[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. 2021/03/12 05:17:41 fuzzer started 2021/03/12 05:17:42 dialing manager at 10.128.0.169:36293 2021/03/12 05:17:42 syscalls: 3572 2021/03/12 05:17:42 code coverage: enabled 2021/03/12 05:17:42 comparison tracing: enabled 2021/03/12 05:17:42 extra coverage: enabled 2021/03/12 05:17:42 setuid sandbox: enabled 2021/03/12 05:17:42 namespace sandbox: enabled 2021/03/12 05:17:42 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/12 05:17:42 fault injection: enabled 2021/03/12 05:17:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/12 05:17:42 net packet injection: enabled 2021/03/12 05:17:42 net device setup: enabled 2021/03/12 05:17:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/12 05:17:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/12 05:17:42 USB emulation: enabled 2021/03/12 05:17:42 hci packet injection: enabled 2021/03/12 05:17:42 wifi device emulation: enabled 2021/03/12 05:17:42 802.15.4 emulation: enabled 2021/03/12 05:17:42 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/12 05:17:42 fetching corpus: 50, signal 54259/57981 (executing program) 2021/03/12 05:17:42 fetching corpus: 100, signal 74833/80248 (executing program) 2021/03/12 05:17:42 fetching corpus: 150, signal 96172/103155 (executing program) 2021/03/12 05:17:43 fetching corpus: 200, signal 105877/114514 (executing program) 2021/03/12 05:17:43 fetching corpus: 250, signal 120847/131008 (executing program) 2021/03/12 05:17:43 fetching corpus: 300, signal 131165/142829 (executing program) 2021/03/12 05:17:43 fetching corpus: 350, signal 138607/151808 (executing program) 2021/03/12 05:17:43 fetching corpus: 400, signal 145633/160314 (executing program) 2021/03/12 05:17:43 fetching corpus: 450, signal 159444/175391 (executing program) 2021/03/12 05:17:43 fetching corpus: 500, signal 168327/185613 (executing program) 2021/03/12 05:17:43 fetching corpus: 550, signal 177716/196223 (executing program) 2021/03/12 05:17:44 fetching corpus: 600, signal 185602/205352 (executing program) 2021/03/12 05:17:44 fetching corpus: 650, signal 200449/221178 (executing program) 2021/03/12 05:17:44 fetching corpus: 700, signal 207663/229606 (executing program) 2021/03/12 05:17:44 fetching corpus: 750, signal 214875/237970 (executing program) syzkaller login: [ 71.120987][ T3245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.127530][ T3245] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/12 05:17:44 fetching corpus: 800, signal 220559/244825 (executing program) 2021/03/12 05:17:44 fetching corpus: 850, signal 226836/252248 (executing program) 2021/03/12 05:17:45 fetching corpus: 900, signal 230764/257365 (executing program) 2021/03/12 05:17:45 fetching corpus: 950, signal 235457/263162 (executing program) 2021/03/12 05:17:45 fetching corpus: 1000, signal 238726/267632 (executing program) 2021/03/12 05:17:45 fetching corpus: 1050, signal 241093/271278 (executing program) 2021/03/12 05:17:45 fetching corpus: 1100, signal 246016/277301 (executing program) 2021/03/12 05:17:45 fetching corpus: 1150, signal 249886/282287 (executing program) 2021/03/12 05:17:45 fetching corpus: 1200, signal 254029/287528 (executing program) 2021/03/12 05:17:45 fetching corpus: 1250, signal 262067/296306 (executing program) 2021/03/12 05:17:45 fetching corpus: 1300, signal 266045/301307 (executing program) 2021/03/12 05:17:45 fetching corpus: 1350, signal 271525/307707 (executing program) 2021/03/12 05:17:45 fetching corpus: 1400, signal 275984/313059 (executing program) 2021/03/12 05:17:45 fetching corpus: 1450, signal 280231/318243 (executing program) 2021/03/12 05:17:46 fetching corpus: 1500, signal 284724/323584 (executing program) 2021/03/12 05:17:46 fetching corpus: 1550, signal 287208/327112 (executing program) 2021/03/12 05:17:46 fetching corpus: 1600, signal 292260/332985 (executing program) 2021/03/12 05:17:46 fetching corpus: 1650, signal 295834/337498 (executing program) 2021/03/12 05:17:46 fetching corpus: 1700, signal 300640/343077 (executing program) 2021/03/12 05:17:46 fetching corpus: 1750, signal 304508/347788 (executing program) 2021/03/12 05:17:46 fetching corpus: 1800, signal 308783/352842 (executing program) 2021/03/12 05:17:46 fetching corpus: 1850, signal 311287/356294 (executing program) 2021/03/12 05:17:46 fetching corpus: 1900, signal 314269/360158 (executing program) 2021/03/12 05:17:47 fetching corpus: 1950, signal 318272/364953 (executing program) 2021/03/12 05:17:47 fetching corpus: 2000, signal 322618/370030 (executing program) 2021/03/12 05:17:47 fetching corpus: 2050, signal 325657/373913 (executing program) 2021/03/12 05:17:47 fetching corpus: 2100, signal 332732/381314 (executing program) 2021/03/12 05:17:47 fetching corpus: 2150, signal 337467/386618 (executing program) 2021/03/12 05:17:47 fetching corpus: 2200, signal 342260/391939 (executing program) 2021/03/12 05:17:47 fetching corpus: 2250, signal 344820/395335 (executing program) 2021/03/12 05:17:47 fetching corpus: 2300, signal 347403/398709 (executing program) 2021/03/12 05:17:48 fetching corpus: 2350, signal 352266/404024 (executing program) 2021/03/12 05:17:48 fetching corpus: 2400, signal 355972/408300 (executing program) 2021/03/12 05:17:48 fetching corpus: 2450, signal 358411/411503 (executing program) 2021/03/12 05:17:48 fetching corpus: 2500, signal 362909/416463 (executing program) 2021/03/12 05:17:48 fetching corpus: 2550, signal 365834/420049 (executing program) 2021/03/12 05:17:48 fetching corpus: 2600, signal 370382/424995 (executing program) 2021/03/12 05:17:49 fetching corpus: 2650, signal 372623/427878 (executing program) 2021/03/12 05:17:49 fetching corpus: 2700, signal 375188/431079 (executing program) 2021/03/12 05:17:49 fetching corpus: 2750, signal 377224/433836 (executing program) 2021/03/12 05:17:49 fetching corpus: 2800, signal 381480/438458 (executing program) 2021/03/12 05:17:49 fetching corpus: 2850, signal 384252/441828 (executing program) 2021/03/12 05:17:49 fetching corpus: 2900, signal 386934/445067 (executing program) 2021/03/12 05:17:49 fetching corpus: 2950, signal 390597/449142 (executing program) 2021/03/12 05:17:49 fetching corpus: 3000, signal 393684/452732 (executing program) 2021/03/12 05:17:49 fetching corpus: 3050, signal 395204/454991 (executing program) 2021/03/12 05:17:50 fetching corpus: 3100, signal 399318/459347 (executing program) 2021/03/12 05:17:50 fetching corpus: 3150, signal 401907/462453 (executing program) 2021/03/12 05:17:50 fetching corpus: 3200, signal 404378/465476 (executing program) 2021/03/12 05:17:50 fetching corpus: 3250, signal 407093/468708 (executing program) 2021/03/12 05:17:50 fetching corpus: 3300, signal 410097/472117 (executing program) 2021/03/12 05:17:50 fetching corpus: 3350, signal 413888/476196 (executing program) 2021/03/12 05:17:50 fetching corpus: 3400, signal 415372/478330 (executing program) 2021/03/12 05:17:50 fetching corpus: 3450, signal 417330/480838 (executing program) 2021/03/12 05:17:50 fetching corpus: 3500, signal 420290/484192 (executing program) 2021/03/12 05:17:51 fetching corpus: 3550, signal 422595/486995 (executing program) 2021/03/12 05:17:51 fetching corpus: 3600, signal 423472/488590 (executing program) 2021/03/12 05:17:51 fetching corpus: 3650, signal 425506/491067 (executing program) 2021/03/12 05:17:51 fetching corpus: 3700, signal 427320/493426 (executing program) 2021/03/12 05:17:51 fetching corpus: 3750, signal 429715/496249 (executing program) 2021/03/12 05:17:51 fetching corpus: 3800, signal 431193/498341 (executing program) 2021/03/12 05:17:51 fetching corpus: 3850, signal 433276/500870 (executing program) 2021/03/12 05:17:51 fetching corpus: 3900, signal 435009/503105 (executing program) 2021/03/12 05:17:51 fetching corpus: 3950, signal 436742/505332 (executing program) 2021/03/12 05:17:52 fetching corpus: 4000, signal 438684/507715 (executing program) 2021/03/12 05:17:52 fetching corpus: 4050, signal 440580/510045 (executing program) 2021/03/12 05:17:52 fetching corpus: 4100, signal 441883/511873 (executing program) 2021/03/12 05:17:52 fetching corpus: 4150, signal 443475/513947 (executing program) 2021/03/12 05:17:52 fetching corpus: 4200, signal 445576/516435 (executing program) 2021/03/12 05:17:52 fetching corpus: 4250, signal 447270/518578 (executing program) 2021/03/12 05:17:52 fetching corpus: 4300, signal 449907/521447 (executing program) 2021/03/12 05:17:52 fetching corpus: 4350, signal 451375/523369 (executing program) 2021/03/12 05:17:53 fetching corpus: 4400, signal 453118/525511 (executing program) 2021/03/12 05:17:53 fetching corpus: 4450, signal 454476/527377 (executing program) 2021/03/12 05:17:53 fetching corpus: 4500, signal 456512/529753 (executing program) 2021/03/12 05:17:53 fetching corpus: 4550, signal 458789/532296 (executing program) 2021/03/12 05:17:53 fetching corpus: 4600, signal 460184/534154 (executing program) 2021/03/12 05:17:53 fetching corpus: 4650, signal 463393/537379 (executing program) 2021/03/12 05:17:53 fetching corpus: 4700, signal 465175/539544 (executing program) 2021/03/12 05:17:53 fetching corpus: 4750, signal 466855/541641 (executing program) 2021/03/12 05:17:53 fetching corpus: 4800, signal 468194/543427 (executing program) 2021/03/12 05:17:54 fetching corpus: 4850, signal 469843/545378 (executing program) 2021/03/12 05:17:54 fetching corpus: 4900, signal 472146/547872 (executing program) 2021/03/12 05:17:54 fetching corpus: 4950, signal 473929/549929 (executing program) 2021/03/12 05:17:54 fetching corpus: 5000, signal 475952/552133 (executing program) 2021/03/12 05:17:54 fetching corpus: 5050, signal 477042/553693 (executing program) 2021/03/12 05:17:54 fetching corpus: 5100, signal 478054/555202 (executing program) 2021/03/12 05:17:54 fetching corpus: 5150, signal 478972/556592 (executing program) 2021/03/12 05:17:54 fetching corpus: 5200, signal 480746/558631 (executing program) 2021/03/12 05:17:54 fetching corpus: 5250, signal 482823/560842 (executing program) 2021/03/12 05:17:54 fetching corpus: 5300, signal 484332/562707 (executing program) 2021/03/12 05:17:54 fetching corpus: 5350, signal 485392/564154 (executing program) 2021/03/12 05:17:55 fetching corpus: 5400, signal 486647/565776 (executing program) 2021/03/12 05:17:55 fetching corpus: 5450, signal 488656/567970 (executing program) 2021/03/12 05:17:55 fetching corpus: 5500, signal 490071/569691 (executing program) 2021/03/12 05:17:55 fetching corpus: 5550, signal 491077/571118 (executing program) 2021/03/12 05:17:55 fetching corpus: 5600, signal 492379/572779 (executing program) 2021/03/12 05:17:55 fetching corpus: 5650, signal 495186/575424 (executing program) 2021/03/12 05:17:55 fetching corpus: 5700, signal 497799/577955 (executing program) 2021/03/12 05:17:55 fetching corpus: 5750, signal 500329/580423 (executing program) 2021/03/12 05:17:55 fetching corpus: 5799, signal 501790/582099 (executing program) 2021/03/12 05:17:55 fetching corpus: 5849, signal 503778/584192 (executing program) 2021/03/12 05:17:56 fetching corpus: 5899, signal 505668/586128 (executing program) 2021/03/12 05:17:56 fetching corpus: 5949, signal 508004/588371 (executing program) 2021/03/12 05:17:56 fetching corpus: 5999, signal 510469/590689 (executing program) 2021/03/12 05:17:56 fetching corpus: 6049, signal 511828/592256 (executing program) 2021/03/12 05:17:56 fetching corpus: 6099, signal 513058/593759 (executing program) 2021/03/12 05:17:56 fetching corpus: 6149, signal 514726/595567 (executing program) 2021/03/12 05:17:56 fetching corpus: 6199, signal 516252/597307 (executing program) 2021/03/12 05:17:56 fetching corpus: 6249, signal 518895/599745 (executing program) 2021/03/12 05:17:56 fetching corpus: 6299, signal 519445/600740 (executing program) 2021/03/12 05:17:57 fetching corpus: 6349, signal 521197/602494 (executing program) 2021/03/12 05:17:57 fetching corpus: 6399, signal 522505/603940 (executing program) 2021/03/12 05:17:57 fetching corpus: 6449, signal 524148/605664 (executing program) 2021/03/12 05:17:57 fetching corpus: 6499, signal 525592/607245 (executing program) 2021/03/12 05:17:57 fetching corpus: 6549, signal 527822/609310 (executing program) 2021/03/12 05:17:57 fetching corpus: 6599, signal 528935/610624 (executing program) 2021/03/12 05:17:57 fetching corpus: 6649, signal 530400/612190 (executing program) 2021/03/12 05:17:58 fetching corpus: 6699, signal 531815/613718 (executing program) 