last executing test programs: 16.733400102s ago: executing program 0 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 16.470436384s ago: executing program 0 (id=629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13.698884211s ago: executing program 0 (id=633): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.495809344s ago: executing program 4 (id=635): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@inode32}]}) 11.233004685s ago: executing program 1 (id=639): syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) readahead(r0, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 11.217021463s ago: executing program 4 (id=640): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 11.080789737s ago: executing program 3 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000000010"], 0x28}, 0xfc40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 10.06252595s ago: executing program 2 (id=642): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c000300"], 0xb8}}, 0x0) 10.006421969s ago: executing program 1 (id=643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.332612104s ago: executing program 1 (id=644): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 9.273550224s ago: executing program 2 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000900)) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x363401, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041080) 8.348933003s ago: executing program 2 (id=646): socket$inet6(0xa, 0x8000e, 0x5) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000300), 0x0, 0x2) 6.992982232s ago: executing program 2 (id=647): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 6.960683496s ago: executing program 1 (id=648): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x80000000, 0x0, 0x7, 0x9}}, 0x3c}}, 0x20040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 6.908440747s ago: executing program 3 (id=649): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a2", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="f71d", 0x2}], 0x1}}], 0x2, 0x42090) sendto$inet(r0, &(0x7f0000000300)="143e0c5570bffc87ec8e017e8184cc607cfede30534ecaf5dd181b14a23b5b36a8b07cc3622faefa88078c6a273305c2f052d30b19a5b951141586210bdc75e91396", 0xfffffffffffffcdd, 0x408d0, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) 6.839903164s ago: executing program 3 (id=650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 6.839385874s ago: executing program 2 (id=651): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r0 = socket(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 6.735816825s ago: executing program 4 (id=652): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000141e01, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f00000001c0)) 5.190580239s ago: executing program 0 (id=653): syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) readahead(r0, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 5.171674906s ago: executing program 4 (id=654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.955628176s ago: executing program 3 (id=655): r0 = semget$private(0x0, 0x7, 0x191) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106) mount(0x0, 0x0, 0x0, 0x2014050, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) 3.975218245s ago: executing program 2 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000900)) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x363401, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041080) 3.835857909s ago: executing program 0 (id=657): socket$inet6(0xa, 0x8000e, 0x5) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f0000000300), 0x0, 0x2) 2.100431458s ago: executing program 3 (id=658): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0xc004) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21770f7447, 0x8031, 0xffffffffffffffff, 0x7b258000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x5b0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 1.968996984s ago: executing program 4 (id=659): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1.659927987s ago: executing program 3 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$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") r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) stat(&(0x7f0000002d80)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) 1.562601029s ago: executing program 1 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) read(r0, 0x0, 0x0) 1.379622665s ago: executing program 1 (id=662): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 1.360556831s ago: executing program 0 (id=663): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 0s ago: executing program 4 (id=664): setregid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 54.484984][ T4170] cgroup: Unknown subsys name 'net' [ 54.601379][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.111843][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.492257][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.547369][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.600231][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.632783][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.640401][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.648528][ T4194] device bridge_slave_0 entered promiscuous mode [ 57.660809][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.667967][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.676106][ T4194] device bridge_slave_1 entered promiscuous mode [ 57.696570][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 57.779905][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.808016][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.817503][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.832308][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.839891][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.848416][ T4189] device bridge_slave_0 entered promiscuous mode [ 57.877443][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.884551][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.893310][ T4189] device bridge_slave_1 entered promiscuous mode [ 57.920812][ T4194] team0: Port device team_slave_0 added [ 57.950636][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.958092][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.966219][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.974926][ T4194] team0: Port device team_slave_1 added [ 57.991890][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.999172][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.007319][ T4183] device bridge_slave_0 entered promiscuous mode [ 58.019973][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.027837][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.036696][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.049813][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.059292][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.066488][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.074301][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.104556][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.132415][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.139604][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.166866][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.193728][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.208863][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.215968][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.241983][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.261001][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.271746][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.281153][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.288356][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.296219][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.309561][ T4189] team0: Port device team_slave_0 added [ 58.318241][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.333564][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.341475][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.349530][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.370182][ T4189] team0: Port device team_slave_1 added [ 58.396615][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.425632][ T4184] team0: Port device team_slave_0 added [ 58.433075][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.459076][ T4183] team0: Port device team_slave_0 added [ 58.476401][ T4194] device hsr_slave_0 entered promiscuous mode [ 58.483306][ T4194] device hsr_slave_1 entered promiscuous mode [ 58.493071][ T4184] team0: Port device team_slave_1 added [ 58.499535][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.506909][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.533677][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.546140][ T4183] team0: Port device team_slave_1 added [ 58.553980][ T4191] team0: Port device team_slave_0 added [ 58.593217][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.600543][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.626717][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.649227][ T4191] team0: Port device team_slave_1 added [ 58.673198][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.680272][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.706403][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.739698][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.746872][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.773457][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.791128][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.798610][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.825315][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.839194][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.846785][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.853411][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.861286][ T4189] Cannot create hsr debugfs directory [ 58.874480][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.881515][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.907777][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.935021][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.942104][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.968119][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.000082][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.007209][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.033792][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.102434][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.109542][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.116712][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.124296][ T4183] Cannot create hsr debugfs directory [ 59.166338][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.173659][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.181044][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.188680][ T4184] Cannot create hsr debugfs directory [ 59.197682][ T4191] device hsr_slave_0 entered promiscuous mode [ 59.206149][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 59.206149][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 59.206634][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 59.212345][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 59.218710][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 59.231797][ T4191] device hsr_slave_1 entered promiscuous mode [ 59.244153][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.252231][ T4191] Cannot create hsr debugfs directory [ 