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.301684][ T4366] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.408466][ T4199] Bluetooth: Wrong link type (-22) [ 142.946031][ T4358] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.082389][ T4366] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 143.090101][ T4358] usb 2-1: string descriptor 0 read error: -71 [ 143.103499][ T4358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.112731][ T4366] usb 4-1: can't read configurations, error -71 [ 143.120174][ T5035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 143.275175][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.312420][ T4232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.392663][ T4358] usb 2-1: can't set config #1, error -71 [ 143.401781][ T4358] usb 2-1: USB disconnect, device number 3 [ 143.432351][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.562375][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 143.693051][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.431326][ T4232] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.342587][ T4232] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 145.356461][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.372454][ T4232] usb 5-1: Product: syz [ 145.382605][ T4232] usb 5-1: Manufacturer: syz [ 145.397154][ T4232] usb 5-1: SerialNumber: syz [ 145.448216][ T4232] r8152-cfgselector 5-1: config 0 descriptor?? [ 145.457027][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 145.645341][ T5054] loop3: detected capacity change from 0 to 512 [ 145.738370][ T4232] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 145.764006][ T5054] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 145.830005][ T5054] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=abort,,errors=continue. Quota mode: writeback. [ 145.911886][ T5054] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.922529][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.939859][ T4232] usb 5-1: USB disconnect, device number 8 [ 146.002369][ T4229] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 146.010021][ T4229] usb 3-1: can't read configurations, error -71 [ 146.189648][ T4307] Process accounting resumed [ 146.402313][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 147.272477][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.302097][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.354128][ T7] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 147.640461][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.701617][ T7] usb 4-1: config 0 descriptor?? [ 149.012931][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 149.022112][ T4358] usb 4-1: USB disconnect, device number 11 [ 149.772437][ T5080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'. [ 149.978484][ T5088] loop2: detected capacity change from 0 to 32768 [ 151.308747][ T5088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.211 (5088) [ 151.341486][ T5088] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 151.350457][ T5088] BTRFS info (device loop2): enabling disk space caching [ 151.357621][ T5088] BTRFS info (device loop2): force clearing of disk cache [ 151.365179][ T5088] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.374840][ T5088] BTRFS info (device loop2): use zstd compression, level 3 [ 151.382106][ T5088] BTRFS info (device loop2): disk space caching is enabled [ 151.389424][ T5088] BTRFS info (device loop2): has skinny extents [ 152.944543][ T5088] BTRFS error (device loop2): open_ctree failed: -12 [ 153.058662][ T4175] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4175) [ 153.392445][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.402447][ T5121] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.656412][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 153.893093][ T7] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 154.320531][ T7] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 155.055444][ T5121] usb 2-1: Using ep0 maxpacket: 16 [ 155.612492][ T7] usb 3-1: New USB device found, idVendor=0cde, idProduct=0012, bcdDevice=f9.a1 [ 155.622038][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.678331][ T7] usb 3-1: Product: syz [ 155.688467][ T7] usb 3-1: Manufacturer: syz [ 155.698594][ T7] usb 3-1: SerialNumber: syz [ 155.792401][ T5121] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.802637][ T5121] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.040878][ T7] usb 3-1: USB disconnect, device number 7 [ 156.582413][ T5121] usb 2-1: string descriptor 0 read error: -71 [ 156.588688][ T5121] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 156.636836][ T5121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.686732][ T5121] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 156.979181][ T5160] loop4: detected capacity change from 0 to 32768 [ 157.785138][ T5121] usb 2-1: no configuration chosen from 1 choice [ 157.792581][ T5121] usb 2-1: USB disconnect, device number 4 [ 157.802073][ T5160] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 157.810937][ T5160] BTRFS info (device loop4): enabling disk space caching [ 157.818647][ T5160] BTRFS info (device loop4): force clearing of disk cache [ 157.825855][ T5160] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 157.835557][ T5160] BTRFS info (device loop4): use zstd compression, level 3 [ 157.842820][ T5160] BTRFS info (device loop4): disk space caching is enabled [ 157.850033][ T5160] BTRFS info (device loop4): has skinny extents [ 158.072853][ T5176] device syzkaller0 entered promiscuous mode [ 159.082364][ T5160] BTRFS info (device loop4): enabling ssd optimizations [ 159.091864][ T5160] BTRFS info (device loop4): clearing free space tree [ 159.099027][ T5160] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.109598][ T5160] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.894036][ T1324] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 165.442625][ T1324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.480095][ T1324] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 165.505603][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.542730][ T1324] usb 1-1: config 0 descriptor?? [ 165.593414][ T1324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 