2021/03/12 05:17:58 fetching corpus: 6749, signal 533216/615248 (executing program) 2021/03/12 05:17:58 fetching corpus: 6799, signal 534108/616445 (executing program) 2021/03/12 05:17:58 fetching corpus: 6849, signal 535967/618194 (executing program) 2021/03/12 05:17:58 fetching corpus: 6899, signal 537599/619820 (executing program) 2021/03/12 05:17:58 fetching corpus: 6949, signal 538338/620847 (executing program) 2021/03/12 05:17:58 fetching corpus: 6999, signal 539452/622153 (executing program) 2021/03/12 05:17:58 fetching corpus: 7049, signal 540906/623599 (executing program) 2021/03/12 05:17:58 fetching corpus: 7098, signal 542457/625174 (executing program) 2021/03/12 05:17:59 fetching corpus: 7148, signal 543771/626550 (executing program) 2021/03/12 05:17:59 fetching corpus: 7198, signal 544567/627629 (executing program) 2021/03/12 05:17:59 fetching corpus: 7248, signal 545757/628936 (executing program) 2021/03/12 05:17:59 fetching corpus: 7298, signal 547113/630300 (executing program) 2021/03/12 05:17:59 fetching corpus: 7348, signal 548320/631599 (executing program) 2021/03/12 05:17:59 fetching corpus: 7398, signal 549238/632702 (executing program) 2021/03/12 05:17:59 fetching corpus: 7448, signal 550417/633996 (executing program) 2021/03/12 05:17:59 fetching corpus: 7498, signal 551518/635201 (executing program) 2021/03/12 05:17:59 fetching corpus: 7548, signal 552494/636310 (executing program) 2021/03/12 05:18:00 fetching corpus: 7598, signal 553182/637318 (executing program) 2021/03/12 05:18:00 fetching corpus: 7648, signal 554209/638500 (executing program) 2021/03/12 05:18:00 fetching corpus: 7698, signal 555313/639722 (executing program) 2021/03/12 05:18:00 fetching corpus: 7748, signal 556548/641008 (executing program) 2021/03/12 05:18:00 fetching corpus: 7798, signal 558039/642407 (executing program) 2021/03/12 05:18:00 fetching corpus: 7848, signal 559461/643756 (executing program) 2021/03/12 05:18:00 fetching corpus: 7898, signal 560224/644728 (executing program) 2021/03/12 05:18:00 fetching corpus: 7948, signal 561191/645783 (executing program) 2021/03/12 05:18:00 fetching corpus: 7998, signal 562265/646931 (executing program) 2021/03/12 05:18:00 fetching corpus: 8048, signal 563657/648218 (executing program) 2021/03/12 05:18:01 fetching corpus: 8098, signal 564628/649264 (executing program) 2021/03/12 05:18:01 fetching corpus: 8148, signal 566803/651032 (executing program) 2021/03/12 05:18:01 fetching corpus: 8198, signal 567983/652269 (executing program) 2021/03/12 05:18:01 fetching corpus: 8248, signal 568991/653316 (executing program) 2021/03/12 05:18:01 fetching corpus: 8298, signal 570533/654617 (executing program) 2021/03/12 05:18:01 fetching corpus: 8348, signal 571411/655611 (executing program) 2021/03/12 05:18:02 fetching corpus: 8398, signal 572295/656594 (executing program) 2021/03/12 05:18:02 fetching corpus: 8448, signal 573489/657762 (executing program) 2021/03/12 05:18:02 fetching corpus: 8498, signal 574209/658642 (executing program) 2021/03/12 05:18:02 fetching corpus: 8548, signal 575487/659801 (executing program) 2021/03/12 05:18:02 fetching corpus: 8598, signal 576702/660927 (executing program) 2021/03/12 05:18:02 fetching corpus: 8648, signal 577811/662035 (executing program) 2021/03/12 05:18:02 fetching corpus: 8698, signal 578642/662939 (executing program) 2021/03/12 05:18:02 fetching corpus: 8748, signal 580499/664383 (executing program) 2021/03/12 05:18:02 fetching corpus: 8798, signal 581284/665258 (executing program) 2021/03/12 05:18:03 fetching corpus: 8848, signal 582112/666187 (executing program) 2021/03/12 05:18:03 fetching corpus: 8898, signal 582601/666878 (executing program) 2021/03/12 05:18:03 fetching corpus: 8948, signal 583890/668009 (executing program) 2021/03/12 05:18:03 fetching corpus: 8998, signal 584850/668935 (executing program) 2021/03/12 05:18:03 fetching corpus: 9048, signal 585770/669892 (executing program) 2021/03/12 05:18:03 fetching corpus: 9098, signal 586559/670765 (executing program) 2021/03/12 05:18:03 fetching corpus: 9148, signal 588336/672178 (executing program) 2021/03/12 05:18:03 fetching corpus: 9198, signal 589411/673165 (executing program) 2021/03/12 05:18:03 fetching corpus: 9248, signal 589844/673858 (executing program) 2021/03/12 05:18:04 fetching corpus: 9298, signal 590824/674859 (executing program) 2021/03/12 05:18:04 fetching corpus: 9348, signal 591761/675777 (executing program) 2021/03/12 05:18:04 fetching corpus: 9398, signal 592680/676727 (executing program) 2021/03/12 05:18:04 fetching corpus: 9448, signal 593382/677503 (executing program) 2021/03/12 05:18:04 fetching corpus: 9498, signal 594647/678584 (executing program) 2021/03/12 05:18:04 fetching corpus: 9548, signal 595984/679660 (executing program) 2021/03/12 05:18:04 fetching corpus: 9598, signal 597096/680602 (executing program) 2021/03/12 05:18:05 fetching corpus: 9648, signal 597949/681461 (executing program) 2021/03/12 05:18:05 fetching corpus: 9698, signal 599304/682548 (executing program) 2021/03/12 05:18:05 fetching corpus: 9748, signal 599882/683238 (executing program) 2021/03/12 05:18:05 fetching corpus: 9798, signal 601176/684338 (executing program) 2021/03/12 05:18:05 fetching corpus: 9848, signal 602260/685274 (executing program) 2021/03/12 05:18:05 fetching corpus: 9898, signal 603052/686066 (executing program) 2021/03/12 05:18:05 fetching corpus: 9948, signal 604443/687088 (executing program) 2021/03/12 05:18:05 fetching corpus: 9998, signal 605412/687960 (executing program) 2021/03/12 05:18:05 fetching corpus: 10048, signal 606486/688860 (executing program) 2021/03/12 05:18:05 fetching corpus: 10098, signal 607670/689786 (executing program) 2021/03/12 05:18:05 fetching corpus: 10148, signal 608622/690638 (executing program) 2021/03/12 05:18:06 fetching corpus: 10198, signal 609212/691326 (executing program) 2021/03/12 05:18:06 fetching corpus: 10248, signal 609594/691920 (executing program) 2021/03/12 05:18:06 fetching corpus: 10298, signal 610988/692924 (executing program) 2021/03/12 05:18:06 fetching corpus: 10348, signal 612694/694074 (executing program) 2021/03/12 05:18:06 fetching corpus: 10398, signal 613463/694788 (executing program) 2021/03/12 05:18:06 fetching corpus: 10448, signal 614702/695776 (executing program) 2021/03/12 05:18:06 fetching corpus: 10497, signal 615916/696728 (executing program) 2021/03/12 05:18:06 fetching corpus: 10547, signal 617003/697620 (executing program) 2021/03/12 05:18:06 fetching corpus: 10597, signal 618346/698585 (executing program) 2021/03/12 05:18:07 fetching corpus: 10647, signal 619066/699277 (executing program) 2021/03/12 05:18:07 fetching corpus: 10697, signal 619632/699917 (executing program) 2021/03/12 05:18:07 fetching corpus: 10747, signal 620761/700781 (executing program) 2021/03/12 05:18:07 fetching corpus: 10796, signal 621887/701608 (executing program) 2021/03/12 05:18:07 fetching corpus: 10846, signal 623457/702601 (executing program) 2021/03/12 05:18:07 fetching corpus: 10896, signal 624330/703304 (executing program) 2021/03/12 05:18:07 fetching corpus: 10946, signal 625193/704021 (executing program) 2021/03/12 05:18:07 fetching corpus: 10996, signal 626273/704845 (executing program) 2021/03/12 05:18:07 fetching corpus: 11045, signal 627216/705541 (executing program) 2021/03/12 05:18:07 fetching corpus: 11095, signal 628173/706306 (executing program) 2021/03/12 05:18:08 fetching corpus: 11145, signal 629021/706997 (executing program) 2021/03/12 05:18:08 fetching corpus: 11195, signal 629714/707613 (executing program) 2021/03/12 05:18:08 fetching corpus: 11244, signal 630972/708493 (executing program) 2021/03/12 05:18:08 fetching corpus: 11294, signal 631535/709070 (executing program) 2021/03/12 05:18:08 fetching corpus: 11343, signal 631998/709700 (executing program) 2021/03/12 05:18:08 fetching corpus: 11393, signal 632922/710389 (executing program) 2021/03/12 05:18:08 fetching corpus: 11443, signal 633697/711056 (executing program) 2021/03/12 05:18:08 fetching corpus: 11492, signal 634350/711649 (executing program) 2021/03/12 05:18:08 fetching corpus: 11542, signal 635393/712423 (executing program) 2021/03/12 05:18:09 fetching corpus: 11592, signal 636750/713308 (executing program) 2021/03/12 05:18:09 fetching corpus: 11642, signal 637632/713967 (executing program) 2021/03/12 05:18:09 fetching corpus: 11692, signal 638357/714621 (executing program) 2021/03/12 05:18:09 fetching corpus: 11742, signal 639732/715483 (executing program) 2021/03/12 05:18:09 fetching corpus: 11792, signal 640517/716052 (executing program) 2021/03/12 05:18:09 fetching corpus: 11841, signal 641104/716593 (executing program) 2021/03/12 05:18:09 fetching corpus: 11891, signal 642296/717343 (executing program) 2021/03/12 05:18:09 fetching corpus: 11941, signal 643220/718012 (executing program) 2021/03/12 05:18:09 fetching corpus: 11991, signal 644140/718711 (executing program) 2021/03/12 05:18:10 fetching corpus: 12041, signal 645066/719315 (executing program) 2021/03/12 05:18:10 fetching corpus: 12091, signal 646315/720082 (executing program) 2021/03/12 05:18:10 fetching corpus: 12141, signal 647076/720652 (executing program) 2021/03/12 05:18:10 fetching corpus: 12190, signal 647846/721223 (executing program) 2021/03/12 05:18:10 fetching corpus: 12240, signal 649272/722028 (executing program) 2021/03/12 05:18:10 fetching corpus: 12290, signal 649929/722539 (executing program) 2021/03/12 05:18:10 fetching corpus: 12340, signal 651229/723299 (executing program) 2021/03/12 05:18:10 fetching corpus: 12390, signal 652086/723870 (executing program) 2021/03/12 05:18:11 fetching corpus: 12440, signal 652929/724459 (executing program) 2021/03/12 05:18:11 fetching corpus: 12490, signal 653883/725056 (executing program) 2021/03/12 05:18:11 fetching corpus: 12540, signal 654706/725621 (executing program) 2021/03/12 05:18:11 fetching corpus: 12590, signal 655022/726005 (executing program) 2021/03/12 05:18:11 fetching corpus: 12640, signal 655806/726538 (executing program) 2021/03/12 05:18:11 fetching corpus: 12690, signal 656299/727013 (executing program) 2021/03/12 05:18:11 fetching corpus: 12740, signal 657562/727701 (executing program) 2021/03/12 05:18:11 fetching corpus: 12790, signal 659083/728482 (executing program) 2021/03/12 05:18:11 fetching corpus: 12840, signal 659632/728944 (executing program) 2021/03/12 05:18:12 fetching corpus: 12890, signal 660708/729541 (executing program) 2021/03/12 05:18:12 fetching corpus: 12940, signal 662121/730246 (executing program) 2021/03/12 05:18:12 fetching corpus: 12990, signal 662535/730662 (executing program) 2021/03/12 05:18:12 fetching corpus: 13040, signal 663491/731201 (executing program) 2021/03/12 05:18:12 fetching corpus: 13090, signal 665273/731993 (executing program) 2021/03/12 05:18:12 fetching corpus: 13140, signal 666065/732499 (executing program) 2021/03/12 05:18:12 fetching corpus: 13190, signal 667006/733053 (executing program) 2021/03/12 05:18:12 fetching corpus: 13240, signal 668314/733718 (executing program) 2021/03/12 05:18:13 fetching corpus: 13290, signal 669043/734189 (executing program) 2021/03/12 05:18:13 fetching corpus: 13340, signal 669611/734644 (executing program) 2021/03/12 05:18:13 fetching corpus: 13390, signal 670500/735180 (executing program) 2021/03/12 05:18:13 fetching corpus: 13440, signal 671710/735738 (executing program) 2021/03/12 05:18:13 fetching corpus: 13489, signal 672458/736187 (executing program) 2021/03/12 05:18:13 fetching corpus: 13539, signal 673434/736715 (executing program) 2021/03/12 05:18:13 fetching corpus: 13589, signal 674732/737281 (executing program) 2021/03/12 05:18:13 fetching corpus: 13639, signal 675327/737664 (executing program) 2021/03/12 05:18:13 fetching corpus: 13689, signal 676005/738073 (executing program) 2021/03/12 05:18:14 fetching corpus: 13739, signal 676843/738546 (executing program) 2021/03/12 05:18:14 fetching corpus: 13789, signal 678205/739138 (executing program) 2021/03/12 05:18:14 fetching corpus: 13837, signal 678567/739478 (executing program) 2021/03/12 05:18:14 fetching corpus: 13887, signal 679368/739917 (executing program) 2021/03/12 05:18:14 fetching corpus: 13937, signal 680399/740399 (executing program) 2021/03/12 05:18:14 fetching corpus: 13985, signal 681386/740866 (executing program) 2021/03/12 05:18:14 fetching corpus: 14035, signal 682583/741395 (executing program) 2021/03/12 05:18:14 