59.517629][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.533851][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.543809][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.558347][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.583752][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.602575][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.615466][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.642879][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.685017][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.696158][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.724434][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.742103][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.760080][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.783642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.795708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.810749][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.825054][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.846882][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.861593][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.871393][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.880654][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.887918][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.899122][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.916282][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.927710][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.953358][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.962629][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.971947][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.979051][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.025420][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.037035][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.050901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.060185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.075853][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.084247][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.098629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.109106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.118627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.138773][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.156907][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.176867][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.187068][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.196914][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.204685][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.231795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.240832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.250364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.259699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.268838][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.276184][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.291861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.312156][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.326673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.335810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.361850][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.370422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.380130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.388995][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.396118][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.404760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.413657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.423371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.435607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.450944][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.463532][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.494920][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.504727][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.514290][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.524125][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.533107][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.540261][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.548847][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.558053][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.568633][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.575771][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.583566][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.593863][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.602859][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.620068][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.665560][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.684436][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.693245][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.708407][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.717841][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.726655][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.735041][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.743888][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.756452][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.764946][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.773731][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.782548][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.791701][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.800336][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.817854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.827078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.837368][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.844476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.860070][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.874382][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.897225][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.914278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.923583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.933128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.943149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.953502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.962591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.972020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.987424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.996731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.006899][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.014108][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.022454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.038391][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.051881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.073083][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.099156][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.129812][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.147344][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.184112][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.193806][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.214283][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.227124][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.244102][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.252122][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.264125][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.282569][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.290617][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 61.295675][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 61.303073][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 61.310491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.325988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.336788][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.345368][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 61.365533][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 61.371988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.403806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.437877][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.444997][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.460344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.470942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.481602][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.488739][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.498975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.507580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.537510][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.553686][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.570394][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.606943][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.627420][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.636358][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.643869][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.653825][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.662757][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.671639][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.681056][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.690240][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.699320][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.707977][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.717121][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.727045][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.741075][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.766455][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.774879][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.786818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.794312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.826418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.840986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.854171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.867378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.900505][ T4183] device veth0_vlan entered promiscuous mode [ 61.913995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.923833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.934247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.943870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.954488][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.967527][ T4194] device veth0_vlan entered promiscuous mode [ 61.985236][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.993687][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.004611][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.024205][ T242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.056013][ T4183] device veth1_vlan entered promiscuous mode [ 62.065525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.073679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.082909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.097593][ T4194] device veth1_vlan entered promiscuous mode [ 62.112855][ T4189] device veth0_vlan entered promiscuous mode [ 62.123752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.134411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.142968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.152128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.174219][ T4189] device veth1_vlan entered promiscuous mode [ 62.202902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.211445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.220455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.228535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.239627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.249257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.258996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.268007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.281603][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.301649][ T4183] device veth0_macvtap entered promiscuous mode [ 62.312295][ T4183] device veth1_macvtap entered promiscuous mode [ 62.353740][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.367935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.376742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.385039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.393638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.404200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.413531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.422706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.431561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.440617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.449428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.458280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.469614][ T4191] device veth0_vlan entered promiscuous mode [ 62.479410][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.489961][ T4189] device veth0_macvtap entered promiscuous mode [ 62.501534][ T4194] device veth0_macvtap entered promiscuous mode [ 62.510137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.518406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.526511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.534461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.543566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.552666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.575530][ T4189] device veth1_macvtap entered promiscuous mode [ 62.584120][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.593223][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.602868][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.612581][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.629332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.637952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.648131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.658084][ T4191] device veth1_vlan entered promiscuous mode [ 62.680033][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.692478][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.708259][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.719624][ T4194] device veth1_macvtap entered promiscuous mode [ 62.755871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.764770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.773215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.781641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.790737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.801378][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.814120][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.827306][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.854573][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.865168][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.875046][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.887893][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.899649][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.910932][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.921485][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.931654][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.942449][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.953720][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.961581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.971391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.980393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.989373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.998810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.007684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.017503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.033378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.042094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.052337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.061921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.070171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.080420][ T4191] device veth0_macvtap entered promiscuous mode [ 63.101156][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.110229][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.125972][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.135870][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.148652][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.157768][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.167086][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.176097][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.187251][ T4184] device veth0_vlan entered promiscuous mode [ 63.197147][ T4191] device veth1_macvtap entered promiscuous mode [ 63.237509][ T4184] device veth1_vlan entered promiscuous mode [ 63.350590][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.362395][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.373093][ T4172] Bluetooth: hci1: command 0x040f tx timeout [ 63.375631][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 63.379905][ T4172] Bluetooth: hci2: command 0x040f tx timeout [ 63.391269][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.401891][ T4172] Bluetooth: hci4: command 0x040f tx timeout [ 63.406266][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.418179][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.428848][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.440608][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.445833][ T4172] Bluetooth: hci0: command 0x040f tx timeout [ 63.466421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.477099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.485305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.493283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.502158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.511150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.545433][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.545464][ T242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.562411][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.573973][ T242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.574671][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.591928][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.602141][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.613077][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.624214][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.642322][ T242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.643647][ T4184] device veth0_macvtap entered promiscuous mode [ 63.657291][ T242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.657735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.673701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.682709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.691814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.700929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.710394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.718455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.730717][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.742265][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.751456][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.761336][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.775821][ T4184] device veth1_macvtap entered promiscuous mode [ 63.786297][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.871331][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.873459][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.891035][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.892500][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.902042][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.919618][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.930587][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.941402][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.951507][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.962362][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.973647][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.991229][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.000594][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.009945][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.020229][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.030865][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.041781][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.053409][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.063512][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.074102][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.084297][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.096527][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.109000][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.120517][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.129456][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.138299][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.149341][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.175311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.184411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.197846][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.208805][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.245075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.272855][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.280367][ T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.282466][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.299072][ T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.312313][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.321982][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.375711][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.388590][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.399920][ T242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.429748][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.432270][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.445060][ T242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.456726][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.456910][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.473184][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.491833][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.507530][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.551565][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.836087][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 64.860149][ T4272] ODEBUG: Out of memory. ODEBUG disabled [ 65.016536][ T4284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.447299][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 65.560153][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 65.644582][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.667016][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 65.682360][ T4275] bond0: (slave rose0): Enslaving as an active interface with an up link [ 65.691714][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 65.729777][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 65.733109][ T4293] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 65.765701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.775191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 65.784090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.793109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.802481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.811497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.820524][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 65.829613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.838612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.847829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 68.033917][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.069716][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.286839][ T4301] orangefs_mount: mount request failed with -4 [ 68.489283][ T4317] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 69.635122][ C0] sched: RT throttling activated [ 70.579734][ T4341] loop3: detected capacity change from 0 to 512 [ 70.684047][ T4347] process 'syz.0.16' launched './file0' with NULL argv: empty string added [ 71.468450][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.477105][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.231051][ T4355] loop0: detected capacity change from 0 to 1024 [ 72.704076][ T4341] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.17: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 72.937299][ T4341] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.17: Bad quota inode: 15, type: 2 [ 73.242972][ T4341] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 73.391860][ T4341] EXT4-fs (loop3): mount failed [ 74.090914][ T4373] ======================================================= [ 74.090914][ T4373] WARNING: The mand mount option has been deprecated and [ 74.090914][ T4373] and is ignored by this kernel. Remove the mand [ 74.090914][ T4373] option from the mount to silence this warning. [ 74.090914][ T4373] ======================================================= [ 75.554361][ T4393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.961397][ T4403] loop1: detected capacity change from 0 to 8 [ 76.064352][ T4403] SQUASHFS error: zlib decompression failed, data probably corrupt [ 76.105324][ T4403] SQUASHFS error: Failed to read block 0x9b: -5 [ 76.114264][ T4403] SQUASHFS error: Unable to read metadata cache entry [99] [ 76.144797][ T4403] SQUASHFS error: Unable to read inode 0x127 [ 76.205278][ T4265] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.705765][ T4265] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 76.778153][ T4265] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.955207][ T4265] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.183639][ T4265] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.234135][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.263979][ T4426] loop1: detected capacity change from 0 to 512 [ 77.311173][ T4265] usb 4-1: Product: syz [ 77.326536][ T4265] usb 4-1: Manufacturer: syz [ 77.331654][ T4265] usb 4-1: SerialNumber: syz [ 77.349233][ T4265] usb 4-1: config 0 descriptor?? [ 77.397847][ T4265] hub 4-1:0.0: bad descriptor, ignoring hub [ 77.405379][ T4265] hub: probe of 4-1:0.0 failed with error -5 [ 77.417118][ T4265] usb 4-1: selecting invalid altsetting 0 [ 78.037886][ T4428] [U]  [ 78.099387][ T4437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35'. [ 78.344860][ T4426] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 78.363502][ T4265] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 78.482281][ T4426] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.33: Bad quota inode: 15, type: 2 [ 78.575382][ T4426] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 78.808094][ T4426] EXT4-fs (loop1): mount failed [ 78.995283][ T4265] usb 4-1: failed to restore interface 0 altsetting 251 (error=-71) [ 79.018085][ T4265] usb 4-1: USB disconnect, device number 2 [ 79.397522][ T4444] udevd[4444]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.617889][ T4481] loop1: detected capacity change from 0 to 8 [ 81.162485][ T4482] syz.0.44 sent an empty control message without MSG_MORE. [ 81.917052][ T13] cfg80211: failed to load regulatory.db [ 82.233968][ T4481] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.275264][ T4481] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.281581][ T4481] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.485390][ T4481] SQUASHFS error: Unable to read inode 0x127 [ 82.650357][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.233017][ T4484] [U]  [ 85.334030][ T4503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'. [ 85.837914][ T4516] loop1: detected capacity change from 0 to 1024 [ 85.978444][ T4516] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.53: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 86.003425][ T4516] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.53: Bad quota inode: 4, type: 1 [ 86.020968][ T4516] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.038233][ T4516] EXT4-fs (loop1): mount failed [ 87.190151][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 87.201765][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 87.209698][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.219861][ T4198] Workqueue: hci1 hci_rx_work [ 87.224667][ T4198] Call Trace: [ 87.227975][ T4198] [ 87.230933][ T4198] dump_stack_lvl+0x188/0x250 [ 87.235646][ T4198] ? show_regs_print_info+0x20/0x20 [ 87.241328][ T4198] ? load_image+0x400/0x400 [ 87.245894][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 87.251044][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 87.255749][ T4198] ? process_one_work+0x85f/0x1010 [ 87.260889][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 87.266288][ T4198] kobject_add_internal+0x6e0/0xd90 [ 87.271514][ T4198] kobject_add+0x160/0x230 [ 87.275961][ T4198] ? kobject_init+0x1d0/0x1d0 [ 87.280661][ T4198] ? klist_children_get+0x50/0x50 [ 87.285704][ T4198] ? get_device_parent+0x121/0x3f0 [ 87.290838][ T4198] device_add+0x483/0xfb0 [ 87.295212][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 87.300875][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 87.306469][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 87.311719][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 87.317306][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 87.322191][ T4198] ? hci_event_packet+0x37b/0x1370 [ 87.327341][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 87.332416][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 87.338528][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 87.344195][ T4198] ? mark_lock+0x94/0x320 [ 87.348646][ T4198] ? mutex_unlock+0x10/0x10 [ 87.353185][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.359297][ T4198] ? lock_chain_count+0x20/0x20 [ 87.364180][ T4198] ? __rwlock_init+0x140/0x140 [ 87.368968][ T4198] hci_event_packet+0xe48/0x1370 [ 87.373927][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 87.379160][ T4198] ? rcu_lock_release+0x20/0x20 [ 87.384145][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 87.389365][ T4198] hci_rx_work+0x255/0xa10 [ 87.393839][ T4198] process_one_work+0x85f/0x1010 [ 87.398838][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 87.404514][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 87.409833][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.415607][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.421378][ T4198] ? wq_worker_running+0x97/0x170 [ 87.426577][ T4198] worker_thread+0xaa6/0x1290 [ 87.431437][ T4198] kthread+0x436/0x520 [ 87.435542][ T4198] ? rcu_lock_release+0x20/0x20 [ 87.440428][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 87.445066][ T4198] ret_from_fork+0x1f/0x30 [ 87.449528][ T4198] [ 87.452742][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.470280][ T4198] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.486021][ T4198] Bluetooth: hci1: failed to register connection device [ 88.722619][ T4542] loop0: detected capacity change from 0 to 8 [ 88.799912][ T4542] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.834504][ T4542] SQUASHFS error: Failed to read block 0x9b: -5 [ 88.860578][ T4542] SQUASHFS error: Unable to read metadata cache entry [99] [ 88.875297][ T4542] SQUASHFS error: Unable to read inode 0x127 [ 89.605257][ T4547] Zero length message leads to an empty skb [ 90.811827][ T4554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 93.100333][ T4576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.859628][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 98.956346][ T4642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 99.185385][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.636300][ T4234] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.784252][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.805001][ T4234] usb 1-1: config 0 descriptor?? [ 100.998948][ T4234] elan 0003:04F3:0755.0001: unknown main item tag 0x1 [ 101.172241][ T4234] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 101.184265][ T4668] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.502037][ T4671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.873997][ T4229] usb 1-1: USB disconnect, device number 2 [ 106.147638][ T4686] overlayfs: overlapping lowerdir path [ 106.896578][ T4684] fido_id[4684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 107.012912][ T4693] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.187135][ T4714] loop1: detected capacity change from 0 to 1024 [ 110.670749][ T4717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 111.675478][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 113.695534][ T4736] input: syz0 as /devices/virtual/input/input5 [ 118.675717][ T4759] sctp: failed to load transform for md5: -2 [ 125.836384][ T4839] loop1: detected capacity change from 0 to 1024 [ 128.681901][ T4829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.163701][ T4847] loop4: detected capacity change from 0 to 1024 [ 132.561757][ T4864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.926496][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936904][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.159743][ T4884] team0 (unregistering): Port device team_slave_0 removed [ 136.356872][ T4884] team0 (unregistering): Port device team_slave_1 removed [ 136.442109][ T4891] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 140.426396][ T4945] loop4: detected capacity change from 0 to 512 [ 140.443949][ T4950] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 140.670915][ T4945] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 140.756030][ T4945] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.161: Bad quota inode: 15, type: 2 [ 140.786008][ T4945] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 140.896263][ T4945] EXT4-fs (loop4): mount failed [ 141.483700][ T4976] loop3: detected capacity change from 0 to 1024 [ 147.567925][ T5005] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 147.689042][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 147.699201][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 147.706870][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.716946][ T4198] Workqueue: hci0 hci_rx_work [ 147.721738][ T4198] Call Trace: [ 147.725033][ T4198] [ 147.727974][ T4198] dump_stack_lvl+0x188/0x250 [ 147.732679][ T4198] ? show_regs_print_info+0x20/0x20 [ 147.737899][ T4198] ? load_image+0x400/0x400 [ 147.742437][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 147.747569][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 147.752261][ T4198] ? preempt_schedule_thunk+0x16/0x18 [ 147.757664][ T4198] kobject_add_internal+0x6e0/0xd90 [ 147.762892][ T4198] kobject_add+0x160/0x230 [ 147.767332][ T4198] ? kobject_init+0x1d0/0x1d0 [ 147.772042][ T4198] ? klist_children_get+0x50/0x50 [ 147.777084][ T4198] ? get_device_parent+0x121/0x3f0 [ 147.782219][ T4198] device_add+0x483/0xfb0 [ 147.786580][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 147.791542][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 147.796847][ T4198] ? __switch_to_asm+0x34/0x60 [ 147.801668][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 147.806815][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 147.811694][ T4198] ? mark_lock+0x94/0x320 [ 147.816043][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 147.822044][ T4198] ? lock_chain_count+0x20/0x20 [ 147.826911][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 147.832996][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 147.838649][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 147.843865][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 147.849522][ T4198] ? hci_event_packet+0x38a/0x1370 [ 147.854655][ T4198] hci_event_packet+0xe48/0x1370 [ 147.859611][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 147.865359][ T4198] ? rcu_lock_release+0x20/0x20 [ 147.870232][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 147.875450][ T4198] hci_rx_work+0x255/0xa10 [ 147.879900][ T4198] process_one_work+0x85f/0x1010 [ 147.884870][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 147.890519][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 147.895834][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 147.900873][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 147.906532][ T4198] ? wq_worker_running+0x97/0x170 [ 147.911574][ T4198] worker_thread+0xaa6/0x1290 [ 147.916362][ T4198] kthread+0x436/0x520 [ 147.920451][ T4198] ? rcu_lock_release+0x20/0x20 [ 147.925337][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 147.929957][ T4198] ret_from_fork+0x1f/0x30 [ 147.934422][ T4198] [ 147.987591][ T4198] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.003403][ T4198] Bluetooth: hci0: failed to register connection device [ 148.196526][ T4198] Bluetooth: hci4: link tx timeout [ 148.202602][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.826657][ T4198] Bluetooth: hci4: link tx timeout [ 148.833012][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.845574][ T4198] Bluetooth: hci4: link tx timeout [ 148.850832][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.606387][ T4198] Bluetooth: hci4: link tx timeout [ 149.611617][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.706110][ T4198] Bluetooth: hci4: link tx timeout [ 149.711255][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.459828][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 151.637908][ T4198] Bluetooth: hci4: link tx timeout [ 151.643073][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.579972][ T4197] Bluetooth: hci4: link tx timeout [ 152.585275][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.712337][ T5065] loop3: detected capacity change from 0 to 256 [ 152.807298][ T5065] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 152.952464][ T4197] Bluetooth: hci4: link tx timeout [ 152.957883][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.859577][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 154.954175][ T4197] Bluetooth: hci4: link tx timeout [ 154.959529][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.073225][ T4197] Bluetooth: hci4: link tx timeout [ 156.078685][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.145465][ T4197] Bluetooth: hci4: link tx timeout [ 159.150638][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.397732][ T4197] Bluetooth: hci4: link tx timeout [ 159.402928][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.493172][ T5093] loop0: detected capacity change from 0 to 512 [ 159.746269][ T5093] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 160.584893][ T5103] loop2: detected capacity change from 0 to 1024 [ 160.609964][ T4197] Bluetooth: hci4: link tx timeout [ 160.615206][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.625951][ T5093] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.194: Bad quota inode: 15, type: 2 [ 160.688356][ T5093] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 160.785372][ T5093] EXT4-fs (loop0): mount failed [ 161.654265][ T5113] loop3: detected capacity change from 0 to 256 [ 161.846914][ T5115] loop8: detected capacity change from 0 to 7 [ 162.007862][ T5115] Dev loop8: unable to read RDB block 7 [ 162.094828][ T5115] loop8: unable to read partition table [ 162.150061][ T5115] loop8: partition table beyond EOD, truncated [ 162.486810][ T5115] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 162.515475][ T4197] Bluetooth: hci4: link tx timeout [ 162.520679][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.724306][ T5113] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 163.125242][ T4197] Bluetooth: hci4: link tx timeout [ 163.130585][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.800108][ T4197] Bluetooth: hci4: link tx timeout [ 164.806574][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.826436][ T4197] Bluetooth: hci4: link tx timeout [ 164.831639][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.915705][ T4229] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 165.346075][ T4229] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 165.354215][ T4229] usb 2-1: config 0 has no interface number 0 [ 165.380973][ T4229] usb 2-1: config 0 interface 41 has no altsetting 0 [ 165.576081][ T4229] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 165.615119][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.654200][ T4229] usb 2-1: Product: syz [ 165.664322][ T4229] usb 2-1: Manufacturer: syz [ 165.694683][ T4229] usb 2-1: SerialNumber: syz [ 165.715795][ T4229] usb 2-1: config 0 descriptor?? [ 165.956026][ T4229] CoreChips: probe of 2-1:0.41 failed with error -71 [ 166.005318][ T4229] usb 2-1: USB disconnect, device number 2 [ 172.598763][ T5180] loop0: detected capacity change from 0 to 512 [ 172.806208][ T5180] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 174.163403][ T5180] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.209: Bad quota inode: 15, type: 2 [ 174.185573][ T5180] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 174.229476][ T5180] EXT4-fs (loop0): mount failed [ 175.125481][ T4197] Bluetooth: hci4: link tx timeout [ 175.130652][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.735326][ T5225] hub 8-0:1.0: USB hub found [ 177.741559][ T5225] hub 8-0:1.0: 1 port detected [ 177.758283][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 177.782158][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 178.135244][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 178.255990][ T4231] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 178.402919][ T4231] usb 4-1: config 0 has no interface number 0 [ 178.576123][ T5227] loop1: detected capacity change from 0 to 1024 [ 178.892682][ T4231] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 178.905389][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.913669][ T4231] usb 4-1: Product: syz [ 178.918074][ T4231] usb 4-1: Manufacturer: syz [ 178.922878][ T4231] usb 4-1: SerialNumber: syz [ 179.630165][ T4231] usb 4-1: config 0 descriptor?? [ 179.883473][ T5227] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.219: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 179.950897][ T4197] Bluetooth: hci4: link tx timeout [ 179.956158][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.965221][ T5227] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.219: Bad quota inode: 4, type: 1 [ 179.996051][ T4187] usb 4-1: USB disconnect, device number 3 [ 180.009932][ T5227] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.090756][ T5227] EXT4-fs (loop1): mount failed [ 181.236531][ T5258] loop4: detected capacity change from 0 to 8 [ 182.769320][ T5268] loop0: detected capacity change from 0 to 40427 [ 184.632502][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 184.650245][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 184.669900][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 185.524684][ T5258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.561267][ T5258] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.641985][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 185.772381][ T5258] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.790490][ T5258] SQUASHFS error: Unable to read inode 0x127 [ 186.035239][ T4231] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 186.091844][ T5277] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.415586][ T4231] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.450574][ T4231] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.538311][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.622538][ T4231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 186.691951][ T4231] usb 3-1: config 1 has no interface number 0 [ 186.765444][ T4231] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 186.838317][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.124959][ T4231] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 188.465298][ T4231] snd_usb_pod 3-1:1.1: set_interface failed [ 188.490967][ T4231] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 188.522014][ T5302] loop3: detected capacity change from 0 to 1024 [ 188.544916][ T4231] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 188.572779][ T4231] usb 3-1: USB disconnect, device number 2 [ 188.651647][ T5302] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 188.709894][ T5302] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.238: Bad quota inode: 4, type: 1 [ 188.776733][ T5302] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.802720][ T5302] EXT4-fs (loop3): mount failed [ 189.283566][ T5324] loop3: detected capacity change from 0 to 8 [ 189.338380][ T5324] SQUASHFS error: zlib decompression failed, data probably corrupt [ 189.377238][ T5324] SQUASHFS error: Failed to read block 0x9b: -5 [ 189.435439][ T5324] SQUASHFS error: Unable to read metadata cache entry [99] [ 189.451600][ T5324] SQUASHFS error: Unable to read inode 0x127 [ 190.677935][ T5333] binder: 5330:5333 ioctl c0306201 0 returned -14 [ 191.395412][ T4187] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 192.250613][ T5337] binder: 5330:5337 ioctl c0306201 0 returned -14 [ 192.395979][ T4187] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 192.406561][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.560989][ T4187] usb 4-1: config 0 descriptor?? [ 192.630150][ T4187] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 193.175492][ T4187] gp8psk: usb in 128 operation failed. [ 193.195465][ T4187] gp8psk: usb in 137 operation failed. [ 193.946877][ T4187] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 194.026510][ T4187] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 194.080018][ T4187] usb 4-1: USB disconnect, device number 4 [ 194.281657][ T5364] loop4: detected capacity change from 0 to 1024 [ 194.337224][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343648][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431913][ T5364] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 194.450341][ T5364] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.254: Bad quota inode: 4, type: 1 [ 194.461988][ T5364] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.481424][ T5364] EXT4-fs (loop4): mount failed [ 194.568284][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 194.765239][ T4187] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.725572][ T4187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.584575][ T4187] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.594886][ T4187] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.765553][ T4187] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 196.779416][ T5396] netlink: 160 bytes leftover after parsing attributes in process `syz.4.263'. [ 196.798741][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 196.837016][ T4187] usb 4-1: Product: syz [ 196.841260][ T4187] usb 4-1: Manufacturer: syz [ 196.846528][ T5396] netlink: 160 bytes leftover after parsing attributes in process `syz.4.263'. [ 196.856339][ T4187] usb 4-1: SerialNumber: syz [ 196.926763][ T5396] netlink: 160 bytes leftover after parsing attributes in process `syz.4.263'. [ 197.003552][ T5399] loop2: detected capacity change from 0 to 512 [ 197.126051][ T5399] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.264: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 197.177076][ T5399] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.264: Bad quota inode: 15, type: 2 [ 197.257206][ T4187] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 197.290527][ T5399] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 197.381414][ T5399] EXT4-fs (loop2): mount failed [ 198.398734][ T4172] usb 4-1: USB disconnect, device number 5 [ 198.437415][ T4172] usblp0: removed [ 198.459280][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 198.475520][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 198.507602][ T5412] ceph: No mds server is up or the cluster is laggy [ 198.962318][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 201.317709][ T5431] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.453211][ T5431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.461297][ T5431] IPv6: NLM_F_CREATE should be set when creating new route [ 201.632693][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 201.674868][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 201.682464][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.692541][ T4197] Workqueue: hci1 hci_rx_work [ 201.697248][ T4197] Call Trace: [ 201.700553][ T4197] [ 201.703496][ T4197] dump_stack_lvl+0x188/0x250 [ 201.708195][ T4197] ? show_regs_print_info+0x20/0x20 [ 201.713411][ T4197] ? load_image+0x400/0x400 [ 201.717945][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 201.723122][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 201.727818][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 201.733125][ T4197] kobject_add_internal+0x6e0/0xd90 [ 201.738354][ T4197] kobject_add+0x160/0x230 [ 201.742792][ T4197] ? kobject_init+0x1d0/0x1d0 [ 201.747491][ T4197] ? klist_children_get+0x50/0x50 [ 201.752532][ T4197] ? get_device_parent+0x121/0x3f0 [ 201.757671][ T4197] device_add+0x483/0xfb0 [ 201.762039][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 201.766998][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 201.772316][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 201.777463][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 201.783036][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 201.787909][ T4197] ? hci_event_packet+0x37b/0x1370 [ 201.793041][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 201.798093][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 201.804180][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 201.809836][ T4197] ? mark_lock+0x94/0x320 [ 201.814179][ T4197] ? mutex_unlock+0x10/0x10 [ 201.818702][ T4197] ? mark_lock+0x94/0x320 [ 201.823048][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 201.829053][ T4197] hci_event_packet+0xe48/0x1370 [ 201.834019][ T4197] ? rcu_lock_release+0x20/0x20 [ 201.838889][ T4197] ? hci_rx_work+0x1ee/0xa10 [ 201.843508][ T4197] hci_rx_work+0x255/0xa10 [ 201.847958][ T4197] process_one_work+0x85f/0x1010 [ 201.852929][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 201.858751][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 201.864144][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 201.869181][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 201.874748][ T4197] ? wq_worker_running+0x97/0x170 [ 201.879794][ T4197] worker_thread+0xaa6/0x1290 [ 201.884532][ T4197] kthread+0x436/0x520 [ 201.888614][ T4197] ? rcu_lock_release+0x20/0x20 [ 201.893478][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 201.898084][ T4197] ret_from_fork+0x1f/0x30 [ 201.902538][ T4197] [ 201.977534][ T4197] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.991122][ T4197] Bluetooth: hci1: failed to register connection device [ 204.307863][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 204.313912][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 204.402650][ T5460] ceph: No mds server is up or the cluster is laggy [ 204.608554][ T4172] libceph: connect (1)[c::]:6789 error -101 [ 204.615196][ T4172] libceph: mon0 (1)[c::]:6789 connect error [ 204.700129][ T5467] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 204.700129][ T5467] program syz.4.281 not setting count and/or reply_len properly [ 205.295769][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 205.301804][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 205.452818][ T5472] loop4: detected capacity change from 0 to 512 [ 206.249775][ T5472] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 206.825684][ T5472] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.285: Bad quota inode: 15, type: 2 [ 206.986880][ T5472] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 207.096902][ T5472] EXT4-fs (loop4): mount failed [ 208.024101][ T5489] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 208.165263][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 209.372081][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 211.485962][ T4198] Bluetooth: hci4: link tx timeout [ 211.491128][ T4198] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.501107][ T4198] Bluetooth: hci4: link tx timeout [ 211.515124][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.526746][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 211.532779][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 211.642178][ T5521] ceph: No mds server is up or the cluster is laggy [ 211.686632][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 211.703436][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 212.217458][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 212.645411][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 213.917279][ T4172] Bluetooth: hci4: command 0x0406 tx timeout [ 214.033259][ T5540] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.436296][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 216.612535][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 216.867340][ T5574] ax25_connect(): syz.2.311 uses autobind, please contact jreuter@yaina.de [ 217.543439][ T5577] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 217.732832][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 217.754317][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 217.989397][ T5578] ceph: No mds server is up or the cluster is laggy [ 218.252059][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 218.267545][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 218.697983][ T5586] loop0: detected capacity change from 0 to 1024 [ 218.746568][ T5577] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.896124][ T5586] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 219.432737][ T5586] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.315: Bad quota inode: 4, type: 1 [ 220.068057][ T5586] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.378495][ T5586] EXT4-fs (loop0): mount failed [ 220.762719][ T5607] device team0 entered promiscuous mode [ 220.791697][ T5607] device team_slave_0 entered promiscuous mode [ 220.829595][ T5607] device team_slave_1 entered promiscuous mode [ 220.862069][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.924207][ T5607] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 221.719654][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 222.023498][ T5625] loop3: detected capacity change from 0 to 512 [ 222.183572][ T5625] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 222.216785][ T5625] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.320: Bad quota inode: 15, type: 2 [ 222.245696][ T5625] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 222.264999][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 222.271293][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 222.289017][ T5630] ceph: No mds server is up or the cluster is laggy [ 222.364801][ T5625] EXT4-fs (loop3): mount failed [ 222.666548][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 222.672587][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 225.614887][ T5660] loop4: detected capacity change from 0 to 1024 [ 225.694981][ T5660] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 225.749858][ T5660] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.335: Bad quota inode: 4, type: 1 [ 225.785475][ T5660] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 225.801656][ T5660] EXT4-fs (loop4): mount failed [ 228.433499][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 229.741339][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 229.760415][ T5698] ceph: No mds server is up or the cluster is laggy [ 229.780101][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 230.424002][ T5717] loop4: detected capacity change from 0 to 512 [ 230.471741][ T5717] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.348: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 230.546176][ T5717] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.348: Bad quota inode: 15, type: 2 [ 230.562539][ T5717] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 230.580502][ T5717] EXT4-fs (loop4): mount failed [ 232.498750][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 232.982498][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 234.140702][ T5751] ceph: No mds server is up or the cluster is laggy [ 234.155415][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 234.193697][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 235.427155][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 237.709681][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 238.611702][ T4172] libceph: connect (1)[c::]:6789 error -101 [ 238.627466][ T4172] libceph: mon0 (1)[c::]:6789 connect error [ 238.689336][ T5804] ceph: No mds server is up or the cluster is laggy [ 238.701040][ T4172] libceph: connect (1)[c::]:6789 error -101 [ 238.743106][ T4172] libceph: mon0 (1)[c::]:6789 connect error [ 239.075628][ T13] libceph: connect (1)[c::]:6789 error -101 [ 239.225740][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 241.226264][ T5832] loop0: detected capacity change from 0 to 512 [ 241.425634][ T5832] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.378: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 241.445907][ T5832] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.378: Bad quota inode: 15, type: 2 [ 241.458820][ T5832] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 241.503283][ T5832] EXT4-fs (loop0): mount failed [ 241.962058][ T5848] hub 8-0:1.0: USB hub found [ 241.969599][ T5848] hub 8-0:1.0: 1 port detected [ 242.027367][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 242.818348][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 248.225594][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 249.283641][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 252.517684][ T5946] loop0: detected capacity change from 0 to 512 [ 252.584521][ T5946] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 252.610144][ T5946] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.407: Bad quota inode: 15, type: 2 [ 252.625998][ T5946] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 252.691692][ T5946] EXT4-fs (loop0): mount failed [ 254.045245][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 254.866211][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 254.876231][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 254.883802][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.893876][ T4198] Workqueue: hci4 hci_rx_work [ 254.898583][ T4198] Call Trace: [ 254.901878][ T4198] [ 254.904819][ T4198] dump_stack_lvl+0x188/0x250 [ 254.909522][ T4198] ? show_regs_print_info+0x20/0x20 [ 254.914739][ T4198] ? load_image+0x400/0x400 [ 254.919361][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 254.924497][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 254.929183][ T4198] ? process_one_work+0x85f/0x1010 [ 254.934316][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 254.939537][ T4198] kobject_add_internal+0x6e0/0xd90 [ 254.944764][ T4198] kobject_add+0x160/0x230 [ 254.949204][ T4198] ? kobject_init+0x1d0/0x1d0 [ 254.953903][ T4198] ? klist_children_get+0x50/0x50 [ 254.958947][ T4198] ? get_device_parent+0x121/0x3f0 [ 254.964111][ T4198] device_add+0x483/0xfb0 [ 254.968471][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 254.973430][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 254.978753][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 254.983895][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 254.989484][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 254.994359][ T4198] ? hci_event_packet+0x37b/0x1370 [ 254.999581][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 255.004641][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 255.010734][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 255.016395][ T4198] ? mark_lock+0x94/0x320 [ 255.020747][ T4198] ? mutex_unlock+0x10/0x10 [ 255.025276][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 255.031284][ T4198] ? lock_chain_count+0x20/0x20 [ 255.036158][ T4198] ? __rwlock_init+0x140/0x140 [ 255.040946][ T4198] hci_event_packet+0xe48/0x1370 [ 255.045901][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 255.051135][ T4198] ? rcu_lock_release+0x20/0x20 [ 255.056044][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 255.061281][ T4198] hci_rx_work+0x255/0xa10 [ 255.065753][ T4198] process_one_work+0x85f/0x1010 [ 255.070823][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 255.076476][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 255.081793][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 255.086846][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 255.092418][ T4198] ? wq_worker_running+0x97/0x170 [ 255.097474][ T4198] worker_thread+0xaa6/0x1290 [ 255.102242][ T4198] kthread+0x436/0x520 [ 255.106346][ T4198] ? rcu_lock_release+0x20/0x20 [ 255.111222][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 255.115859][ T4198] ret_from_fork+0x1f/0x30 [ 255.120321][ T4198] [ 255.265202][ T4198] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 255.279469][ T4198] Bluetooth: hci4: failed to register connection device [ 255.823400][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.829806][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.231058][ T5983] loop2: detected capacity change from 0 to 8 [ 256.335923][ T5983] SQUASHFS error: zlib decompression failed, data probably corrupt [ 256.364336][ T5983] SQUASHFS error: Failed to read block 0x9b: -5 [ 256.394808][ T5983] SQUASHFS error: Unable to read metadata cache entry [99] [ 256.455066][ T5983] SQUASHFS error: Unable to read inode 0x127 [ 257.523038][ T5994] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 258.703438][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 258.714148][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 258.721720][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.731803][ T4198] Workqueue: hci4 hci_rx_work [ 258.736524][ T4198] Call Trace: [ 258.739818][ T4198] [ 258.742766][ T4198] dump_stack_lvl+0x188/0x250 [ 258.747473][ T4198] ? show_regs_print_info+0x20/0x20 [ 258.752690][ T4198] ? load_image+0x400/0x400 [ 258.757229][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 258.762357][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 258.767056][ T4198] ? mark_lock+0x94/0x320 [ 258.771410][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 258.776626][ T4198] kobject_add_internal+0x6e0/0xd90 [ 258.781847][ T4198] kobject_add+0x160/0x230 [ 258.786284][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 258.791934][ T4198] ? kobject_init+0x1d0/0x1d0 [ 258.796634][ T4198] ? get_device_parent+0x7c/0x3f0 [ 258.801674][ T4198] ? get_device_parent+0x121/0x3f0 [ 258.806808][ T4198] device_add+0x483/0xfb0 [ 258.811166][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 258.816122][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 258.821437][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 258.826558][ T4198] ? __switch_to_asm+0x34/0x60 [ 258.831433][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 258.837005][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 258.841873][ T4198] ? hci_event_packet+0x37b/0x1370 [ 258.847004][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 258.852044][ T4198] ? mark_lock+0x94/0x320 [ 258.856386][ T4198] ? release_firmware_map_entry+0x190/0x190 [ 258.862386][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 258.868469][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 258.874127][ T4198] ? mutex_unlock+0x10/0x10 [ 258.878648][ T4198] ? preempt_schedule+0xbc/0xd0 [ 258.883517][ T4198] ? schedule_preempt_disabled+0x20/0x20 [ 258.889209][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 258.894874][ T4198] hci_event_packet+0xe48/0x1370 [ 258.899841][ T4198] ? rcu_lock_release+0x20/0x20 [ 258.904716][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 258.909936][ T4198] hci_rx_work+0x255/0xa10 [ 258.914397][ T4198] process_one_work+0x85f/0x1010 [ 258.919365][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 258.925009][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 258.930315][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 258.935360][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 258.940924][ T4198] ? wq_worker_running+0x97/0x170 [ 258.945963][ T4198] worker_thread+0xaa6/0x1290 [ 258.950692][ T4198] kthread+0x436/0x520 [ 258.954805][ T4198] ? rcu_lock_release+0x20/0x20 [ 258.959671][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 258.964275][ T4198] ret_from_fork+0x1f/0x30 [ 258.968729][ T4198] [ 259.005294][ T4198] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 259.024658][ T4198] Bluetooth: hci4: failed to register connection device [ 261.585968][ T6019] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 262.346550][ T6019] syz.1.427 (6019) used greatest stack depth: 20848 bytes left [ 262.354259][ T6021] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 262.628451][ T6027] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.224767][ T6022] [U]  [ 263.998470][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 264.009699][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 264.017272][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.027352][ T4198] Workqueue: hci2 hci_rx_work [ 264.032054][ T4198] Call Trace: [ 264.035348][ T4198] [ 264.038298][ T4198] dump_stack_lvl+0x188/0x250 [ 264.043003][ T4198] ? show_regs_print_info+0x20/0x20 [ 264.048223][ T4198] ? load_image+0x400/0x400 [ 264.052758][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 264.057888][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 264.062688][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 264.067907][ T4198] kobject_add_internal+0x6e0/0xd90 [ 264.073140][ T4198] kobject_add+0x160/0x230 [ 264.077603][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.084284][ T4198] ? kobject_init+0x1d0/0x1d0 [ 264.089000][ T4198] ? get_device_parent+0x121/0x3f0 [ 264.094139][ T4198] device_add+0x483/0xfb0 [ 264.098503][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 264.103462][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 264.108876][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 264.114015][ T4198] ? preempt_schedule_common+0xa5/0xd0 [ 264.119501][ T4198] ? preempt_schedule+0xbc/0xd0 [ 264.124380][ T4198] ? schedule_preempt_disabled+0x20/0x20 [ 264.130067][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 264.135642][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 264.140518][ T4198] ? hci_event_packet+0x37b/0x1370 [ 264.145648][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 264.150701][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 264.156882][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 264.162537][ T4198] ? mark_lock+0x94/0x320 [ 264.166879][ T4198] ? mutex_unlock+0x10/0x10 [ 264.171408][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 264.177496][ T4198] ? lock_chain_count+0x20/0x20 [ 264.182364][ T4198] ? __rwlock_init+0x140/0x140 [ 264.187149][ T4198] hci_event_packet+0xe48/0x1370 [ 264.192286][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 264.197666][ T4198] ? rcu_lock_release+0x20/0x20 [ 264.202564][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 264.207798][ T4198] hci_rx_work+0x255/0xa10 [ 264.212258][ T4198] process_one_work+0x85f/0x1010 [ 264.217247][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 264.222892][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 264.228201][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 264.233242][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 264.238806][ T4198] ? wq_worker_running+0x97/0x170 [ 264.243849][ T4198] worker_thread+0xaa6/0x1290 [ 264.248587][ T4198] kthread+0x436/0x520 [ 264.252688][ T4198] ? rcu_lock_release+0x20/0x20 [ 264.257569][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 264.262200][ T4198] ret_from_fork+0x1f/0x30 [ 264.266661][ T4198] [ 264.301957][ T4198] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 264.315369][ T4198] Bluetooth: hci2: failed to register connection device [ 264.622658][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 266.201427][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 267.472134][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'. [ 267.590589][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'. [ 267.726354][ T6072] device netdevsim0 entered promiscuous mode [ 267.788164][ T6072] device geneve1 entered promiscuous mode [ 267.805174][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 267.817066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 268.330202][ T6087] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 268.330202][ T6087] program syz.0.446 not setting count and/or reply_len properly [ 269.076520][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.282162][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.292498][ T4230] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 269.354402][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.772025][ T6099] loop0: detected capacity change from 0 to 256 [ 269.782159][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 269.796919][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 269.804502][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.814576][ T4198] Workqueue: hci3 hci_rx_work [ 269.819277][ T4198] Call Trace: [ 269.822648][ T4198] [ 269.825603][ T4198] dump_stack_lvl+0x188/0x250 [ 269.830316][ T4198] ? show_regs_print_info+0x20/0x20 [ 269.835541][ T4198] ? load_image+0x400/0x400 [ 269.840079][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 269.845210][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 269.849906][ T4198] ? process_one_work+0x85f/0x1010 [ 269.855057][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 269.860284][ T4198] kobject_add_internal+0x6e0/0xd90 [ 269.865515][ T4198] kobject_add+0x160/0x230 [ 269.869951][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 269.875623][ T4198] ? kobject_init+0x1d0/0x1d0 [ 269.880340][ T4198] device_add+0x483/0xfb0 [ 269.884698][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 269.889655][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 269.895069][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 269.900192][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 269.905410][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 269.911072][ T4198] ? hci_le_meta_evt+0x131/0x3c90 [ 269.916113][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 269.920980][ T4198] ? hci_event_packet+0x37b/0x1370 [ 269.926111][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 269.931153][ T4198] ? mark_lock+0x94/0x320 [ 269.935493][ T4198] ? release_firmware_map_entry+0x190/0x190 [ 269.941408][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 269.947492][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 269.953145][ T4198] ? mutex_unlock+0x10/0x10 [ 269.957666][ T4198] ? preempt_schedule+0xbc/0xd0 [ 269.962535][ T4198] ? schedule_preempt_disabled+0x20/0x20 [ 269.968187][ T4198] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 269.973845][ T4198] hci_event_packet+0xe48/0x1370 [ 269.978808][ T4198] ? rcu_lock_release+0x20/0x20 [ 269.983690][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 269.988910][ T4198] hci_rx_work+0x255/0xa10 [ 269.993364][ T4198] process_one_work+0x85f/0x1010 [ 269.998336][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 270.003989][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 270.009299][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 270.014339][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 270.019902][ T4198] ? wq_worker_running+0x97/0x170 [ 270.025053][ T4198] worker_thread+0xaa6/0x1290 [ 270.029810][ T4198] kthread+0x436/0x520 [ 270.034002][ T4198] ? rcu_lock_release+0x20/0x20 [ 270.038873][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 270.043487][ T4198] ret_from_fork+0x1f/0x30 [ 270.047937][ T4198] [ 270.112535][ T4230] usb 2-1: config 0 descriptor?? [ 270.124486][ T4198] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 270.145091][ T4198] Bluetooth: hci3: failed to register connection device [ 270.156688][ T6099] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 271.940662][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 272.135062][ C0] hrtimer: interrupt took 66391 ns [ 273.250761][ T4230] usbhid 2-1:0.0: can't add hid device: -71 [ 273.275450][ T4230] usbhid: probe of 2-1:0.0 failed with error -71 [ 273.326342][ T4230] usb 2-1: USB disconnect, device number 3 [ 276.901855][ T4198] Bluetooth: hci4: link tx timeout [ 276.970287][ T4198] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 276.978008][ T4198] Bluetooth: hci4: link tx timeout [ 276.983134][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.212155][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 281.468375][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 281.478248][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 281.485934][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.496035][ T4198] Workqueue: hci1 hci_rx_work [ 281.500756][ T4198] Call Trace: [ 281.504061][ T4198] [ 281.507019][ T4198] dump_stack_lvl+0x188/0x250 [ 281.511734][ T4198] ? show_regs_print_info+0x20/0x20 [ 281.516959][ T4198] ? load_image+0x400/0x400 [ 281.521513][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 281.526681][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 281.531380][ T4198] ? process_one_work+0x85f/0x1010 [ 281.536517][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 281.541749][ T4198] kobject_add_internal+0x6e0/0xd90 [ 281.546983][ T4198] kobject_add+0x160/0x230 [ 281.551452][ T4198] ? kobject_init+0x1d0/0x1d0 [ 281.556164][ T4198] ? klist_children_get+0x50/0x50 [ 281.561228][ T4198] ? get_device_parent+0x121/0x3f0 [ 281.566354][ T4198] device_add+0x483/0xfb0 [ 281.570716][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 281.575686][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 281.581021][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 281.586155][ T4198] ? preempt_schedule_common+0xa5/0xd0 [ 281.591638][ T4198] ? preempt_schedule+0xbc/0xd0 [ 281.596510][ T4198] ? schedule_preempt_disabled+0x20/0x20 [ 281.602166][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 281.607741][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 281.612620][ T4198] ? hci_event_packet+0x37b/0x1370 [ 281.617756][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 281.622818][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 281.628908][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 281.634569][ T4198] ? mark_lock+0x94/0x320 [ 281.638917][ T4198] ? mutex_unlock+0x10/0x10 [ 281.643446][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 281.649457][ T4198] ? lock_chain_count+0x20/0x20 [ 281.654342][ T4198] ? __rwlock_init+0x140/0x140 [ 281.659133][ T4198] hci_event_packet+0xe48/0x1370 [ 281.664091][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 281.669323][ T4198] ? rcu_lock_release+0x20/0x20 [ 281.674206][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 281.679440][ T4198] hci_rx_work+0x255/0xa10 [ 281.683899][ T4198] process_one_work+0x85f/0x1010 [ 281.689051][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 281.694707][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 281.700027][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 281.705076][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 281.710734][ T4198] ? wq_worker_running+0x97/0x170 [ 281.715787][ T4198] worker_thread+0xaa6/0x1290 [ 281.720518][ T4198] kthread+0x436/0x520 [ 281.724614][ T4198] ? rcu_lock_release+0x20/0x20 [ 281.729483][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 281.734097][ T4198] ret_from_fork+0x1f/0x30 [ 281.738552][ T4198] [ 281.750042][ T4198] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 281.763497][ T4198] Bluetooth: hci1: failed to register connection device [ 282.794061][ T6210] device macvlan2 entered promiscuous mode [ 282.814747][ T6210] device bridge0 entered promiscuous mode [ 282.878410][ T6210] team0: Port device macvlan2 added [ 284.805127][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 288.095385][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 291.040857][ T6269] loop4: detected capacity change from 0 to 512 [ 291.143903][ T6269] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.487: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 291.288644][ T6269] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.487: Bad quota inode: 15, type: 2 [ 291.352273][ T6269] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 291.368368][ T6269] EXT4-fs (loop4): mount failed [ 294.959596][ T6310] hub 8-0:1.0: USB hub found [ 294.964451][ T6310] hub 8-0:1.0: 1 port detected [ 294.973357][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 298.246931][ T6348] binder: 6347:6348 ioctl c0306201 2000000003c0 returned -14 [ 298.308299][ T6350] loop0: detected capacity change from 0 to 512 [ 298.557841][ T6350] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 298.643162][ T6362] ALSA: mixer_oss: invalid OSS volume '' [ 298.795548][ T6350] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.515: Bad quota inode: 15, type: 2 [ 299.056480][ T6350] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 299.363556][ T6350] EXT4-fs (loop0): mount failed [ 299.713650][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 299.838082][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 304.257930][ T6415] ALSA: mixer_oss: invalid OSS volume '' [ 305.746951][ T6434] loop3: detected capacity change from 0 to 512 [ 305.856199][ T6434] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.538: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 305.896813][ T6434] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.538: Bad quota inode: 15, type: 2 [ 306.154251][ T6434] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 