165.682423][ T4232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.692406][ T4352] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.963398][ T4352] usb 4-1: Using ep0 maxpacket: 16 [ 166.093025][ T4352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.136194][ T4352] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.186539][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 166.382394][ T4352] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.391759][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.401377][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.409982][ T4352] usb 4-1: Product: syz [ 166.416233][ T4352] usb 4-1: Manufacturer: syz [ 166.426028][ T4352] usb 4-1: SerialNumber: syz [ 166.445146][ T4352] r8152-cfgselector 4-1: config 0 descriptor?? [ 166.472785][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.490223][ T4232] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.511654][ T4232] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.536827][ T4232] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.068504][ T4352] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 167.242482][ T4232] usb 5-1: string descriptor 0 read error: -22 [ 167.446301][ T4232] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.786423][ T5279] loop1: detected capacity change from 0 to 32768 [ 167.799692][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.834668][ T5279] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.252 (5279) [ 167.858523][ T4229] usb 4-1: USB disconnect, device number 12 [ 167.897169][ T5279] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 167.906040][ T5279] BTRFS info (device loop1): enabling disk space caching [ 167.913913][ T5279] BTRFS info (device loop1): force clearing of disk cache [ 167.921051][ T5279] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 167.930481][ T5279] BTRFS info (device loop1): use zstd compression, level 3 [ 167.937745][ T5279] BTRFS info (device loop1): disk space caching is enabled [ 167.945013][ T5279] BTRFS info (device loop1): has skinny extents [ 168.078051][ T4267] usb 1-1: USB disconnect, device number 5 [ 168.132502][ T4232] usb 5-1: 0:2 : does not exist [ 168.169871][ T4232] usb 5-1: USB disconnect, device number 9 [ 169.078284][ T5279] BTRFS info (device loop1): enabling ssd optimizations [ 169.088027][ T5279] BTRFS info (device loop1): clearing free space tree [ 169.095045][ T5279] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.104784][ T5279] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.168273][ T5296] loop0: detected capacity change from 0 to 2048 [ 169.243480][ T5296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.859620][ T5307] netlink: 164 bytes leftover after parsing attributes in process `syz.3.255'. [ 171.898499][ T5330] loop1: detected capacity change from 0 to 1024 [ 171.912368][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.132425][ T4227] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 172.162368][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 172.282537][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.299484][ T21] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 172.319075][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.348636][ T21] usb 1-1: config 0 descriptor?? [ 172.382581][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 172.404390][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 172.465278][ T4229] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 172.532539][ T4227] usb 3-1: config 80 has an invalid descriptor of length 0, skipping remainder of the config [ 172.562354][ T4227] usb 3-1: config 80 has 0 interfaces, different from the descriptor's value: 1 [ 172.611978][ T21] usb 1-1: USB disconnect, device number 6 [ 172.762476][ T4227] usb 3-1: New USB device found, idVendor=0f11, idProduct=2060, bcdDevice=90.59 [ 172.802396][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.842831][ T4227] usb 3-1: Product: syz [ 172.846996][ T4227] usb 3-1: Manufacturer: syz [ 172.851576][ T4227] usb 3-1: SerialNumber: syz [ 173.593721][ T4227] usb 3-1: USB disconnect, device number 8 [ 173.602393][ T4229] usb 2-1: not running at top speed; connect to a high speed hub [ 173.702484][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.931789][ T4229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.949940][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.962397][ T4229] usb 2-1: Product: syz [ 173.966662][ T4229] usb 2-1: Manufacturer: syz [ 173.981532][ T4229] usb 2-1: SerialNumber: syz [ 175.303413][ T4229] usb 2-1: bad CDC descriptors [ 175.345083][ T4229] usb 2-1: USB disconnect, device number 5 [ 175.402381][ T4228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.686954][ T5351] infiniband syz1: set active [ 175.692345][ T5351] infiniband syz1: added syz_tun [ 175.723232][ T5351] RDS/IB: syz1: added [ 175.727669][ T5351] smc: adding ib device syz1 with port count 1 [ 175.734268][ T5351] smc: ib device syz1 port 1 has pnetid [ 175.861444][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.871736][ T4228] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 175.880871][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.137646][ T4228] usb 3-1: config 0 descriptor?? [ 176.184429][ T4228] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 176.349583][ T5357] sctp: failed to load transform for md5: -2 [ 176.788438][ T5342] loop0: detected capacity change from 0 to 32768 [ 176.812959][ T21] usb 3-1: USB disconnect, device number 9 [ 177.314483][ T4227] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 177.676008][ T5380] infiniband syz2: set active [ 177.680716][ T5380] infiniband syz2: added veth1_to_team [ 177.690721][ T5380] infiniband syz2: Couldn't open port 1 [ 177.712483][ T5380] RDS/IB: syz2: added [ 177.716655][ T5380] smc: adding ib device syz2 with port count 1 [ 177.722888][ T5380] smc: ib device syz2 port 1 has pnetid [ 178.802461][ T4227] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.355425][ T4307] Bluetooth: hci3: command 0x0406 tx timeout [ 182.648190][ T4307] Bluetooth: hci1: command 0x0406 tx timeout [ 182.768672][ T4307] Bluetooth: hci2: command 0x0406 tx timeout [ 183.264024][ T4307] Bluetooth: hci0: command 0x0406 tx timeout [ 183.382372][ T4227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.391548][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.632423][ T4232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.097620][ T5407] loop3: detected capacity change from 0 to 512 [ 184.178190][ T5411] process 'syz.4.281' launched './file1' with NULL argv: empty string added [ 184.245447][ T4227] usb 2-1: Product: syz [ 184.688569][ T4227] usb 2-1: can't set config #1, error -71 [ 184.726336][ T5403] loop2: detected capacity change from 0 to 4096 [ 184.750190][ T4227] usb 2-1: USB disconnect, device number 6 [ 184.763282][ T5414] loop4: detected capacity change from 0 to 128 [ 185.652793][ T5403] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 185.770966][ T5407] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 185.815141][ T5403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 185.833718][ T5403] System zones: 0-5 [ 185.866674][ T5403] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 185.901369][ T5407] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.310545][ T4232] usb 1-1: device descriptor read/all, error -71 [ 188.487962][ T5442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.602621][ T4232] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 189.108274][ T4232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.220100][ T4232] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.305219][ T4232] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.328114][ T5445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.358247][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.814648][ T4228] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 189.842425][ T4232] usb 1-1: usb_control_msg returned -32 [ 190.995240][ T4232] usbtmc 1-1:16.0: can't read capabilities [ 191.042840][ T4228] usb 2-1: not running at top speed; connect to a high speed hub [ 191.242707][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.452839][ T4228] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.511353][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.628114][ T4228] usb 2-1: Product: syz [ 191.689605][ T4228] usb 2-1: Manufacturer: syz [ 191.746706][ T4228] usb 2-1: SerialNumber: syz [ 192.153022][ T4228] usb 2-1: bad CDC descriptors [ 192.182445][ T4228] usb 2-1: USB disconnect, device number 7 [ 192.961882][ T5461] loop4: detected capacity change from 0 to 32768 [ 193.111040][ T5482] loop3: detected capacity change from 0 to 1024 [ 193.210968][ T4228] usb 1-1: USB disconnect, device number 8 [ 193.218518][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.272894][ T5482] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.953051][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.959573][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.195939][ T5528] kvm: pic: non byte write [ 197.714762][ T4228] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.637245][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 198.762437][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.833252][ T4228] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.772315][ T4227] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 199.782507][ T4228] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 199.827971][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.106900][ T4228] usb 5-1: Product: syz [ 201.154528][ T4228] usb 5-1: Manufacturer: syz [ 201.179777][ T4228] usb 5-1: SerialNumber: syz [ 201.212009][ T4228] usb 5-1: config 0 descriptor?? [ 201.217101][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 201.254723][ T4228] usb 5-1: can't set config #0, error -71 [ 201.274416][ T4228] usb 5-1: USB disconnect, device number 10 [ 201.522520][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.224108][ T4227] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.324048][ T4227] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.576089][ T4227] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.792431][ T4227] usb 3-1: string descriptor 0 read error: -71 [ 204.809350][ T4227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.862448][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.913045][ T4227] usb 3-1: can't set config #1, error -71 [ 204.942435][ T4227] usb 3-1: USB disconnect, device number 10 [ 214.355091][ T5721] loop3: detected capacity change from 0 to 64 [ 214.368520][ T5717] loop1: detected capacity change from 0 to 1024 [ 214.551177][ T5717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 214.559733][ T5717] System zones: 0-1, 3-36 [ 214.595381][ T5717] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.344: bad orphan inode 134217728 [ 215.032124][ T5717] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,debug,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 218.879570][ T5757] loop0: detected capacity change from 0 to 2048 [ 218.887386][ T5758] syz.3.353 uses obsolete (PF_INET,SOCK_PACKET) [ 218.927788][ T5757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.250099][ T5767] loop2: detected capacity change from 0 to 512 [ 220.909313][ T5767] EXT4-fs (loop2): Ignoring removed bh option [ 220.915805][ T5767] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.928832][ T5767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.960551][ T5767] EXT4-fs (loop2): 1 truncate cleaned up [ 220.966458][ T5767] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,resgid=0x0000000000000000,jqfmt=vfsold,bsdgroups,bh,,errors=continue. Quota mode: none. [ 221.182476][ T4228] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.687712][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 221.932381][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.134072][ T4228] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 222.167370][ T4228] usb 2-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 222.692405][ T4227] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.702517][ T4228] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 222.716418][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.726351][ T4228] usb 2-1: Product: syz [ 222.731414][ T4228] usb 2-1: Manufacturer: syz [ 222.739703][ T4228] usb 2-1: SerialNumber: syz [ 222.817122][ T4267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 222.904845][ T5792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 222.977617][ T5792] device bond1 entered promiscuous mode [ 222.987781][ T5792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.996533][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 223.011501][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 223.041406][ T5792] device bridge1 entered promiscuous mode [ 223.048288][ T5792] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 223.295542][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 223.346921][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 223.399612][ T4228] usb 2-1: USB disconnect, device number 8 [ 223.412707][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 223.418102][ T4227] usb 5-1: config index 0 descriptor too short (expected 18, got 14) [ 223.456812][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.537583][ T4227] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.552549][ T4267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.564284][ T4267] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.782735][ T4227] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.796869][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.822343][ T4227] usb 5-1: Product: syz [ 223.833081][ T4227] usb 5-1: Manufacturer: syz [ 223.837802][ T4227] usb 5-1: SerialNumber: syz [ 223.854159][ T4227] r8152-cfgselector 5-1: config 0 descriptor?? [ 223.872815][ T4267] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 223.882395][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.893893][ T4267] usb 3-1: Product: syz [ 223.898141][ T4267] usb 3-1: Manufacturer: syz [ 223.903880][ T4267] usb 3-1: SerialNumber: syz [ 223.924197][ T4267] usb 3-1: config 0 descriptor?? [ 224.282754][ T4227] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 224.469624][ T4443] usb 5-1: config 0 descriptor?? [ 224.597208][ T4227] usb 5-1: USB disconnect, device number 11 [ 224.616876][ T7] usb 3-1: USB disconnect, device number 11 [ 226.007741][ T5819] loop4: detected capacity change from 0 to 64 [ 227.346392][ T5824] loop4: detected capacity change from 0 to 4096 [ 227.832008][ T5835] loop0: detected capacity change from 0 to 2048 [ 227.907983][ T5835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.938281][ T5824] NILFS (loop4): invalid segment: Checksum error in segment payload [ 227.986138][ T5824] NILFS (loop4): trying rollback from an earlier position [ 228.087767][ T5824] NILFS (loop4): recovery complete [ 228.128048][ T5846] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.272470][ T4232] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 228.292392][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 228.762538][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 228.767646][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 228.852917][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.888878][ T5854] binder: 5853:5854 ioctl 4018620d 0 returned -22 [ 228.937321][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.962537][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.072613][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 229.132505][ T13] usb 2-1: string descriptor 0 read error: -22 [ 229.139191][ T13] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 229.171997][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.200381][ T5839] loop3: detected capacity change from 0 to 32768 [ 229.222492][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 229.246823][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.297407][ T5839] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.377 (5839) [ 229.330368][ T4232] usb 3-1: Product: syz [ 229.345329][ T4232] usb 3-1: Manufacturer: syz [ 229.350377][ T5862] loop4: detected capacity change from 0 to 2048 [ 229.359249][ T4232] usb 3-1: SerialNumber: syz [ 229.388967][ T5839] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 229.400382][ T5839] BTRFS info (device loop3): enabling disk space caching [ 229.409408][ T5839] BTRFS info (device loop3): force clearing of disk cache [ 229.417029][ T5839] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 229.426986][ T5839] BTRFS info (device loop3): use lzo compression, level 0 [ 229.453140][ T13] usb 2-1: USB disconnect, device number 9 [ 229.462856][ T5839] BTRFS info (device loop3): disk space caching is enabled [ 229.470639][ T5868] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.487931][ T5839] BTRFS info (device loop3): has skinny extents [ 229.647637][ T5839] BTRFS info (device loop3): enabling ssd optimizations [ 229.657717][ T4232] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 229.662215][ T5839] BTRFS info (device loop3): clearing free space tree [ 229.676565][ T5839] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.687854][ T4232] usb 3-1: USB disconnect, device number 12 [ 229.705582][ T5839] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.976654][ T4175] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop3 scanned by udevd (4175) [ 230.824683][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 230.848128][ T5904] loop2: detected capacity change from 0 to 2048 [ 230.957121][ T5904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.200542][ T5911] loop3: detected capacity change from 0 to 32768 [ 231.246986][ T4375] loop3: p1 p3 < > [ 231.296299][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.312684][ T5911] loop3: p1 p3 < > [ 231.402348][ T4368] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.422417][ T5919] Disabled LAPIC found during irq injection [ 231.552448][ T5402] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.589311][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 231.602512][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 231.625954][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 231.638627][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 231.642715][ T4368] usb 1-1: Using ep0 maxpacket: 32 [ 231.682489][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.693400][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.803663][ T4368] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.814501][ T4368] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.862444][ T7] usb 2-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 