fetching corpus: 14085, signal 683395/741799 (executing program) 2021/03/12 05:18:14 fetching corpus: 14135, signal 684012/742176 (executing program) 2021/03/12 05:18:15 fetching corpus: 14185, signal 684947/742623 (executing program) 2021/03/12 05:18:15 fetching corpus: 14235, signal 685451/742988 (executing program) 2021/03/12 05:18:15 fetching corpus: 14285, signal 685904/743268 (executing program) 2021/03/12 05:18:15 fetching corpus: 14334, signal 686838/743724 (executing program) 2021/03/12 05:18:15 fetching corpus: 14384, signal 687307/744041 (executing program) 2021/03/12 05:18:15 fetching corpus: 14434, signal 688339/744485 (executing program) 2021/03/12 05:18:15 fetching corpus: 14484, signal 689030/744803 (executing program) 2021/03/12 05:18:15 fetching corpus: 14534, signal 689781/745185 (executing program) 2021/03/12 05:18:15 fetching corpus: 14583, signal 690517/745560 (executing program) 2021/03/12 05:18:15 fetching corpus: 14633, signal 690957/745914 (executing program) 2021/03/12 05:18:15 fetching corpus: 14681, signal 692004/746319 (executing program) 2021/03/12 05:18:16 fetching corpus: 14731, signal 692553/746628 (executing program) 2021/03/12 05:18:16 fetching corpus: 14781, signal 692969/746905 (executing program) 2021/03/12 05:18:16 fetching corpus: 14829, signal 693647/747398 (executing program) 2021/03/12 05:18:16 fetching corpus: 14879, signal 694426/747760 (executing program) 2021/03/12 05:18:16 fetching corpus: 14929, signal 694962/748050 (executing program) 2021/03/12 05:18:16 fetching corpus: 14979, signal 695851/748404 (executing program) 2021/03/12 05:18:16 fetching corpus: 15029, signal 696501/748686 (executing program) 2021/03/12 05:18:16 fetching corpus: 15079, signal 697242/749012 (executing program) 2021/03/12 05:18:16 fetching corpus: 15129, signal 697654/749264 (executing program) 2021/03/12 05:18:16 fetching corpus: 15179, signal 698228/749535 (executing program) 2021/03/12 05:18:17 fetching corpus: 15229, signal 698856/749834 (executing program) 2021/03/12 05:18:17 fetching corpus: 15279, signal 699714/750142 (executing program) 2021/03/12 05:18:17 fetching corpus: 15329, signal 700847/750543 (executing program) 2021/03/12 05:18:17 fetching corpus: 15379, signal 701324/750814 (executing program) 2021/03/12 05:18:17 fetching corpus: 15429, signal 702108/751118 (executing program) 2021/03/12 05:18:17 fetching corpus: 15478, signal 703243/751473 (executing program) 2021/03/12 05:18:17 fetching corpus: 15528, signal 704016/751753 (executing program) 2021/03/12 05:18:17 fetching corpus: 15578, signal 704544/752035 (executing program) 2021/03/12 05:18:17 fetching corpus: 15628, signal 705032/752260 (executing program) 2021/03/12 05:18:17 fetching corpus: 15678, signal 706465/752646 (executing program) 2021/03/12 05:18:18 fetching corpus: 15728, signal 706920/752873 (executing program) 2021/03/12 05:18:18 fetching corpus: 15776, signal 707864/753182 (executing program) 2021/03/12 05:18:18 fetching corpus: 15826, signal 708356/753387 (executing program) 2021/03/12 05:18:18 fetching corpus: 15876, signal 709208/753676 (executing program) 2021/03/12 05:18:18 fetching corpus: 15926, signal 709689/753899 (executing program) 2021/03/12 05:18:18 fetching corpus: 15974, signal 710098/754108 (executing program) 2021/03/12 05:18:18 fetching corpus: 16024, signal 710589/754330 (executing program) 2021/03/12 05:18:18 fetching corpus: 16074, signal 711743/754655 (executing program) 2021/03/12 05:18:19 fetching corpus: 16124, signal 712434/754917 (executing program) 2021/03/12 05:18:19 fetching corpus: 16174, signal 713120/755132 (executing program) 2021/03/12 05:18:19 fetching corpus: 16224, signal 713685/755326 (executing program) 2021/03/12 05:18:19 fetching corpus: 16274, signal 714571/755570 (executing program) 2021/03/12 05:18:19 fetching corpus: 16324, signal 715485/755802 (executing program) 2021/03/12 05:18:19 fetching corpus: 16373, signal 715969/755996 (executing program) 2021/03/12 05:18:19 fetching corpus: 16421, signal 719464/756543 (executing program) 2021/03/12 05:18:19 fetching corpus: 16471, signal 720032/756725 (executing program) 2021/03/12 05:18:19 fetching corpus: 16521, signal 721106/756958 (executing program) 2021/03/12 05:18:19 fetching corpus: 16571, signal 721481/757130 (executing program) 2021/03/12 05:18:20 fetching corpus: 16621, signal 722209/757319 (executing program) 2021/03/12 05:18:20 fetching corpus: 16671, signal 722765/757486 (executing program) 2021/03/12 05:18:20 fetching corpus: 16721, signal 723250/757631 (executing program) 2021/03/12 05:18:20 fetching corpus: 16771, signal 723721/757805 (executing program) 2021/03/12 05:18:20 fetching corpus: 16821, signal 724287/757992 (executing program) 2021/03/12 05:18:20 fetching corpus: 16871, signal 726014/758259 (executing program) 2021/03/12 05:18:20 fetching corpus: 16919, signal 726324/758375 (executing program) 2021/03/12 05:18:20 fetching corpus: 16968, signal 726827/758539 (executing program) 2021/03/12 05:18:20 fetching corpus: 17018, signal 727262/758668 (executing program) 2021/03/12 05:18:20 fetching corpus: 17068, signal 727738/758815 (executing program) 2021/03/12 05:18:20 fetching corpus: 17118, signal 728188/758939 (executing program) 2021/03/12 05:18:21 fetching corpus: 17167, signal 728685/759069 (executing program) 2021/03/12 05:18:21 fetching corpus: 17217, signal 729508/759238 (executing program) 2021/03/12 05:18:21 fetching corpus: 17267, signal 729956/759371 (executing program) 2021/03/12 05:18:21 fetching corpus: 17317, signal 730533/759508 (executing program) 2021/03/12 05:18:21 fetching corpus: 17365, signal 731347/759657 (executing program) 2021/03/12 05:18:21 fetching corpus: 17415, signal 732445/759832 (executing program) 2021/03/12 05:18:21 fetching corpus: 17465, signal 733045/759977 (executing program) 2021/03/12 05:18:21 fetching corpus: 17515, signal 733426/760089 (executing program) 2021/03/12 05:18:21 fetching corpus: 17565, signal 734006/760202 (executing program) 2021/03/12 05:18:22 fetching corpus: 17615, signal 734654/760349 (executing program) 2021/03/12 05:18:22 fetching corpus: 17665, signal 735560/760509 (executing program) 2021/03/12 05:18:22 fetching corpus: 17715, signal 736938/760667 (executing program) 2021/03/12 05:18:22 fetching corpus: 17764, signal 737657/760790 (executing program) 2021/03/12 05:18:22 fetching corpus: 17814, signal 737919/760889 (executing program) 2021/03/12 05:18:22 fetching corpus: 17864, signal 739150/761014 (executing program) 2021/03/12 05:18:22 fetching corpus: 17914, signal 739824/761114 (executing program) 2021/03/12 05:18:22 fetching corpus: 17963, signal 740407/761211 (executing program) 2021/03/12 05:18:22 fetching corpus: 18013, signal 741024/761292 (executing program) 2021/03/12 05:18:22 fetching corpus: 18063, signal 741861/761388 (executing program) 2021/03/12 05:18:23 fetching corpus: 18112, signal 742469/761454 (executing program) 2021/03/12 05:18:23 fetching corpus: 18162, signal 743354/761544 (executing program) 2021/03/12 05:18:23 fetching corpus: 18212, signal 743799/761609 (executing program) 2021/03/12 05:18:23 fetching corpus: 18262, signal 744124/761669 (executing program) 2021/03/12 05:18:23 fetching corpus: 18312, signal 744992/761768 (executing program) 2021/03/12 05:18:23 fetching corpus: 18362, signal 745439/761866 (executing program) 2021/03/12 05:18:23 fetching corpus: 18412, signal 745821/761999 (executing program) 2021/03/12 05:18:23 fetching corpus: 18462, signal 746524/762055 (executing program) 2021/03/12 05:18:24 fetching corpus: 18512, signal 746963/762107 (executing program) 2021/03/12 05:18:24 fetching corpus: 18562, signal 747620/762164 (executing program) 2021/03/12 05:18:24 fetching corpus: 18612, signal 748519/762221 (executing program) 2021/03/12 05:18:24 fetching corpus: 18662, signal 749097/762267 (executing program) 2021/03/12 05:18:24 fetching corpus: 18712, signal 749603/762311 (executing program) 2021/03/12 05:18:24 fetching corpus: 18762, signal 750078/762358 (executing program) 2021/03/12 05:18:24 fetching corpus: 18812, signal 750488/762453 (executing program) 2021/03/12 05:18:24 fetching corpus: 18862, signal 751033/762587 (executing program) 2021/03/12 05:18:24 fetching corpus: 18912, signal 751507/762587 (executing program) 2021/03/12 05:18:24 fetching corpus: 18961, signal 751905/762589 (executing program) 2021/03/12 05:18:25 fetching corpus: 19011, signal 752936/762593 (executing program) 2021/03/12 05:18:25 fetching corpus: 19057, signal 753150/762593 (executing program) 2021/03/12 05:18:25 fetching corpus: 19057, signal 753150/762593 (executing program) 2021/03/12 05:18:26 starting 6 fuzzer processes 05:18:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1}}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 05:18:27 executing program 1: r0 = memfd_create(&(0x7f0000000000)='--{(:\x00', 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=';', 0x1}], 0x1, 0x0, 0x0, 0x1b) 05:18:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/139) 05:18:27 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) 05:18:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty}}]}, 0x50}}, 0x0) 05:18:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@in={0xa, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x168}}, {{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) [ 114.999529][ T8440] IPVS: ftp: loaded support on port[0] = 21 [ 115.118587][ T8442] IPVS: ftp: loaded support on port[0] = 21 [ 115.389900][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 115.458868][ T8444] IPVS: ftp: loaded support on port[0] = 21 [ 115.508095][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 115.620970][ T8446] IPVS: ftp: loaded support on port[0] = 21 [ 115.629959][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.642329][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.653086][ T8440] device bridge_slave_0 entered promiscuous mode [ 115.695984][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.703075][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.714456][ T8440] device bridge_slave_1 entered promiscuous mode [ 115.754559][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.807252][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.844085][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.868941][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.878644][ T8442] device bridge_slave_0 entered promiscuous mode [ 115.889011][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.897868][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.908651][ T8442] device bridge_slave_1 entered promiscuous mode [ 115.951335][ T8440] team0: Port device team_slave_0 added [ 115.959147][ T8448] IPVS: ftp: loaded support on port[0] = 21 [ 116.001431][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.012050][ T8440] team0: Port device team_slave_1 added [ 116.045410][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.067173][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.074146][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.120479][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.183599][ T8444] chnl_net:caif_netlink_parms(): no params data found [ 116.228493][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.236178][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.264107][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.285505][ T8442] team0: Port device team_slave_0 added [ 116.299906][ T8461] IPVS: ftp: loaded support on port[0] = 21 [ 116.321884][ T8442] team0: Port device team_slave_1 added [ 116.403931][ T8440] device hsr_slave_0 entered promiscuous mode [ 116.411681][ T8440] device hsr_slave_1 entered promiscuous mode [ 116.456965][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.463944][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.493229][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.544302][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.551512][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.579922][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.596706][ T8446] chnl_net:caif_netlink_parms(): no params data found [ 116.615847][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.622918][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.635742][ T8444] device bridge_slave_0 entered promiscuous mode [ 116.643858][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.653214][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.661872][ T8444] device bridge_slave_1 entered promiscuous mode [ 116.703107][ T8442] device hsr_slave_0 entered promiscuous mode [ 116.711232][ T8442] device hsr_slave_1 entered promiscuous mode [ 116.718784][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.727606][ T8442] Cannot create hsr debugfs directory [ 116.796374][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.854171][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.907285][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 116.955531][ T36] Bluetooth: hci0: command 0x0409 tx timeout [ 117.019114][ T8444] team0: Port device team_slave_0 added [ 117.061260][ T8444] team0: Port device team_slave_1 added [ 117.084474][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.092299][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.100942][ T8448] device bridge_slave_0 entered promiscuous mode [ 117.114722][ T9308] Bluetooth: hci1: command 0x0409 tx timeout [ 117.138029][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.145515][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.171997][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.186379][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.193448][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.203783][ T8448] device bridge_slave_1 entered promiscuous mode [ 117.243145][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.250841][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.277933][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.348035][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.356027][ T9308] Bluetooth: hci2: command 0x0409 tx timeout [ 117.357926][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.372061][ T8446] device bridge_slave_0 entered promiscuous mode [ 117.383434][ T8444] device hsr_slave_0 entered promiscuous mode [ 117.392686][ T8444] device hsr_slave_1 entered promiscuous mode [ 117.401073][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.409328][ T8444] Cannot create hsr debugfs directory [ 117.442340][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.450182][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.458325][ T8446] device bridge_slave_1 entered promiscuous mode [ 117.489458][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.502826][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.525159][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.540854][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.559136][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 117.594896][ T20] Bluetooth: hci3: command 0x0409 tx timeout [ 117.622646][ T8448] team0: Port device team_slave_0 added [ 117.638735][ T8448] team0: Port device team_slave_1 added [ 117.683486][ T8446] team0: Port device team_slave_0 added [ 117.699952][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.707386][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.733665][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.748417][ T8440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.763274][ T8446] team0: Port device team_slave_1 added [ 117.780472][ T8440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.790137][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.799153][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.825747][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.834712][ T36] Bluetooth: hci4: command 0x0409 tx timeout [ 117.867612][ T8440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.890592][ T8440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.917594][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.925961][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.953000][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.969333][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.976324][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.002921][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.043309][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.050554][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.059009][ T8461] device bridge_slave_0 entered promiscuous mode [ 118.069350][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.076868][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.084869][ T8461] device bridge_slave_1 entered promiscuous mode [ 118.094368][ T8448] device hsr_slave_0 entered promiscuous mode [ 118.101672][ T8448] device hsr_slave_1 entered promiscuous mode [ 118.109299][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.116991][ T8448] Cannot create hsr debugfs directory [ 118.154404][ T8446] device hsr_slave_0 entered promiscuous mode [ 118.160648][ T20] Bluetooth: hci5: command 0x0409 tx timeout [ 118.171902][ T8446] device hsr_slave_1 entered promiscuous mode [ 118.178540][ T8446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.186761][ T8446] Cannot create hsr debugfs directory [ 118.227942][ T8442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.267907][ T8442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.288479][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.304153][ T8442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.345945][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.372158][ T8442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.462934][ T8461] team0: Port device team_slave_0 added [ 118.517274][ T8461] team0: Port device team_slave_1 added [ 118.535350][ T8444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.556253][ T8444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.613329][ T8444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.634363][ T8444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.663732][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.670920][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.698293][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.758651][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.776513][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.783500][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.810466][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.842228][ T8461] device hsr_slave_0 entered promiscuous mode [ 118.849912][ T8461] device hsr_slave_1 entered promiscuous mode [ 118.858321][ T8461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.866629][ T8461] Cannot create hsr debugfs directory [ 118.896693][ T8446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.928610][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.939818][ T8446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.956395][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.967251][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.001711][ T8448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.014099][ T8446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.034677][ T9703] Bluetooth: hci0: command 0x041b tx timeout [ 119.047829][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.057465][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.066897][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.074151][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.092943][ T8448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.102573][ T8446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.125284][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.137254][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.150354][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.159760][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.172979][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.180260][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.194732][ T8448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.202053][ T9308] Bluetooth: hci1: command 0x041b tx timeout [ 119.227344][ T8448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.241688][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.252302][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.261646][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.269532][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.313337][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.361764][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.377928][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.390965][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.401690][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.412157][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.421196][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.430231][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.434639][ T9731] Bluetooth: hci2: command 0x041b tx timeout [ 119.444883][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.452005][ T9605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.460290][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.469629][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.478618][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.485765][ T9605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.493769][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.502356][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.531889][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.541248][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.553131][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.562493][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.581284][ T8440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.615955][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.626138][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.633805][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.642994][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.655343][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.675238][ T9703] Bluetooth: hci3: command 0x041b tx timeout [ 119.691965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.714036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.726721][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.733780][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.785210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.793728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.804830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.813117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.822873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.831758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.840100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.848302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.857593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.866669][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.873831][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.882860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.915361][ T36] Bluetooth: hci4: command 0x041b tx timeout [ 119.946202][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.959805][ T8442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.971467][ T8442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.985678][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.997343][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.005899][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.014260][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.025390][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.033682][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.042904][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.056999][ T8461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.071243][ T8461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.100610][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.117360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.129805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.139779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.150063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.159788][ T8461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.173849][ T8461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.200716][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.208767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.231332][ T8444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.243468][ T20] Bluetooth: hci5: command 0x041b tx timeout [ 120.250401][ T8444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.277550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.286531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.296790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.306795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.316906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.325382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.333365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.346031][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.355958][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.368039][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.420594][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.430267][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.440958][ T9515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.457045][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.475533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.486041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.493949][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.502025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.511496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.521279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.530181][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.537291][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.561907][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.570214][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.579479][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.588363][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.595498][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.603673][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.612470][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.621090][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.628222][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.637304][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.646762][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.655422][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.662473][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.677052][ T8440] device veth0_vlan entered promiscuous mode [ 120.690668][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.723400][ T8440] device veth1_vlan entered promiscuous mode [ 120.736736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.748585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.756961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.767233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.776168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.785239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.793697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.845369][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.853087][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.863169][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.871727][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.881707][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.890807][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.900422][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.909246][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.918151][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.927386][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.936139][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.944967][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.953931][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.978112][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.988265][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.997444][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.006333][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.015549][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.023838][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.050906][ T8446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.067356][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.095227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.103155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.113340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.114849][ T9634] Bluetooth: hci0: command 0x040f tx timeout [ 121.124035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.137059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.146001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.162589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.187127][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.211276][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.236985][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.257516][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.275619][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.284223][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.302001][ T8442] device veth0_vlan entered promiscuous mode [ 121.312781][ T9634] Bluetooth: hci1: command 0x040f tx timeout [ 121.327378][ T8440] device veth0_macvtap entered promiscuous mode [ 121.338049][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.350894][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.363204][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.382325][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.390774][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.399697][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.409007][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.425828][ T8440] device veth1_macvtap entered promiscuous mode [ 121.442119][ T8444] device veth0_vlan entered promiscuous mode [ 121.451505][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.473039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.481210][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.490325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.501004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.509008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.514517][ T9670] Bluetooth: hci2: command 0x040f tx timeout [ 121.518141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.531761][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.550978][ T8444] device veth1_vlan entered promiscuous mode [ 121.562891][ T8442] device veth1_vlan entered promiscuous mode [ 121.574092][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.603358][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.618020][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.626869][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.635911][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.645894][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.655149][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.663678][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.675445][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.691034][ T8446] device veth0_vlan entered promiscuous mode [ 121.708366][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.728740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.746080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.754934][ T9684] Bluetooth: hci3: command 0x040f tx timeout [ 121.757353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.770677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.780547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.789766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.809723][ T8446] device veth1_vlan entered promiscuous mode [ 121.826848][ T8440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.846425][ T8440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.855413][ T8440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.864119][ T8440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.883570][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.892684][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.903160][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.912191][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.919297][ T9684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.928505][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.937261][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.945991][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.953078][ T9684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.988560][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.005463][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.011262][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.023959][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.041807][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.064346][ T9684] Bluetooth: hci4: command 0x040f tx timeout [ 122.074941][ T8442] device veth0_macvtap entered promiscuous mode [ 122.108692][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.119396][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.130545][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.140163][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.150355][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.160263][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.170266][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.179547][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.188499][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.198218][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.207899][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.216847][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.232288][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.250653][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.264101][ T8442] device veth1_macvtap entered promiscuous mode [ 122.275875][ T8446] device veth0_macvtap entered promiscuous mode [ 122.290602][ T8446] device veth1_macvtap entered promiscuous mode [ 122.302456][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.310426][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.323886][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.332268][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.345006][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.353162][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.368278][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.378743][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.390753][ T20] Bluetooth: hci5: command 0x040f tx timeout [ 122.407261][ T8444] device veth0_macvtap entered promiscuous mode [ 122.441052][ T8448] device veth0_vlan entered promiscuous mode [ 122.466824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.477218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.487092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.496064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.503469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.520256][ T8444] device veth1_macvtap entered promiscuous mode [ 122.547995][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 122.570311][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.586165][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.593534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.601895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.610700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.619294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.629892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.645163][ T8448] device veth1_vlan entered promiscuous mode [ 122.658415][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 122.669898][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.679942][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 122.690521][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.701787][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.724611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.732661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.746303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.768208][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.799363][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 122.824202][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.856088][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.875323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.884047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.906115][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 