last executing test programs: 17.727558074s ago: executing program 0 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a30000000000800054000000008c8713a4e00000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c000100000000000000000014000000110001"], 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) 16.439285976s ago: executing program 0 (id=494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x20008020) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 13.647813614s ago: executing program 0 (id=505): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.613138388s ago: executing program 1 (id=524): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0500"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) 7.934058236s ago: executing program 1 (id=526): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) 6.074778225s ago: executing program 3 (id=528): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000496000/0x3000)=nil, 0x3000}, 0x1}) 5.926443585s ago: executing program 1 (id=531): socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 5.90326262s ago: executing program 4 (id=532): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x590, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x4020, &(0x7f0000000080)=ANY=[@ANYBLOB="6d61783d303030303030303030303030db34303030"]) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/33, 0x21) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xa300, 0x0) dup2(r7, r6) 4.878669228s ago: executing program 0 (id=533): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0xfffffff0, 0x30}, 0xc) 4.779846378s ago: executing program 0 (id=535): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 4.610366933s ago: executing program 1 (id=536): r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f3044d070000000000010902240001000000010904000802030000000921100000012218000905810310"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r2, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x24020884}, 0x401c088) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) 4.484842068s ago: executing program 4 (id=537): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(0x0, 0x0) ptrace$getregset(0x4205, r4, 0x2, &(0x7f00000002c0)={0x0}) ptrace$getregset(0x4204, r4, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, &(0x7f0000002880), 0x0, 0x6, 0x4) 3.54046727s ago: executing program 2 (id=538): mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x5f53a3932722dcd0, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r2 = timerfd_create(0x0, 0x80000) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x4) statfs(&(0x7f00000000c0)='./trace/events/kvm/kvm_entry/enable\x00', &(0x7f0000000200)=""/156) removexattr(&(0x7f0000000180)='./trace/events/kvm/kvm_entry/enable\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 3.514846926s ago: executing program 4 (id=539): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/4120, 0x1018}], 0x1) 3.475599943s ago: executing program 3 (id=540): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000740), &(0x7f0000000780)=0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 2.877499695s ago: executing program 2 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x5c, 0x0, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) 2.259807341s ago: executing program 2 (id=542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}, "00000000c00000d2"}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x40000000000080, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$bt_sco(r1, &(0x7f0000000100), 0x8) 2.032765387s ago: executing program 0 (id=543): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.96558437s ago: executing program 4 (id=544): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 1.925881489s ago: executing program 3 (id=545): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xa, 0x1ac8, 0x7, 0x4880, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x6}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000041) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfff}]}, 0x24}}, 0x48044) 1.86784334s ago: executing program 3 (id=546): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) add_key(0x0, 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f323132343033322eaea22d3632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680146900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac", 0x199, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.77035969s ago: executing program 4 (id=547): socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 1.766877481s ago: executing program 3 (id=548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2, 0xb}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 1.536397288s ago: executing program 2 (id=549): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(0x0, 0x0) ptrace$getregset(0x4205, r4, 0x2, &(0x7f00000002c0)={0x0}) ptrace$getregset(0x4204, r4, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, &(0x7f0000002880), 0x0, 0x6, 0x4) 1.522821051s ago: executing program 1 (id=550): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000496000/0x3000)=nil, 0x3000}, 0x1}) 556.887207ms ago: executing program 2 (id=551): mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x5f53a3932722dcd0, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r2 = timerfd_create(0x0, 0x80000) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x4) statfs(&(0x7f00000000c0)='./trace/events/kvm/kvm_entry/enable\x00', &(0x7f0000000200)=""/156) removexattr(&(0x7f0000000180)='./trace/events/kvm/kvm_entry/enable\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 556.403837ms ago: executing program 3 (id=552): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 445.21723ms ago: executing program 4 (id=553): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 316.620256ms ago: executing program 1 (id=554): mkdirat(0xffffffffffffff9c, 0x0, 0x15f) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) mount$9p_tcp(&(0x7f0000000180), 0x0, 0x0, 0x114000, &(0x7f00000002c0)=ANY=[]) mount(0x0, 0x0, &(0x7f0000000040)='jfs\x00', 0x20c86, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0140) 0s ago: executing program 2 (id=555): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): h: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.517230][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.523823][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.530682][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.537629][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.552581][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.552593][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.571285][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.580086][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.611428][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.950847][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 64.040865][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 64.060350][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 64.079528][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 64.123601][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 64.222830][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.229922][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.238896][ T4281] device bridge_slave_0 entered promiscuous mode [ 64.259613][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.266795][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.277189][ T4273] device bridge_slave_0 entered promiscuous mode [ 64.284535][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.292329][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.299992][ T4281] device bridge_slave_1 entered promiscuous mode [ 64.332130][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.339239][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.347272][ T4273] device bridge_slave_1 entered promiscuous mode [ 64.359469][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367501][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.375271][ T4271] device bridge_slave_0 entered promiscuous mode [ 64.383571][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.390646][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.398957][ T4272] device bridge_slave_0 entered promiscuous mode [ 64.413737][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.420841][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.431573][ T4279] device bridge_slave_0 entered promiscuous mode [ 64.459877][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.469501][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.477484][ T4271] device bridge_slave_1 entered promiscuous mode [ 64.484699][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.491974][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.499704][ T4272] device bridge_slave_1 entered promiscuous mode [ 64.511284][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.518346][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.526267][ T4279] device bridge_slave_1 entered promiscuous mode [ 64.535026][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.547198][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.557952][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.581392][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.626999][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.652447][ T4273] team0: Port device team_slave_0 added [ 64.660576][ T4281] team0: Port device team_slave_0 added [ 64.668405][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.679740][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.691128][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.701346][ T4273] team0: Port device team_slave_1 added [ 64.708309][ T4281] team0: Port device team_slave_1 added [ 64.715660][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.730800][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.794233][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.801274][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.827334][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.840883][ T4271] team0: Port device team_slave_0 added [ 64.847575][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.854758][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.880996][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.897002][ T4272] team0: Port device team_slave_0 added [ 64.904850][ T4279] team0: Port device team_slave_0 added [ 64.911917][ T4272] team0: Port device team_slave_1 added [ 64.917999][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.927975][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.954025][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.966255][ T4271] team0: Port device team_slave_1 added [ 64.975186][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.982230][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.008181][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.035614][ T4279] team0: Port device team_slave_1 added [ 65.063874][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.071392][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.097679][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.110084][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.117209][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.143630][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.178753][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.185806][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.211796][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.236389][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.246219][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.273319][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.294429][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.301412][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.327558][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.348360][ T4273] device hsr_slave_0 entered promiscuous mode [ 65.355515][ T4273] device hsr_slave_1 entered promiscuous mode [ 65.362691][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.369642][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.395946][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.439749][ T4281] device hsr_slave_0 entered promiscuous mode [ 65.446499][ T4281] device hsr_slave_1 entered promiscuous mode [ 65.453258][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.461063][ T4281] Cannot create hsr debugfs directory [ 65.493420][ T4272] device hsr_slave_0 entered promiscuous mode [ 65.500208][ T4272] device hsr_slave_1 entered promiscuous mode [ 65.506817][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.514417][ T4272] Cannot create hsr debugfs directory [ 65.562309][ T4271] device hsr_slave_0 entered promiscuous mode [ 65.568950][ T4271] device hsr_slave_1 entered promiscuous mode [ 65.577781][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.585715][ T4271] Cannot create hsr debugfs directory [ 65.624487][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 65.624497][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 65.630696][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 65.660741][ T4279] device hsr_slave_0 entered promiscuous mode [ 65.668109][ T4279] device hsr_slave_1 entered promiscuous mode [ 65.675080][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.682740][ T4279] Cannot create hsr debugfs directory [ 65.711719][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 65.711761][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 65.946040][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.958968][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.977549][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.989386][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.044722][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.056919][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.083268][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.094384][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.128455][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.155522][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.164969][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.174966][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.223718][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.237639][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.267387][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.309854][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.333347][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.349507][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.360618][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.370760][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.388563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.397573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.408781][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.425027][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.448633][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.464436][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.473349][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.482496][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.491332][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.500349][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.507858][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.518511][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.544621][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.555699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.566385][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.575009][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.582170][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.591455][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.616514][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.634261][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.656603][