231.875190][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.883722][ T7] usb 2-1: Product: syz [ 231.887886][ T7] usb 2-1: Manufacturer: syz [ 231.895675][ T7] usb 2-1: SerialNumber: syz [ 231.907485][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 231.932703][ T5402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.943239][ T5402] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.952867][ T5402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.962722][ T5402] usb 5-1: config 0 descriptor?? [ 232.003898][ T5402] pwc: Askey VC010 type 2 USB webcam detected. [ 232.012495][ T4368] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 232.021733][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.029834][ T4368] usb 1-1: Product: syz [ 232.034319][ T4368] usb 1-1: Manufacturer: syz [ 232.038993][ T4368] usb 1-1: SerialNumber: syz [ 232.047207][ T4368] usb 1-1: config 0 descriptor?? [ 232.172708][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 232.234270][ T7] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 232.316179][ T4368] usb 1-1: USB disconnect, device number 9 [ 232.637892][ T5402] pwc: recv_control_msg error -32 req 02 val 2b00 [ 232.721988][ T5931] loop3: detected capacity change from 0 to 512 [ 232.742367][ T5402] pwc: recv_control_msg error -32 req 02 val 2700 [ 232.756385][ T5931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.812513][ T5402] pwc: recv_control_msg error -32 req 02 val 2c00 [ 232.834647][ T5931] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.401: bg 0: block 507: padding at end of block bitmap is not set [ 232.857237][ T5931] EXT4-fs (loop3): Remounting filesystem read-only [ 232.864379][ T5402] pwc: recv_control_msg error -32 req 04 val 1000 [ 232.865002][ T5931] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 232.887732][ T5931] EXT4-fs (loop3): 1 truncate cleaned up [ 232.893617][ T5931] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 233.065471][ T5402] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.482569][ T5402] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.561778][ T5947] loop3: detected capacity change from 0 to 1024 [ 233.612083][ T5947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 233.625509][ T5947] System zones: 0-1, 3-36 [ 233.631730][ T5947] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.404: bad orphan inode 134217728 [ 233.647884][ T5947] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,debug,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 233.763970][ T5402] pwc: recv_control_msg error -71 req 04 val 1500 [ 233.783585][ T5402] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.802320][ T5402] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.822358][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.830047][ T5402] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.868145][ T5402] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.897666][ T5402] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.932457][ T5402] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.953083][ T5402] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.966447][ T5402] pwc: Registered as video103. [ 234.029295][ T5402] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 234.082677][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 234.239949][ T5402] usb 5-1: USB disconnect, device number 12 [ 234.272967][ T7] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 234.510114][ T7] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 236.053049][ T7] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=31.1e [ 236.062166][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.152314][ T1108] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.282293][ T7] usb 2-1: Product: syz [ 236.286498][ T7] usb 2-1: Manufacturer: syz [ 237.633367][ T7] usb 2-1: SerialNumber: syz [ 237.662453][ T1108] usb 4-1: device descriptor read/all, error -71 [ 238.107284][ T7] usb 2-1: can't set config #2, error -71 [ 238.138213][ T7] usb 2-1: USB disconnect, device number 11 [ 238.593283][ T5994] loop4: detected capacity change from 0 to 128 [ 240.408874][ T5998] kvm [5997]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 242.156789][ T6035] netlink: 'syz.0.430': attribute type 27 has an invalid length. [ 242.965423][ T6041] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 244.820430][ T6047] netlink: 'syz.0.434': attribute type 2 has an invalid length. [ 246.235540][ T6059] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 246.339041][ T6064] loop1: detected capacity change from 0 to 2048 [ 246.365569][ T6068] loop4: detected capacity change from 0 to 128 [ 246.536671][ T6064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.606115][ T6068] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 247.235316][ T6068] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.281528][ T6068] ext2 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.612304][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.660994][ T6102] Disabled LAPIC found during irq injection [ 248.682305][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 248.842994][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.894041][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.996692][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.055299][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 249.170964][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.382053][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.434623][ T23] usb 3-1: config 0 descriptor?? [ 249.455984][ T6112] loop1: detected capacity change from 0 to 2048 [ 249.608258][ T6112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.973118][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 251.153542][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.221186][ T6128] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.432505][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 251.450438][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 251.496092][ T23] usb 3-1: USB disconnect, device number 13 [ 251.565201][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.623062][ T7] usb 4-1: string descriptor 0 read error: -71 [ 251.636652][ T7] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=17.22 [ 