122.922285][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.941052][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 122.952539][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.969497][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.977785][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 122.989105][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.000255][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.011339][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.022478][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.033433][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.046808][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.063336][ T8442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.073426][ T8442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.082779][ T8442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.092832][ T8442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.103931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.125090][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.133752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.143721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.156572][ T8446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.167447][ T8446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.177152][ T8446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.186055][ T8446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.194382][ T9670] Bluetooth: hci0: command 0x0419 tx timeout [ 123.203790][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 123.221647][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.232845][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 123.244005][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.254627][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 123.265184][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.281634][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.314077][ T8394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.314660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.326551][ T8394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.355242][ T9703] Bluetooth: hci1: command 0x0419 tx timeout [ 123.359280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.373193][ T8444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.382458][ T8444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.391685][ T8444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.400909][ T8444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.454726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.462767][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.472625][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.505485][ T8448] device veth0_macvtap entered promiscuous mode [ 123.525911][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.534067][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.543866][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.571616][ T8448] device veth1_macvtap entered promiscuous mode [ 123.595977][ T9703] Bluetooth: hci2: command 0x0419 tx timeout [ 123.638835][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.665975][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.703624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.726830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.741686][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.761273][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.772005][ T8461] device veth0_vlan entered promiscuous mode [ 123.810475][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.822590][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.836567][ T9731] Bluetooth: hci3: command 0x0419 tx timeout [ 123.870184][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.911916][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.933278][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.945285][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.955929][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.968452][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.979053][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 123.990099][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:18:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1}}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 124.006004][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.053893][ T8461] device veth1_vlan entered promiscuous mode [ 124.074733][ T252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.075256][ T20] Bluetooth: hci4: command 0x0419 tx timeout [ 124.082767][ T252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.095538][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.125679][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.136463][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.148580][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 124.165618][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.177780][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 124.188790][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.198892][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 124.209462][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.219444][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 124.231012][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.245954][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.262001][ T252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.272563][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.281442][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.290860][ T252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.320417][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.341192][ T8448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.358805][ T8448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 05:18:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1}}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 124.374801][ T8448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.383635][ T8448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.482189][ T9634] Bluetooth: hci5: command 0x0419 tx timeout 05:18:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@multicast1}}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) [ 124.553825][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.555618][ T8394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.589548][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.602220][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.606245][ T8394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.620396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.628186][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.640127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.663936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.686610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.706648][ T8461] device veth0_macvtap entered promiscuous mode [ 124.735704][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.756698][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 05:18:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0xb0b}, 0x14}}, 0x0) [ 124.787028][ T8461] device veth1_macvtap entered promiscuous mode [ 124.799455][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.817815][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.882906][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.900658][ T9752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.956179][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.971544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:18:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0xb0b}, 0x14}}, 0x0) 05:18:38 executing program 1: r0 = memfd_create(&(0x7f0000000000)='--{(:\x00', 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=';', 0x1}], 0x1, 0x0, 0x0, 0x1b) 05:18:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/139) [ 124.997013][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.051329][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.063550][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.074292][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.085694][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.097938][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.119424][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.140032][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.160168][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.172661][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.202678][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.234923][ T9871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.242920][ T9871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 05:18:38 executing program 1: r0 = memfd_create(&(0x7f0000000000)='--{(:\x00', 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=';', 0x1}], 0x1, 0x0, 0x0, 0x1b) [ 125.268543][ T9871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.300571][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.334134][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.347638][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 05:18:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/139) [ 125.381515][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.394071][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.414695][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.432893][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.455288][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.472787][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.495331][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.507729][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.521912][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.532354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.544857][ T8394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.556178][ T8461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.573845][ T8394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.581726][ T8461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.600384][ T8461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.617371][ T8461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.670585][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.742354][ T37] audit: type=1804 audit(1615526319.247:2): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/0/file0" dev="sda1" ino=14196 res=1 errno=0 05:18:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0xb0b}, 0x14}}, 0x0) [ 125.817171][ T37] audit: type=1804 audit(1615526319.257:3): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/0/file0" dev="sda1" ino=14196 res=1 errno=0 [ 125.941392][ T37] audit: type=1804 audit(1615526319.257:4): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/0/file0" dev="sda1" ino=14196 res=1 errno=0 [ 125.970884][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 05:18:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty}}]}, 0x50}}, 0x0) [ 125.999617][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.021173][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.058951][ T37] audit: type=1804 audit(1615526319.267:5): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/0/file0" dev="sda1" ino=14196 res=1 errno=0 [ 126.086015][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.097785][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.111466][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:18:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@in={0xa, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x168}}, {{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) 05:18:39 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) 05:18:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/139) 05:18:39 executing program 1: r0 = memfd_create(&(0x7f0000000000)='--{(:\x00', 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=';', 0x1}], 0x1, 0x0, 0x0, 0x1b) 05:18:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0xb0b}, 0x14}}, 0x0) 05:18:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty}}]}, 0x50}}, 0x0) [ 126.375264][ T37] audit: type=1804 audit(1615526319.887:6): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/1/file0" dev="sda1" ino=14209 res=1 errno=0 05:18:39 