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.667203][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.676470][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.683596][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.693228][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.702050][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.710349][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.718994][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.727407][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.735687][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.765075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.773822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.783980][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.791100][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.799507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.808143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.823818][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.844761][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.858002][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.866548][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.877039][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.885561][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.894167][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.903094][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.936817][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.948721][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.958341][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.967139][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.974285][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.988826][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.000441][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.009388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.019233][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.026388][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.035141][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.044593][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.053265][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.063059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.072167][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.095014][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.109813][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.122409][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.141668][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.149706][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.157882][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.170753][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.181997][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.190606][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.199625][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.214197][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.236006][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.250303][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.258960][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.267820][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.276030][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.296044][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.310449][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.319981][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.335661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.344700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.359261][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.379472][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.399234][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.421684][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.430096][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.441351][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.450277][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.459245][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.467613][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.475419][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.484610][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.493621][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.500670][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.508448][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.517153][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.525676][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.532780][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.544875][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.553825][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.567141][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.606146][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.626937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.636976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.653235][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.660359][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.696784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.705236][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 67.711661][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 67.712410][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 67.741753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.750400][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.757569][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.765410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.774866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.783252][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 67.790726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.791564][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 67.799885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.860364][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.872564][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.888451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.899729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.908664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.918134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.927319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.938163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.950240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.965391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.976250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.986607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.995357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.004287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.012750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.022298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.031283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.039355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.047365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.068293][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.089305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.097091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.133444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.148916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.157994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.171975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.180444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.195845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.205587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.217973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.228859][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.239350][ T4272] device veth0_vlan entered promiscuous mode [ 