251.668267][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.698323][ T7] usb 4-1: config 0 descriptor?? [ 251.722447][ T7] usb 4-1: can't set config #0, error -71 [ 251.729780][ T7] usb 4-1: USB disconnect, device number 15 [ 251.812302][ T4368] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.632296][ T4368] usb 2-1: Using ep0 maxpacket: 32 [ 252.812320][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 252.820059][ T4230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 253.477469][ T6156] Disabled LAPIC found during irq injection [ 253.483697][ T4368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.498612][ T4368] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.920554][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 255.051272][ T23] usb 4-1: unable to get BOS descriptor set [ 255.102475][ T4368] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.122135][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.158476][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.168915][ T23] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 255.190698][ T4368] usb 2-1: Product: syz [ 255.344890][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.351933][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981020][ T23] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 255.981332][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.981833][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.031689][ T4368] usb 2-1: Manufacturer: syz [ 256.066014][ T4368] usb 2-1: config 0 descriptor?? [ 256.089256][ T4368] usb 2-1: can't set config #0, error -71 [ 256.124112][ T4368] usb 2-1: USB disconnect, device number 12 [ 256.312530][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 256.340749][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.352345][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.413619][ T4230] usb 1-1: can't set config #1, error -71 [ 256.447975][ T4230] usb 1-1: USB disconnect, device number 10 [ 256.582352][ T23] usb 4-1: string descriptor 0 read error: -71 [ 256.589191][ T23] usb 4-1: New USB device found, idVendor=0bda, idProduct=2102, bcdDevice=7f.16 [ 256.816953][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.842992][ T23] usb 4-1: can't set config #9, error -71 [ 256.859571][ T23] usb 4-1: USB disconnect, device number 16 [ 259.812333][ T4230] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 259.902311][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 259.929270][ T6209] loop4: detected capacity change from 0 to 2048 [ 260.077231][ T6209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.451273][ T6214] netlink: 'syz.4.485': attribute type 33 has an invalid length. [ 260.459154][ T6214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.485'. [ 261.029824][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.342421][ T23] usb 2-1: unable to read config index 0 descriptor/all [ 261.349436][ T23] usb 2-1: can't read configurations, error -71 [ 261.392345][ T4230] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 261.872597][ T4230] usb 3-1: can't read configurations, error -71 [ 263.507600][ T1324] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.922454][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 264.132729][ T1324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.442423][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 264.468286][ T1324] usb 5-1: can't read configurations, error -71 [ 265.572816][ C0] ================================================================== [ 265.581226][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 265.588730][ C0] Read of size 2 at addr ffff88805f04e82a by task syz-executor/4192 [ 265.596724][ C0] [ 265.599075][ C0] CPU: 0 PID: 4192 Comm: syz-executor Not tainted syzkaller #0 [ 265.606634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.616707][ C0] Call Trace: [ 265.620002][ C0] [ 265.622860][ C0] dump_stack_lvl+0x188/0x250 [ 265.627567][ C0] ? show_regs_print_info+0x20/0x20 [ 265.632784][ C0] ? _printk+0xda/0x130 [ 265.636955][ C0] ? rose_timer_expiry+0x470/0x490 [ 265.642089][ C0] ? load_image+0x400/0x400 [ 265.646614][ C0] print_address_description+0x60/0x2d0 [ 265.652180][ C0] ? rose_timer_expiry+0x470/0x490 [ 265.657314][ C0] kasan_report+0xdf/0x130 [ 265.661754][ C0] ? rose_timer_expiry+0x470/0x490 [ 265.666891][ C0] rose_timer_expiry+0x470/0x490 [ 265.671855][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 265.676929][ C0] call_timer_fn+0x17b/0x540 [ 265.681549][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 265.686597][ C0] ? __run_timers+0x800/0x800 [ 265.691403][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 265.696618][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 265.701840][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 265.706886][ C0] __run_timers+0x53e/0x800 [ 265.711423][ C0] ? detach_timer+0x2b0/0x2b0 [ 265.716137][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 265.722146][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 265.727099][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 265.732405][ C0] run_timer_softirq+0x63/0xf0 [ 265.737199][ C0] handle_softirqs+0x339/0x830 [ 265.741988][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 265.746863][ C0] ? do_softirq+0x210/0x210 [ 265.751397][ C0] __irq_exit_rcu+0x13b/0x230 [ 265.756099][ C0] ? irq_exit_rcu+0x20/0x20 [ 265.760637][ C0] irq_exit_rcu+0x5/0x20 [ 265.764908][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 265.770561][ C0] [ 265.773513][ C0] [ 265.776459][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 265.782464][ C0] RIP: 0010:find_lock_entries+0x807/0xd70 [ 265.788203][ C0] Code: 82 7c 03 00 00 e8 79 56 da ff 4c 89 b4 24 88 00 00 00 48 c7 84 24 98 00 00 00 03 00 00 00 e9 93 f9 ff ff 4c 89 f3 48 83 c3 18 <48> 89 d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 [ 265.807840][ C0] RSP: 0018:ffffc90002e2f7e0 EFLAGS: 00000286 [ 265.813934][ C0] RAX: ffffffff819eca95 RBX: ffffea0001595e18 RCX: ffff88801b5b9dc0 [ 265.821932][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.830013][ C0] RBP: ffffc90002e2f910 R08: ffffea0001595e07 R09: 1ffffd40002b2bc0 [ 265.838005][ C0] R10: dffffc0000000000 R11: fffff940002b2bc1 R12: ffffc90002e2f860 [ 265.845997][ C0] R13: fffffffffffffffe R14: ffffea0001595e00 R15: 0000000000000000 [ 265.853990][ C0] ? find_lock_entries+0x6b5/0xd70 [ 265.859135][ C0] ? find_get_entry+0x270/0x270 [ 265.864010][ C0] shmem_undo_range+0x29a/0x1930 [ 265.869008][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 265.874054][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 265.879296][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 265.884346][ C0] ? __rwlock_init+0x140/0x140 [ 265.889132][ C0] shmem_evict_inode+0x220/0xa40 [ 265.894096][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 265.899837][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 265.905402][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 265.910449][ C0] ? bit_waitqueue+0x30/0x30 [ 265.915154][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 265.920398][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 265.925962][ C0] evict+0x4c9/0x8d0 [ 265.929886][ C0] ? rcu_lock_release+0x5/0x20 [ 265.934673][ C0] ? proc_nr_inodes+0x320/0x320 [ 265.939551][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 265.944776][ C0] ? _raw_spin_unlock+0x24/0x40 [ 265.949651][ C0] ? iput+0x706/0x8a0 [ 265.953657][ C0] do_unlinkat+0x3e7/0x710 [ 265.958094][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 265.963236][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 265.968376][ C0] ? strncpy_from_user+0x1fb/0x360 [ 265.973520][ C0] ? getname_flags+0x1fe/0x500 [ 265.978308][ C0] __x64_sys_unlink+0x45/0x50 [ 265.983008][ C0] do_syscall_64+0x4c/0xa0 [ 265.987442][ C0] ? clear_bhb_loop+0x30/0x80 [ 265.992175][ C0] ? clear_bhb_loop+0x30/0x80 [ 265.996901][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.002813][ C0] RIP: 0033:0x7fdccb2a6887 [ 266.007249][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 266.026871][ C0] RSP: 002b:00007fff215300d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 266.035307][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdccb2a6887 [ 266.043305][ C0] RDX: 00007fff21530100 RSI: 00007fff21530190 RDI: 00007fff21530190 [ 266.051291][ C0] RBP: 00007fff21530190 R08: 00007fff21531190 R09: 00000000ffffffff [ 266.059281][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff21531220 [ 266.067276][ C0] R13: 00007fdccb33cf90 R14: 0000000000040126 R15: 00007fff21531260 [ 266.075284][ C0] [ 266.078318][ C0] [ 266.080653][ C0] Allocated by task 6087: [ 266.084991][ C0] __kasan_kmalloc+0xb5/0xf0 [ 266.089627][ C0] __alloc_skb+0x22c/0x750 [ 266.094065][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 266.099114][ C0] __ieee80211_beacon_get+0xaa1/0x2000 [ 266.104590][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 266.110073][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 266.115552][ C0] __iterate_interfaces+0x243/0x500 [ 266.120766][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 266.127802][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 266.133017][ C0] __hrtimer_run_queues+0x4eb/0xb70 [ 266.138239][ C0] hrtimer_run_softirq+0x176/0x240 [ 266.143366][ C0] handle_softirqs+0x339/0x830 [ 266.148144][ C0] __irq_exit_rcu+0x13b/0x230 [ 266.152987][ C0] irq_exit_rcu+0x5/0x20 [ 266.157248][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 266.162911][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.168928][ C0] [ 266.171342][ C0] Freed by task 6087: [ 266.175332][ C0] kasan_set_track+0x4b/0x70 [ 266.179950][ C0] kasan_set_free_info+0x1f/0x40 [ 266.184902][ C0] ____kasan_slab_free+0xd5/0x110 [ 266.189957][ C0] slab_free_freelist_hook+0xea/0x170 [ 266.195351][ C0] kfree+0xef/0x2a0 [ 266.199180][ C0] skb_release_data+0x6b8/0x800 [ 266.204051][ C0] consume_skb+0xa2/0x100 [ 266.208408][ C0] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 266.213967][ C0] __iterate_interfaces+0x243/0x500 [ 266.219176][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 266.226214][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 266.231438][ C0] __hrtimer_run_queues+0x4eb/0xb70 [ 266.236657][ C0] hrtimer_run_softirq+0x176/0x240 [ 266.241792][ C0] handle_softirqs+0x339/0x830 [ 266.246568][ C0] __irq_exit_rcu+0x13b/0x230 [ 266.251273][ C0] irq_exit_rcu+0x5/0x20 [ 266.255533][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 266.261184][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.267189][ C0] [ 266.269521][ C0] The buggy address belongs to the object at ffff88805f04e800 [ 266.269521][ C0] which belongs to the cache kmalloc-512 of size 512 [ 266.283585][ C0] The buggy address is located 42 bytes inside of [ 266.283585][ C0] 512-byte region [ffff88805f04e800, ffff88805f04ea00) [ 266.296788][ C0] The buggy address belongs to the page: [ 266.302429][ C0] page:ffffea00017c1300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f04c [ 266.312611][ C0] head:ffffea00017c1300 order:2 compound_mapcount:0 compound_pincount:0 [ 266.320960][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 266.328977][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 266.337583][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 266.346260][ C0] page dumped because: kasan: bad access detected [ 266.352685][ C0] page_owner tracks the page as allocated [ 266.358405][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4185, ts 60575725054, free_ts 18440940875 [ 266.378908][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 266.384590][ C0] __alloc_pages+0x1ee/0x480 [ 266.389209][ C0] new_slab+0xc0/0x4b0 [ 266.393299][ C0] ___slab_alloc+0x80a/0xdd0 [ 266.397924][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 266.403752][ C0] __alloc_skb+0x22c/0x750 [ 266.408278][ C0] alloc_uevent_skb+0x7d/0x230 [ 266.413065][ C0] kobject_uevent_net_broadcast+0x2e6/0x530 [ 266.418978][ C0] kobject_uevent_env+0x556/0x890 [ 266.424028][ C0] device_bind_driver+0xa0/0xc0 [ 266.428896][ C0] mac80211_hwsim_new_radio+0x342/0x4080 [ 266.434551][ C0] hwsim_new_radio_nl+0xa6f/0xc40 [ 266.439597][ C0] genl_rcv_msg+0xcea/0xf90 [ 266.444121][ C0] netlink_rcv_skb+0x1f5/0x440 [ 266.448910][ C0] genl_rcv+0x24/0x40 [ 266.452909][ C0] netlink_unicast+0x774/0x920 [ 266.457693][ C0] page last free stack trace: [ 266.462378][ C0] free_unref_page_prepare+0x637/0x6c0 [ 266.467857][ C0] free_unref_page+0x8f/0x2a0 [ 266.472550][ C0] free_contig_range+0x96/0xf0 [ 266.477331][ C0] destroy_args+0xf0/0xa00 [ 266.481761][ C0] debug_vm_pgtable+0x321/0x380 [ 266.486627][ C0] do_one_initcall+0x272/0x730 [ 266.491410][ C0] do_initcall_level+0x137/0x1f0 [ 266.496366][ C0] do_initcalls+0x4b/0x90 [ 266.500706][ C0] kernel_init_freeable+0x3e9/0x570 [ 266.505922][ C0] kernel_init+0x19/0x1b0 [ 266.510269][ C0] ret_from_fork+0x1f/0x30 [ 266.514700][ C0] [ 266.517029][ C0] Memory state around the buggy address: [ 266.522663][ C0] ffff88805f04e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.530740][ C0] ffff88805f04e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.538812][ C0] >ffff88805f04e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.546883][ C0] ^ [ 266.552262][ C0] ffff88805f04e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.560332][ C0] ffff88805f04e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.568503][ C0] ================================================================== [ 266.576570][ C0] Disabling lock debugging due to kernel taint [ 266.582867][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.590069][ C0] CPU: 0 PID: 4192 Comm: syz-executor Tainted: G B syzkaller #0 [ 266.599013][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.609081][ C0] Call Trace: [ 266.612372][ C0] [ 266.615227][ C0] dump_stack_lvl+0x188/0x250 [ 266.619938][ C0] ? show_regs_print_info+0x20/0x20 [ 266.625160][ C0] ? load_image+0x400/0x400 [ 266.629712][ C0] panic+0x2e5/0x810 [ 266.633621][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 266.638144][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 266.644070][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 266.649992][ C0] ? _raw_spin_unlock+0x40/0x40 [ 266.654857][ C0] ? print_memory_metadata+0x314/0x400 [ 266.660469][ C0] ? rose_timer_expiry+0x470/0x490 [ 266.665605][ C0] check_panic_on_warn+0x80/0xa0 [ 266.670555][ C0] ? rose_timer_expiry+0x470/0x490 [ 266.675679][ C0] end_report+0x6d/0xf0 [ 266.679848][ C0] kasan_report+0x102/0x130 [ 266.684368][ C0] ? rose_timer_expiry+0x470/0x490 [ 266.689499][ C0] rose_timer_expiry+0x470/0x490 [ 266.694448][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 266.699486][ C0] call_timer_fn+0x17b/0x540 [ 266.704117][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 266.709184][ C0] ? __run_timers+0x800/0x800 [ 266.713879][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 266.719085][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 266.724296][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 266.729337][ C0] __run_timers+0x53e/0x800 [ 266.733862][ C0] ? detach_timer+0x2b0/0x2b0 [ 266.738551][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 266.744551][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 266.749417][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 266.754823][ C0] run_timer_softirq+0x63/0xf0 [ 266.759609][ C0] handle_softirqs+0x339/0x830 [ 266.764404][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 266.769270][ C0] ? do_softirq+0x210/0x210 [ 266.773789][ C0] __irq_exit_rcu+0x13b/0x230 [ 266.778479][ C0] ? irq_exit_rcu+0x20/0x20 [ 266.782995][ C0] irq_exit_rcu+0x5/0x20 [ 266.787248][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 266.792902][ C0] [ 266.795845][ C0] [ 266.798781][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.804778][ C0] RIP: 0010:find_lock_entries+0x807/0xd70 [ 266.810515][ C0] Code: 82 7c 03 00 00 e8 79 56 da ff 4c 89 b4 24 88 00 00 00 48 c7 84 24 98 00 00 00 03 00 00 00 e9 93 f9 ff ff 4c 89 f3 48 83 c3 18 <48> 89 d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 [ 266.830131][ C0] RSP: 0018:ffffc90002e2f7e0 EFLAGS: 00000286 [ 266.836218][ C0] RAX: ffffffff819eca95 RBX: ffffea0001595e18 RCX: ffff88801b5b9dc0 [ 266.844220][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.852212][ C0] RBP: ffffc90002e2f910 R08: ffffea0001595e07 R09: 1ffffd40002b2bc0 [ 266.860213][ C0] R10: dffffc0000000000 R11: fffff940002b2bc1 R12: ffffc90002e2f860 [ 266.868220][ C0] R13: fffffffffffffffe R14: ffffea0001595e00 R15: 0000000000000000 [ 266.876216][ C0] ? find_lock_entries+0x6b5/0xd70 [ 266.881348][ C0] ? find_get_entry+0x270/0x270 [ 266.886217][ C0] shmem_undo_range+0x29a/0x1930 [ 266.891182][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 266.896215][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 266.901436][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 266.906469][ C0] ? __rwlock_init+0x140/0x140 [ 266.911257][ C0] shmem_evict_inode+0x220/0xa40 [ 266.916272][ C0] ? inode_wait_for_writeback+0x1df/0x220 [ 266.922018][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 266.927577][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 266.932646][ C0] ? bit_waitqueue+0x30/0x30 [ 266.937261][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 266.942474][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 266.948042][ C0] evict+0x4c9/0x8d0 [ 266.951966][ C0] ? rcu_lock_release+0x5/0x20 [ 266.956744][ C0] ? proc_nr_inodes+0x320/0x320 [ 266.961609][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 266.966820][ C0] ? _raw_spin_unlock+0x24/0x40 [ 266.971677][ C0] ? iput+0x706/0x8a0 [ 266.975670][ C0] do_unlinkat+0x3e7/0x710 [ 266.980097][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 266.985222][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 266.990358][ C0] ? strncpy_from_user+0x1fb/0x360 [ 266.995492][ C0] ? getname_flags+0x1fe/0x500 [ 267.000276][ C0] __x64_sys_unlink+0x45/0x50 [ 267.004966][ C0] do_syscall_64+0x4c/0xa0 [ 267.009399][ C0] ? clear_bhb_loop+0x30/0x80 [ 267.014091][ C0] ? clear_bhb_loop+0x30/0x80 [ 267.018780][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.024691][ C0] RIP: 0033:0x7fdccb2a6887 [ 267.029124][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 267.048747][ C0] RSP: 002b:00007fff215300d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 267.057175][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdccb2a6887 [ 267.065161][ C0] RDX: 00007fff21530100 RSI: 00007fff21530190 RDI: 00007fff21530190 [ 267.073161][ C0] RBP: 00007fff21530190 R08: 00007fff21531190 R09: 00000000ffffffff [ 267.081148][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff21531220 [ 267.089137][ C0] R13: 00007fdccb33cf90 R14: 0000000000040126 R15: 00007fff21531260 [ 267.097129][ C0] [ 267.100472][ C0] Kernel Offset: disabled [ 267.104829][ C0] Rebooting in 86400 seconds..