executing program 0: r0 = perf_event_open(&(0x7f0000002a00)={0x2, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':1)+/\x18\x00') 05:18:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty}}]}, 0x50}}, 0x0) 05:18:39 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) 05:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@in={0xa, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88000000000000000901000001010000b79cb0eb0de73a37192595d1bd3f7690b70aa26bc833011ed59bdddb7bbba12839e319e2f4f01cf1877a653558ff1c485132b7c87b8409d7b6dafaa71ae733424ddc08db08529f4c1ac7a532029bb16967deb3a388f34ed6207491f270ec0537b3a21fcb22a7d17266a003b8d9a2e13a0ca1647cae000000180000000000000009010000ffffff7f5d46bcf0a03ff30c900000000000000006000000000000008709ef99ab95b91d59d9eebc157843f1b4d355799f61a49377eb5560796b86ba2f6eddef60e331aafb5fd0bc927fabfdcb3d8089c478195c87e4a37b63c004d695d3b117e0b088b9f8c67c831d8ef53bb70d3799f95af8bf3e25227cacdac8119b147d1f0ce1f835b36a30f98536eb6d37c6e5038d8c7776eca001000000000038"], 0x168}}, {{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) 05:18:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11}, 0x40) [ 126.491115][ T37] audit: type=1804 audit(1615526319.897:7): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/1/file0" dev="sda1" ino=14209 res=1 errno=0 05:18:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='D', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1}], 0x10}}], 0x2, 0x40000) 05:18:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 05:18:40 executing program 0: r0 = perf_event_open(&(0x7f0000002a00)={0x2, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':1)+/\x18\x00') 05:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@in={0xa, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x168}}, {{&(0x7f0000000000)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) 05:18:40 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x24801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) [ 126.675025][ T37] audit: type=1804 audit(1615526320.187:8): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/2/file0" dev="sda1" ino=14216 res=1 errno=0 [ 126.702433][ T9950] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:18:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11}, 0x40) [ 126.750065][ T37] audit: type=1804 audit(1615526320.187:9): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/2/file0" dev="sda1" ino=14216 res=1 errno=0 05:18:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='D', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1}], 0x10}}], 0x2, 0x40000) [ 126.854996][ T9956] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 05:18:40 executing program 0: r0 = perf_event_open(&(0x7f0000002a00)={0x2, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':1)+/\x18\x00') [ 126.924825][ T37] audit: type=1804 audit(1615526320.437:10): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/3/file0" dev="sda1" ino=14213 res=1 errno=0 05:18:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11}, 0x40) 05:18:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000003700), 0x10) sendmsg$can_bcm(r0, &(0x7f0000001580)={&(0x7f0000001240), 0x10, &(0x7f0000001540)={&(0x7f00000014c0)={0x6, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7e3bd450826303af"}}, 0x48}}, 0x0) [ 127.013735][ T37] audit: type=1804 audit(1615526320.477:11): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir024029471/syzkaller.EOgqFJ/3/file0" dev="sda1" ino=14213 res=1 errno=0 05:18:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="1e283943e2", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:18:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='D', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1}], 0x10}}], 0x2, 0x40000) 05:18:40 executing program 0: r0 = perf_event_open(&(0x7f0000002a00)={0x2, 0x70, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=':1)+/\x18\x00') [ 127.735280][ T9992] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 127.798061][T10000] bond1 (unregistering): Released all slaves 05:18:41 executing program 4: openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) 05:18:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11}, 0x40) 05:18:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='D', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1}], 0x10}}], 0x2, 0x40000) 05:18:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="1e283943e2", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:18:41 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) 05:18:41 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffe, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f00000002c0)="bcd8e87698417d53caff7e7512cfe6f44c3a622fdd29ec40a7968b3010d36dbe1b8acfbbb9d9232e62e37fa001212857289f9aff037024beccf7d987f1aad8a94d26a71699c4b1218f8b8ef78d4c2d8a21e2971512d8aad224bae7ee9a1a7c66bfcf2d2f0a1fee7fd36a06d08200f6bf2dfbdc4ed2133a91624dc98bf89a425fd525063e0b32100811f738efabd544c84b658932c1aec42e98bc") exit_group(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = gettid() tkill(r1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000009d0000000001fd00000000ecdf40e65cc780220000000000000000000000000000000300100000000000000000000004000f00000000000000000000000000000000000000000000200000000000000000000000000000000001000000000000000000004000000000000100258d7a3500000020a6ffffffffffffff00000200000000000000feffffff00000000000000f2ffffffffffffff74b6628ddfb1cc186d6308000000000000000073797a10fbffffff00000200000000010000000000030000cf0a000000000000000000000900000000000fbc7f5c7e5ca78100980d94ccc76e4b85000000000016000000000000000000000000000000ffff0000"], 0x12e) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup2(r2, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) [ 128.033228][ C1] hrtimer: interrupt took 84781 ns 05:18:41 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x2}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'erspan0\x00', 'lo\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) socket(0x0, 0x0, 0x0) 05:18:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="1e283943e2", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 05:18:41 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) 05:18:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) eventfd(0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 128.163447][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 05:18:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x10d, 0x11, &(0x7f0000000000)=ANY=[], 0x10) [ 128.222096][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.311788][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.320639][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.328600][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.336755][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.344689][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.352612][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.360812][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.369677][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.378736][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.386638][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.396802][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.410320][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.419044][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.427128][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.435657][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.443065][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.454232][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.461665][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.479172][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.487367][ T9703] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 128.503192][T10082] Cannot find add_set index 0 as target 05:18:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ae88bff824b000005a90f57f077030eff0f64ebbee07962c22772e11b44e01d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000001300)="53000000fcffffff7704a00000000400400200200000018100800408000000000000000015aeb07fec07db9e7977da68d162c43de1c9fe65651bca74eb3b4a31ab868513ce43e9c3d47a28cf74ee0a54fd505297af9c465e", 0x58}], 0x2) [ 128.519924][ T9703] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on %z5 05:18:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffe, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f00000002c0)="bcd8e87698417d53caff7e7512cfe6f44c3a622fdd29ec40a7968b3010d36dbe1b8acfbbb9d9232e62e37fa001212857289f9aff037024beccf7d987f1aad8a94d26a71699c4b1218f8b8ef78d4c2d8a21e2971512d8aad224bae7ee9a1a7c66bfcf2d2f0a1fee7fd36a06d08200f6bf2dfbdc4ed2133a91624dc98bf89a425fd525063e0b32100811f738efabd544c84b658932c1aec42e98bc") exit_group(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = gettid() tkill(r1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup2(r2, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) 05:18:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="1e283943e2", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 128.669456][T10106] Please use ioctl(SG_SUBMIT_V3) instead of write(), [ 128.669456][T10106] See: http://sg.danny.cz/sg/sg_v40.html [ 128.670953][T10104] input: syz0 as /devices/virtual/input/input5 [ 128.720848][T10106] ================================================================== [ 128.729227][T10106] BUG: KASAN: double-free or invalid-free in kfree+0xe5/0x7f0 [ 128.736721][T10106] [ 128.739054][T10106] CPU: 0 PID: 10106 Comm: syz-executor.2 Not tainted 5.12.0-rc2-next-20210311-syzkaller #0 [ 128.749076][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.759150][T10106] Call Trace: [ 128.762451][T10106] dump_stack+0x141/0x1d7 [ 128.766818][T10106] ? kfree+0xe5/0x7f0 [ 128.770816][T10106] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 128.777866][T10106] ? kfree+0xe5/0x7f0 [ 128.781866][T10106] ? kfree+0xe5/0x7f0 [ 128.785864][T10106] kasan_report_invalid_free+0x51/0x80 [ 128.791348][T10106] __kasan_slab_free+0x118/0x130 [ 128.796310][T10106] slab_free_freelist_hook+0x92/0x210 [ 128.801719][T10106] kfree+0xe5/0x7f0 [ 128.805547][T10106] ? sg_finish_scsi_blk_rq+0x690/0x810 [ 128.811042][T10106] sg_finish_scsi_blk_rq+0x690/0x810 [ 128.816350][T10106] ? sg_execute_cmd+0x830/0x830 [ 128.821226][T10106] ? __schedule+0x914/0x2150 [ 128.825848][T10106] ? io_schedule_timeout+0x140/0x140 [ 128.831164][T10106] ? lock_release+0x720/0x720 [ 128.835869][T10106] sg_common_write+0xa07/0xe70 [ 128.840659][T10106] ? sg_start_req+0x24e0/0x24e0 [ 128.845530][T10106] ? tick_nohz_tick_stopped+0x13/0xa0 [ 128.850927][T10106] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 128.857291][T10106] ? __irq_work_queue_local+0x125/0x190 [ 128.862866][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 05:18:42 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) 05:18:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x10d, 0x11, &(0x7f0000000000)=ANY=[], 0x10) [ 128.869132][T10106] ? irq_work_queue+0x29/0x80 [ 128.873832][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 128.880093][T10106] ? wake_up_klogd.part.0+0x8e/0xd0 [ 128.885341][T10106] ? vprintk_emit+0x13a/0x560 [ 128.890043][T10106] sg_v3_submit+0x3b1/0x530 [ 128.894573][T10106] ? sg_common_write+0xe70/0xe70 [ 128.899529][T10106] ? record_print_text.cold+0x16/0x16 [ 128.904943][T10106] sg_write.part.0+0xaf8/0xec0 [ 128.909731][T10106] ? sg_v3_submit+0x530/0x530 [ 128.914444][T10106] ? __might_fault+0xd3/0x180 [ 128.919149][T10106] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 128.924890][T10106] ? iov_iter_advance+0x33b/0x18e0 [ 128.930030][T10106] ? csum_and_copy_to_iter+0x1c40/0x1c40 [ 128.935679][T10106] ? apparmor_file_permission+0x26e/0x4e0 [ 128.941427][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 128.947689][T10106] ? security_file_permission+0x248/0x560 [ 128.953445][T10106] sg_write+0x87/0x120 [ 128.957539][T10106] do_iter_write+0x489/0x670 [ 128.962167][T10106] vfs_writev+0x1aa/0x630 [ 128.966522][T10106] ? vfs_iter_write+0xa0/0xa0 [ 128.971225][T10106] ? lock_downgrade+0x6e0/0x6e0 [ 128.976113][T10106] ? __fget_files+0x288/0x3d0 [ 128.980815][T10106] ? __fget_light+0xea/0x280 [ 128.985435][T10106] do_writev+0x139/0x300 [ 128.989704][T10106] ? vfs_writev+0x630/0x630 [ 128.994230][T10106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 129.000149][T10106] do_syscall_64+0x2d/0x70 [ 