68.249025][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.267535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.285578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.316056][ T4272] device veth1_vlan entered promiscuous mode [ 68.337246][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.367229][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.396709][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.407737][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.448652][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.459721][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.473426][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.492330][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.512288][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.520206][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.541860][ T4272] device veth0_macvtap entered promiscuous mode [ 68.555424][ T4281] device veth0_vlan entered promiscuous mode [ 68.565204][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.573704][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.583893][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.602342][ T4272] device veth1_macvtap entered promiscuous mode [ 68.619655][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.633152][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.651495][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.659491][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.668207][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.680869][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.692740][ T4281] device veth1_vlan entered promiscuous mode [ 68.704432][ T4271] device veth0_vlan entered promiscuous mode [ 68.727714][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.746339][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.754901][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.763302][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.771970][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.787007][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.797175][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.811104][ T4271] device veth1_vlan entered promiscuous mode [ 68.826338][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.836472][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.846738][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.856069][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.867776][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.885937][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.893630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.909112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.930781][ T4279] device veth0_vlan entered promiscuous mode [ 68.966289][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991629][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.000354][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.009433][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.026499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.036128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.045392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.053454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.074481][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.084363][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.104547][ T4281] device veth0_macvtap entered promiscuous mode [ 69.117034][ T4279] device veth1_vlan entered promiscuous mode [ 69.127657][ T4271] device veth0_macvtap entered promiscuous mode [ 69.136478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.155946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.170519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.181971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.203702][ T4281] device veth1_macvtap entered promiscuous mode [ 69.230177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.239623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.248475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.262596][ T4271] device veth1_macvtap entered promiscuous mode [ 69.292458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.300834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.320260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.338639][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.353599][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.388113][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.406790][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.418812][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.434569][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.446667][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.458342][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.468813][ T4279] device veth0_macvtap entered promiscuous mode [ 69.490736][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.499551][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.508667][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.519382][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.528312][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.539337][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.550802][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.562838][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.578038][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.590833][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.601189][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.616738][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.629106][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.641865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.650541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.659767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.669794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.680708][ T4279] device veth1_macvtap entered promiscuous mode [ 69.694178][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.705407][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.714438][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.725940][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.744629][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.753966][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.763401][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.773240][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.781698][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 69.782337][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 69.787892][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 69.844267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.855014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.863257][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 69.863292][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 69.880310][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.891807][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.902892][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.913387][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.923334][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.934036][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.946500][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.980066][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.989029][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.998694][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.007396][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.018589][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.028446][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.038241][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.049083][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.060222][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.070701][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.081112][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.091858][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.103664][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.114672][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.125026][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.127867][ T4273] device veth0_vlan entered promiscuous mode [ 70.157141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.169842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.179930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.212652][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.221621][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.226780][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.230300][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.241569][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.252625][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.277444][ T4273] device veth1_vlan entered promiscuous mode [ 70.293003][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.303537][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.411931][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.419779][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.464619][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.487518][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.492456][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.504880][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.520603][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.544999][ T4273] device veth0_macvtap entered promiscuous mode [ 70.557318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.563524][ T4352] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.566064][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.587716][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.600166][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.633596][ T4273] device veth1_macvtap entered promiscuous mode [ 70.642218][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.645583][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.650028][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.659133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.696238][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.705164][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.714411][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.726413][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.209920][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.225325][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230087][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.234093][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.278301][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.604576][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.655398][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676961][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.687703][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.704905][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.719680][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.731565][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.742692][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.757610][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.841373][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.859465][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.869622][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 71.869638][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 71.877185][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 71.914413][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.937874][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.941569][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 71.949669][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.965254][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977185][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.988896][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.999649][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.010503][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.022906][ T4373] IPv6: addrconf: prefix option has invalid lifetime [ 72.023744][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.048460][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.060886][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.082327][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.092163][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.102780][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.112824][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.260494][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.277088][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.318730][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.339432][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.355572][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.369080][ T4371] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 72.430453][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.110977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.130965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.140962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.150959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.160959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.170959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 73.180958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 73.190958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 73.200959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 73.210960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 73.735014][ T4394] overlayfs: failed to resolve './file0': -2 [ 73.777722][ T4395] Zero length message leads to an empty skb [ 75.952439][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 76.095578][ T4417] loop2: detected capacity change from 0 to 164 [ 76.139489][ T4417] ======================================================= [ 76.139489][ T4417] WARNING: The mand mount option has been deprecated and [ 76.139489][ T4417] and is ignored by this kernel. Remove the mand [ 76.139489][ T4417] option from the mount to silence this warning. [ 76.139489][ T4417] ======================================================= [ 76.900289][ T4428] loop1: detected capacity change from 0 to 512 [ 77.103251][ T4428] EXT4-fs (loop1): 1 truncate cleaned up [ 77.108952][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.203146][ T4428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.24: bg 0: block 465: padding at end of block bitmap is not set [ 78.676291][ T4434] sched: RT throttling activated [ 78.711980][ T4428] EXT4-fs (loop1): Remounting filesystem read-only [ 79.618664][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 79.801841][ T4448] ip_tables: iptables: counters copy to user failed while replacing table [ 82.601141][ T14] cfg80211: failed to load regulatory.db [ 83.073976][ T4467] loop1: detected capacity change from 0 to 1024 [ 83.275077][ T4475] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 83.298115][ T4467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.370018][ T4467] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.400692][ T4467] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.37: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.439516][ T4467] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 83.491231][ T4316] psmouse serio2: Failed to reset mouse on : -5 [ 83.496112][ T4467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 83.496112][ T4467] [ 84.471954][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 84.815166][ T4490] bond0: (slave bond_slave_1): Releasing backup interface [ 84.885392][ T22] libceph: connect (1)[c::]:6789 error -101 [ 84.974257][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 85.328670][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 85.397193][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 85.562186][ T4491] ceph: No mds server is