306.559678][ T6434] EXT4-fs (loop3): mount failed [ 309.359362][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 309.773119][ T6471] loop2: detected capacity change from 0 to 1024 [ 309.833489][ T6471] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.548: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 309.967989][ T6471] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.548: Bad quota inode: 4, type: 1 [ 310.012553][ T6471] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.046237][ T6471] EXT4-fs (loop2): mount failed [ 313.537513][ T6502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.645896][ T6502] fuse: Bad value for 'fd' [ 313.913017][ T6515] loop1: detected capacity change from 0 to 1024 [ 313.915961][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 314.040171][ T6515] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.562: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 314.085247][ T6515] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.562: Bad quota inode: 4, type: 1 [ 314.205389][ T6515] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.626332][ T6515] EXT4-fs (loop1): mount failed [ 315.582380][ T6502] syz.2.558 (6502) used greatest stack depth: 20464 bytes left [ 317.720957][ T6534] [U]  [ 317.846835][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.853282][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.872371][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 318.444898][ T6566] tipc: Started in network mode [ 318.450220][ T6566] tipc: Node identity ac141441, cluster identity 4711 [ 318.462489][ T6566] tipc: Enabled bearer , priority 10 [ 319.847289][ T1107] tipc: Node number set to 2886997057 [ 319.885223][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 320.435601][ T4231] usb 3-1: config 0 has no interfaces? [ 320.596118][ T4231] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 320.677141][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.867379][ T4231] usb 3-1: Product: syz [ 320.871592][ T4231] usb 3-1: Manufacturer: syz [ 320.932189][ T4231] usb 3-1: SerialNumber: syz [ 321.155540][ T6579] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 321.433118][ T4231] usb 3-1: config 0 descriptor?? [ 321.455143][ T4231] usb 3-1: can't set config #0, error -71 [ 321.463313][ T4231] usb 3-1: USB disconnect, device number 4 [ 323.094591][ T6596] input: syz0 as /devices/virtual/input/input7 [ 328.794878][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 328.818505][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 329.815802][ T6666] binder: 6665:6666 ioctl c0306201 0 returned -14 [ 330.146956][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 331.182302][ T6678] binder: 6665:6678 ioctl c0306201 0 returned -14 [ 333.920329][ T6703] tipc: Enabling of bearer rejected, already enabled [ 334.028026][ T6705] binder: 6704:6705 ioctl c0306201 0 returned -14 [ 334.202139][ T6707] binder: 6704:6707 ioctl c0306201 0 returned -14 [ 337.124218][ T26] audit: type=1326 audit(1772225105.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.455251][ T26] audit: type=1326 audit(1772225105.744:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.563997][ T26] audit: type=1326 audit(1772225105.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.643495][ T26] audit: type=1326 audit(1772225105.864:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.718056][ T6738] tipc: Started in network mode [ 337.722983][ T6738] tipc: Node identity ac141441, cluster identity 4711 [ 337.745086][ T26] audit: type=1326 audit(1772225105.864:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.788057][ T6738] tipc: Enabled bearer , priority 10 [ 337.900580][ T26] audit: type=1326 audit(1772225105.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 337.935341][ T26] audit: type=1326 audit(1772225105.864:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 338.770534][ T26] audit: type=1326 audit(1772225105.864:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 338.816521][ T26] audit: type=1326 audit(1772225105.864:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 338.826274][ T5857] tipc: Node number set to 2886997057 [ 338.871747][ T26] audit: type=1326 audit(1772225105.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4422e96799 code=0x7ffc0000 [ 338.885036][ T6746] binder: 6745:6746 ioctl c0306201 0 returned -14 [ 339.570326][ T6747] [U]  [ 340.178305][ T6752] binder: 6745:6752 ioctl c0306201 0 returned -14 [ 341.585620][ T4198] Bluetooth: hci4: link tx timeout [ 341.590796][ T4198] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 341.599015][ T4198] Bluetooth: hci4: link tx timeout [ 341.604147][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.575051][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 344.442543][ T6786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.642'. [ 344.463012][ T6788] binder: 6787:6788 ioctl c0306201 0 returned -14 [ 344.467246][ T6786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.065520][ T6788] binder: 6787:6788 ioctl c0306201 0 returned -14 [ 346.045197][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 346.453727][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 347.495513][ T5855] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.503884][ T5855] usb 1-1: config 0 has no interface number 0 [ 347.513326][ T5855] usb 1-1: config 0 interface 184 has no altsetting 0 [ 349.420850][ T6830] binder: 6829:6830 ioctl c0306201 0 returned -14 [ 349.465297][ T5855] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.474546][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.155957][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 350.166442][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 350.174012][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.184082][ T4198] Workqueue: hci2 hci_rx_work [ 350.188784][ T4198] Call Trace: [ 350.192079][ T4198] [ 350.195023][ T4198] dump_stack_lvl+0x188/0x250 [ 350.199728][ T4198] ? show_regs_print_info+0x20/0x20 [ 350.205029][ T4198] ? load_image+0x400/0x400 [ 350.209563][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 350.214700][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 350.219385][ T4198] ? process_one_work+0x85f/0x1010 [ 350.224567][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 350.229798][ T4198] kobject_add_internal+0x6e0/0xd90 [ 350.235020][ T4198] kobject_add+0x160/0x230 [ 350.239459][ T4198] ? kobject_init+0x1d0/0x1d0 [ 350.244161][ T4198] ? klist_children_get+0x50/0x50 [ 350.249216][ T4198] ? get_device_parent+0x121/0x3f0 [ 350.254344][ T4198] device_add+0x483/0xfb0 [ 350.258701][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 350.263661][ T4198] le_conn_complete_evt+0xc48/0x15c0 [ 350.268973][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 350.274107][ T4198] ? __mutex_trylock_common+0x155/0x260 [ 350.279706][ T4198] hci_le_meta_evt+0x285/0x3c90 [ 350.284601][ T4198] ? hci_event_packet+0x37b/0x1370 [ 350.289750][ T4198] ? __lock_acquire+0x7d10/0x7d10 [ 350.294812][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 350.300903][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 350.306559][ T4198] ? mark_lock+0x94/0x320 [ 350.310904][ T4198] ? mutex_unlock+0x10/0x10 [ 350.315432][ T4198] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 350.321440][ T4198] ? lock_chain_count+0x20/0x20 [ 350.326313][ T4198] ? __rwlock_init+0x140/0x140 [ 350.331099][ T4198] hci_event_packet+0xe48/0x1370 [ 350.336054][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 350.341273][ T4198] ? rcu_lock_release+0x20/0x20 [ 350.346335][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 350.351552][ T4198] hci_rx_work+0x255/0xa10 [ 350.355999][ T4198] process_one_work+0x85f/0x1010 [ 350.360972][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 350.366622][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 350.371992][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 350.377029][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 350.382593][ T4198] ? wq_worker_running+0x97/0x170 [ 350.387640][ T4198] worker_thread+0xaa6/0x1290 [ 350.392453][ T4198] kthread+0x436/0x520 [ 350.396533][ T4198] ? rcu_lock_release+0x20/0x20 [ 350.401398][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 350.406005][ T4198] ret_from_fork+0x1f/0x30 [ 350.410471][ T4198] [ 350.419921][ T4198] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 350.433393][ T4198] Bluetooth: hci2: failed to register connection device [ 352.445033][ T5855] usb 1-1: Product: syz [ 352.477812][ T5855] usb 1-1: config 0 descriptor?? [ 352.525206][ T5855] usb 1-1: can't set config #0, error -71 [ 352.544912][ T5855] usb 1-1: USB disconnect, device number 3 [ 352.877210][ T6848] loop3: detected capacity change from 0 to 1024 [ 353.093759][ T6848] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.660: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 353.266433][ T6848] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.660: Bad quota inode: 4, type: 1 [ 353.282153][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 353.329587][ T6848] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 353.667189][ T6848] EXT4-fs (loop3): mount failed [ 354.749693][ T6875] INFO: trying to register non-static key. [ 354.755551][ T6875] The code is fine but needs lockdep annotation, or maybe [ 354.762665][ T6875] you didn't initialize this object before use? [ 354.768903][ T6875] turning off the locking correctness validator. [ 354.775316][ T6875] CPU: 0 PID: 6875 Comm: syz.4.664 Not tainted syzkaller #0 [ 354.782608][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.792676][ T6875] Call Trace: [ 354.795964][ T6875] [ 354.798901][ T6875] dump_stack_lvl+0x188/0x250 [ 354.803596][ T6875] ? show_regs_print_info+0x20/0x20 [ 354.808814][ T6875] ? load_image+0x400/0x400 [ 354.813340][ T6875] ? cpumask_next+0xb3/0xd0 [ 354.817855][ T6875] ? __is_module_percpu_address+0x2a7/0x410 [ 354.823764][ T6875] ? is_kernel_percpu_address+0x143/0x160 [ 354.829496][ T6875] assign_lock_key+0x1ec/0x200 [ 354.834269][ T6875] ? SOFTIRQ_verbose+0x10/0x10 [ 354.839041][ T6875] ? verify_lock_unused+0x140/0x140 [ 354.844254][ T6875] ? mark_lock+0x94/0x320 [ 354.848600][ T6875] register_lock_class+0x21d/0x890 [ 354.853821][ T6875] ? __lock_acquire+0x13bc/0x7d10 [ 354.858860][ T6875] ? is_dynamic_key+0x1f0/0x1f0 [ 354.863730][ T6875] __lock_acquire+0x16f/0x7d10 [ 354.868509][ T6875] ? mark_lock+0x94/0x320 [ 354.872849][ T6875] ? __lock_acquire+0x12e8/0x7d10 [ 354.877890][ T6875] ? verify_lock_unused+0x140/0x140 [ 354.883103][ T6875] ? verify_lock_unused+0x140/0x140 [ 354.888318][ T6875] ? __might_sleep+0xf0/0xf0 [ 354.892918][ T6875] lock_acquire+0x19e/0x400 [ 354.897430][ T6875] ? gsmld_write+0x57/0x120 [ 354.901926][ T6875] ? read_lock_is_recursive+0x10/0x10 [ 354.907285][ T6875] ? _copy_from_iter+0x5cb/0x1170 [ 354.912298][ T6875] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 354.917741][ T6875] ? lockdep_hardirqs_off+0x70/0x100 [ 354.923016][ T6875] _raw_spin_lock_irqsave+0xb0/0x100 [ 354.928282][ T6875] ? gsmld_write+0x57/0x120 [ 354.932768][ T6875] ? _raw_spin_lock+0x40/0x40 [ 354.937426][ T6875] ? __virt_addr_valid+0x3c6/0x470 [ 354.942521][ T6875] gsmld_write+0x57/0x120 [ 354.946838][ T6875] file_tty_write+0x557/0x910 [ 354.951504][ T6875] ? gsmld_read+0x10/0x10 [ 354.955816][ T6875] do_iter_readv_writev+0x47e/0x5f0 [ 354.961008][ T6875] ? aa_path_link+0x880/0x880 [ 354.965672][ T6875] ? generic_file_rw_checks+0x280/0x280 [ 354.971210][ T6875] ? common_file_perm+0x171/0x1c0 [ 354.976222][ T6875] ? fsnotify_perm+0x5d/0x560 [ 354.980888][ T6875] ? security_file_permission+0x75/0xa0 [ 354.986434][ T6875] do_iter_write+0x205/0x7b0 [ 354.991017][ T6875] ? import_iovec+0x6f/0xa0 [ 354.995518][ T6875] do_writev+0x281/0x480 [ 354.999761][ T6875] ? do_readv+0x460/0x460 [ 355.004167][ T6875] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 355.010162][ T6875] ? lock_chain_count+0x20/0x20 [ 355.015018][ T6875] ? vtime_user_exit+0x2c8/0x3e0 [ 355.019980][ T6875] ? lockdep_hardirqs_on+0x94/0x140 [ 355.025174][ T6875] do_syscall_64+0x4c/0xa0 [ 355.029599][ T6875] ? clear_bhb_loop+0x30/0x80 [ 355.034265][ T6875] ? clear_bhb_loop+0x30/0x80 [ 355.038933][ T6875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.044822][ T6875] RIP: 0033:0x7fb74c7d2799 [ 355.049223][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.068821][ T6875] RSP: 002b:00007fb74a9ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 355.077225][ T6875] RAX: ffffffffffffffda RBX: 00007fb74ca4c180 RCX: 00007fb74c7d2799 [ 355.085184][ T6875] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 355.093147][ T6875] RBP: 00007fb74c868bd9 R08: 0000000000000000 R09: 0000000000000000 [ 355.101109][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.109121][ T6875] R13: 00007fb74ca4c218 R14: 00007fb74ca4c180 R15: 00007ffdd09196e8 [ 355.117129][ T6875]