129.004586][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.010500][T10106] RIP: 0033:0x465f69 [ 129.014418][T10106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.034048][T10106] RSP: 002b:00007efc031c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 129.042486][T10106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 129.050480][T10106] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 129.058470][T10106] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 129.066458][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 129.074451][T10106] R13: 00007ffd5494dfdf R14: 00007efc031c9300 R15: 0000000000022000 [ 129.082465][T10106] [ 129.084806][T10106] Allocated by task 10106: [ 129.089231][T10106] kasan_save_stack+0x1b/0x40 [ 129.093950][T10106] __kasan_kmalloc+0x99/0xc0 [ 129.098557][T10106] sg_start_req+0x16f/0x24e0 [ 129.103167][T10106] sg_common_write+0x5fd/0xe70 [ 129.107952][T10106] sg_v3_submit+0x3b1/0x530 [ 129.112482][T10106] sg_write.part.0+0xaf8/0xec0 [ 129.117264][T10106] sg_write+0x87/0x120 [ 129.121347][T10106] do_iter_write+0x489/0x670 [ 129.125951][T10106] vfs_writev+0x1aa/0x630 [ 129.130304][T10106] do_writev+0x139/0x300 [ 129.134564][T10106] do_syscall_64+0x2d/0x70 [ 129.139000][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.145000][T10106] [ 129.147326][T10106] Freed by task 10106: [ 129.151478][T10106] kasan_save_stack+0x1b/0x40 [ 129.156179][T10106] kasan_set_track+0x1c/0x30 [ 129.160785][T10106] kasan_set_free_info+0x20/0x30 [ 129.165772][T10106] __kasan_slab_free+0xf5/0x130 [ 129.170641][T10106] slab_free_freelist_hook+0x92/0x210 [ 129.176036][T10106] kfree+0xe5/0x7f0 [ 129.179856][T10106] sg_start_req+0x1b33/0x24e0 [ 129.184551][T10106] sg_common_write+0x5fd/0xe70 [ 129.189331][T10106] sg_v3_submit+0x3b1/0x530 [ 129.193850][T10106] sg_write.part.0+0xaf8/0xec0 [ 129.198630][T10106] sg_write+0x87/0x120 [ 129.202714][T10106] do_iter_write+0x489/0x670 [ 129.207322][T10106] vfs_writev+0x1aa/0x630 [ 129.211709][T10106] do_writev+0x139/0x300 [ 129.215966][T10106] do_syscall_64+0x2d/0x70 [ 129.220402][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 129.226317][T10106] [ 129.228649][T10106] The buggy address belongs to the object at ffff88801cab6f00 [ 129.228649][T10106] which belongs to the cache kmalloc-128 of size 128 [ 129.243598][T10106] The buggy address is located 0 bytes inside of [ 129.243598][T10106] 128-byte region [ffff88801cab6f00, ffff88801cab6f80) [ 129.256723][T10106] The buggy address belongs to the page: [ 129.262365][T10106] page:ffffea000072ad80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cab6 [ 129.272536][T10106] flags: 0xfff00000000200(slab) [ 129.277500][T10106] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff8880108418c0 [ 129.286219][T10106] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 129.294811][T10106] page dumped because: kasan: bad access detected [ 129.301230][T10106] [ 129.303646][T10106] Memory state around the buggy address: [ 129.309287][T10106] ffff88801cab6e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 05:18:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffe, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f00000002c0)="bcd8e87698417d53caff7e7512cfe6f44c3a622fdd29ec40a7968b3010d36dbe1b8acfbbb9d9232e62e37fa001212857289f9aff037024beccf7d987f1aad8a94d26a71699c4b1218f8b8ef78d4c2d8a21e2971512d8aad224bae7ee9a1a7c66bfcf2d2f0a1fee7fd36a06d08200f6bf2dfbdc4ed2133a91624dc98bf89a425fd525063e0b32100811f738efabd544c84b658932c1aec42e98bc") exit_group(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = gettid() tkill(r1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup2(r2, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) 05:18:42 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffe, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f00000002c0)="bcd8e87698417d53caff7e7512cfe6f44c3a622fdd29ec40a7968b3010d36dbe1b8acfbbb9d9232e62e37fa001212857289f9aff037024beccf7d987f1aad8a94d26a71699c4b1218f8b8ef78d4c2d8a21e2971512d8aad224bae7ee9a1a7c66bfcf2d2f0a1fee7fd36a06d08200f6bf2dfbdc4ed2133a91624dc98bf89a425fd525063e0b32100811f738efabd544c84b658932c1aec42e98bc") exit_group(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = gettid() tkill(r1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup2(r2, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) [ 129.317363][T10106] ffff88801cab6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.325440][T10106] >ffff88801cab6f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.333541][T10106] ^ [ 129.337621][T10106] ffff88801cab6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.345695][T10106] ffff88801cab7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.353763][T10106] ================================================================== [ 129.361825][T10106] Disabling lock debugging due to kernel taint 05:18:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x10d, 0x11, &(0x7f0000000000)=ANY=[], 0x10) 05:18:43 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401}, 0x10) close(r0) 05:18:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) eventfd(0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 129.456722][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.491862][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 05:18:43 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}, 0x0, 0x0, 0x0, 0x0, 0x401, 0xfffffffe, 0x2101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x5, &(0x7f00000002c0)="bcd8e87698417d53caff7e7512cfe6f44c3a622fdd29ec40a7968b3010d36dbe1b8acfbbb9d9232e62e37fa001212857289f9aff037024beccf7d987f1aad8a94d26a71699c4b1218f8b8ef78d4c2d8a21e2971512d8aad224bae7ee9a1a7c66bfcf2d2f0a1fee7fd36a06d08200f6bf2dfbdc4ed2133a91624dc98bf89a425fd525063e0b32100811f738efabd544c84b658932c1aec42e98bc") exit_group(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) r1 = gettid() tkill(r1, 0x0) write$UHID_CREATE2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup2(r2, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) [ 129.510538][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.518784][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.526419][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.534572][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.561997][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.569574][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.577193][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.585627][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.593506][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.601693][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.614745][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.681079][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.711168][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.721601][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.729689][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.738471][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.746679][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.756236][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.764827][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 129.772728][ T9605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 05:18:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x10d, 0x11, &(0x7f0000000000)=ANY=[], 0x10) [ 129.816101][ T9605] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on %z5 [ 129.838775][T10151] input: syz0 as /devices/virtual/input/input7 [ 129.870711][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.893889][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.913673][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.941354][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.946268][T10106] Kernel panic - not syncing: panic_on_warn set ... [ 129.955335][T10106] CPU: 0 PID: 10106 Comm: syz-executor.2 Tainted: G B 5.12.0-rc2-next-20210311-syzkaller #0 [ 129.962004][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.966705][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.966720][T10106] Call Trace: [ 129.966728][T10106] dump_stack+0x141/0x1d7 [ 129.966753][T10106] panic+0x306/0x73d [ 129.994672][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.995608][T10106] ? __warn_printk+0xf3/0xf3 [ 130.007541][T10106] ? preempt_schedule_common+0x59/0xc0 [ 130.013137][T10106] ? kfree+0xe5/0x7f0 [ 130.017128][T10106] ? kfree+0xe5/0x7f0 [ 130.017451][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.021108][T10106] ? preempt_schedule_thunk+0x16/0x18 [ 130.021137][T10106] ? trace_hardirqs_on+0x38/0x1c0 [ 130.038870][T10106] ? trace_hardirqs_on+0x51/0x1c0 [ 130.043918][T10106] ? kfree+0xe5/0x7f0 [ 130.045886][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.047903][T10106] ? kfree+0xe5/0x7f0 [ 130.047926][T10106] end_report.cold+0x5a/0x5a [ 130.064161][T10106] kasan_report_invalid_free+0x70/0x80 [ 130.069643][T10106] __kasan_slab_free+0x118/0x130 [ 130.074839][T10106] slab_free_freelist_hook+0x92/0x210 [ 130.080758][T10106] kfree+0xe5/0x7f0 [ 130.082953][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.084572][T10106] ? sg_finish_scsi_blk_rq+0x690/0x810 [ 130.084601][T10106] sg_finish_scsi_blk_rq+0x690/0x810 [ 130.084626][T10106] ? sg_execute_cmd+0x830/0x830 [ 130.084649][T10106] ? __schedule+0x914/0x2150 [ 130.112111][T10106] ? io_schedule_timeout+0x140/0x140 [ 130.115827][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.117414][T10106] ? lock_release+0x720/0x720 [ 130.129452][T10106] sg_common_write+0xa07/0xe70 [ 130.134231][T10106] ? sg_start_req+0x24e0/0x24e0 [ 130.139095][T10106] ? tick_nohz_tick_stopped+0x13/0xa0 [ 130.140519][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.144511][T10106] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 130.144542][T10106] ? __irq_work_queue_local+0x125/0x190 [ 130.144571][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 130.163598][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.164105][T10106] ? irq_work_queue+0x29/0x80 [ 130.164137][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 130.183756][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.188777][T10106] ? wake_up_klogd.part.0+0x8e/0xd0 [ 130.188810][T10106] ? vprintk_emit+0x13a/0x560 [ 130.206097][T10106] sg_v3_submit+0x3b1/0x530 [ 130.210635][T10106] ? sg_common_write+0xe70/0xe70 [ 130.215620][T10106] ? record_print_text.cold+0x16/0x16 [ 130.221453][T10106] sg_write.part.0+0xaf8/0xec0 [ 130.226237][T10106] ? sg_v3_submit+0x530/0x530 [ 130.230938][T10106] ? __might_fault+0xd3/0x180 [ 130.235756][T10106] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 130.241492][T10106] ? iov_iter_advance+0x33b/0x18e0 [ 130.244642][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.246618][T10106] ? csum_and_copy_to_iter+0x1c40/0x1c40 [ 130.246647][T10106] ? apparmor_file_permission+0x26e/0x4e0 [ 130.265334][T10106] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 130.271601][T10106] ? security_file_permission+0x248/0x560 [ 130.277351][T10106] sg_write+0x87/0x120 [ 130.281437][T10106] do_iter_write+0x489/0x670 [ 130.286045][T10106] vfs_writev+0x1aa/0x630 [ 130.290398][T10106] ? vfs_iter_write+0xa0/0xa0 [ 130.295086][T10106] ? lock_downgrade+0x6e0/0x6e0 [ 130.299956][T10106] ? __fget_files+0x288/0x3d0 [ 130.304647][T10106] ? __fget_light+0xea/0x280 [ 130.309251][T10106] do_writev+0x139/0x300 [ 130.313509][T10106] ? vfs_writev+0x630/0x630 [ 130.318027][T10106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.323065][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.323929][T10106] do_syscall_64+0x2d/0x70 [ 130.323958][T10106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 130.341613][T10106] RIP: 0033:0x465f69 [ 130.345511][T10106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.365142][T10106] RSP: 002b:00007efc031c9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 130.373579][T10106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 130.381568][T10106] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 130.385386][ T9670] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.389543][T10106] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 130.389560][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 130.389573][T10106] R13: 00007ffd5494dfdf R14: 00007efc031c9300 R15: 0000000000022000 [ 130.421708][T10106] Kernel Offset: disabled [ 130.426028][T10106] Rebooting in 86400 seconds..