up or the cluster is laggy [ 86.132999][ T22] libceph: connect (1)[c::]:6789 error -101 [ 86.140306][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 86.486166][ T4511] capability: warning: `syz.4.46' uses 32-bit capabilities (legacy support in use) [ 87.243948][ T26] audit: type=1800 audit(1790722671.848:2): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="sda1" ino=2047 res=0 errno=0 [ 87.245809][ T4513] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 87.384295][ T4517] loop1: detected capacity change from 0 to 164 [ 88.491131][ T4316] misc userio: Buffer overflowed, userio client isn't keeping up [ 89.333578][ T4539] loop2: detected capacity change from 0 to 1024 [ 89.666230][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.674983][ T4539] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.887886][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 90.091510][ T4557] loop2: detected capacity change from 0 to 1024 [ 90.269468][ T4316] input: PS/2 Generic Mouse as /devices/serio2/input/input7 [ 90.624126][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.632723][ T4557] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.671589][ T4316] psmouse serio2: Failed to enable mouse on [ 90.741055][ T4554] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.58: lblock 0 mapped to illegal pblock 0 (length 6) [ 90.771555][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.833826][ T4554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 90.861209][ T4554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.861209][ T4554] [ 90.964074][ T4564] bond0: (slave bond_slave_1): Releasing backup interface [ 91.059673][ T126] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.274642][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.446580][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.597606][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.713429][ T4564] ceph: No mds server is up or the cluster is laggy [ 91.722864][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 91.728880][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 91.736203][ T126] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.746326][ T126] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.794852][ T126] usb 1-1: Manufacturer: syz [ 91.835364][ T126] usb 1-1: config 0 descriptor?? [ 91.887626][ T4356] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 91.945959][ T4356] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 91.993976][ T4356] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.993976][ T4356] [ 92.031711][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 92.082270][ T4573] netlink: 'syz.4.63': attribute type 4 has an invalid length. [ 92.113684][ T4575] loop2: detected capacity change from 0 to 164 [ 93.204377][ T126] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 93.213558][ T126] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 93.259184][ T126] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 93.336980][ T126] usb 1-1: USB disconnect, device number 2 [ 94.472780][ T4602] netlink: 168 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.524141][ T4589] fido_id[4589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 94.585180][ T4599] loop4: detected capacity change from 0 to 128 [ 94.819292][ T4614] bond0: (slave bond_slave_1): Releasing backup interface [ 95.583953][ T4614] ceph: No mds server is up or the cluster is laggy [ 95.924887][ T4619] FAULT_INJECTION: forcing a failure. [ 95.924887][ T4619] name failslab, interval 1, probability 0, space 0, times 1 [ 95.937944][ T4619] CPU: 1 PID: 4619 Comm: syz.0.74 Not tainted syzkaller #0 [ 95.945164][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.955264][ T4619] Call Trace: [ 95.958551][ T4619] [ 95.961486][ T4619] dump_stack_lvl+0x188/0x24e [ 95.966191][ T4619] ? __wake_up+0x12e/0x1a0 [ 95.970625][ T4619] ? show_regs_print_info+0x12/0x12 [ 95.975845][ T4619] ? load_image+0x410/0x410 [ 95.980374][ T4619] should_fail_ex+0x390/0x4c0 [ 95.985076][ T4619] should_failslab+0x5/0x20 [ 95.989587][ T4619] slab_pre_alloc_hook+0x59/0x300 [ 95.994625][ T4619] ? __lock_acquire+0x7c40/0x7c40 [ 95.999670][ T4619] kmem_cache_alloc+0x56/0x2f0 [ 96.004451][ T4619] ? __sigqueue_alloc+0x40c/0x520 [ 96.009479][ T4619] ? __sigqueue_alloc+0x32/0x520 [ 96.014417][ T4619] __sigqueue_alloc+0x40c/0x520 [ 96.019265][ T4619] __send_signal_locked+0x22f/0xde0 [ 96.024464][ T4619] do_notify_parent+0xb24/0xd10 [ 96.029312][ T4619] ? trace_signal_generate+0x260/0x260 [ 96.034768][ T4619] ? __lock_acquire+0x7c40/0x7c40 [ 96.039804][ T4619] release_task+0x121c/0x1680 [ 96.044504][ T4619] ? do_exit+0x18d7/0x2570 [ 96.048917][ T4619] ? delayed_put_task_struct+0x2f0/0x2f0 [ 96.054544][ T4619] ? _raw_write_lock_irq+0xb7/0xf0 [ 96.059662][ T4619] ? _raw_write_lock_irqsave+0x100/0x100 [ 96.065289][ T4619] ? _raw_write_unlock_irq+0x1f/0x40 [ 96.070565][ T4619] ? lockdep_hardirqs_on+0x94/0x140 [ 96.075759][ T4619] do_exit+0x18d7/0x2570 [ 96.080009][ T4619] ? put_task_struct+0x80/0x80 [ 96.084767][ T4619] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.090769][ T4619] ? lock_chain_count+0x20/0x20 [ 96.095621][ T4619] ? _raw_spin_lock_irq+0xb7/0xf0 [ 96.100651][ T4619] do_group_exit+0x229/0x2e0 [ 96.105238][ T4619] ? lockdep_hardirqs_on+0x94/0x140 [ 96.110430][ T4619] get_signal+0x1259/0x1340 [ 96.114934][ T4619] ? futex_wake+0x426/0x4f0 [ 96.119433][ T4619] arch_do_signal_or_restart+0xc4/0x1310 [ 96.125060][ T4619] ? do_ip_setsockopt+0x1522/0x2f00 [ 96.130252][ T4619] ? do_futex+0x2e2/0x320 [ 96.134575][ T4619] ? get_sigframe_size+0x10/0x10 [ 96.139501][ T4619] ? __ia32_sys_get_robust_list+0x100/0x100 [ 96.145393][ T4619] ? exit_to_user_mode_loop+0x3b/0x110 [ 96.150848][ T4619] exit_to_user_mode_loop+0x70/0x110 [ 96.156130][ T4619] exit_to_user_mode_prepare+0xee/0x180 [ 96.161666][ T4619] syscall_exit_to_user_mode+0x16/0x40 [ 96.167907][ T4619] do_syscall_64+0x58/0xa0 [ 96.172325][ T4619] ? clear_bhb_loop+0x60/0xb0 [ 96.176991][ T4619] ? clear_bhb_loop+0x60/0xb0 [ 96.181660][ T4619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.187548][ T4619] RIP: 0033:0x7f5b15b9e159 [ 96.191963][ T4619] Code: Unable to access opcode bytes at 0x7f5b15b9e12f. [ 96.198969][ T4619] RSP: 002b:00007f5b169f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.207374][ T4619] RAX: 0000000000000001 RBX: 00007f5b15e25fa8 RCX: 00007f5b15b9e159 [ 96.215333][ T4619] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5b15e25fac [ 96.223301][ T4619] RBP: 00007f5b15e25fa0 R08: 00277fc6fb7eba82 R09: 0000000000000000 [ 96.231261][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.239221][ T4619] R13: 00007f5b15e26038 R14: 00007fffd03ef500 R15: 00007fffd03ef5e8 [ 96.247190][ T4619] [ 96.454918][ T4624] loop4: detected capacity change from 0 to 164 [ 97.211075][ T4639] FAULT_INJECTION: forcing a failure. [ 97.211075][ T4639] name failslab, interval 1, probability 0, space 0, times 0 [ 97.294750][ T4639] CPU: 0 PID: 4639 Comm: syz.0.81 Not tainted syzkaller #0 [ 97.302014][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.312089][ T4639] Call Trace: [ 97.315377][ T4639] [ 97.318326][ T4639] dump_stack_lvl+0x188/0x24e [ 97.323025][ T4639] ? show_regs_print_info+0x12/0x12 [ 97.328234][ T4639] ? load_image+0x410/0x410 [ 97.333208][ T4639] ? __might_sleep+0xd0/0xd0 [ 97.337815][ T4639] ? __lock_acquire+0x7c40/0x7c40 [ 97.342851][ T4639] ? vsnprintf+0x1b22/0x1c20 [ 97.347472][ T4639] should_fail_ex+0x390/0x4c0 [ 97.352184][ T4639] should_failslab+0x5/0x20 [ 97.356709][ T4639] slab_pre_alloc_hook+0x59/0x300 [ 97.361767][ T4639] ? snd_timer_instance_new+0x4d/0x210 [ 97.367251][ T4639] __kmem_cache_alloc_node+0x4f/0x270 [ 97.372644][ T4639] ? vsprintf+0x30/0x30 [ 97.376820][ T4639] ? snd_timer_instance_new+0x4d/0x210 [ 97.382300][ T4639] kmalloc_trace+0x26/0xe0 [ 97.386731][ T4639] snd_timer_instance_new+0x4d/0x210 [ 97.392046][ T4639] snd_seq_timer_open+0x237/0x600 [ 97.397100][ T4639] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 97.402494][ T4639] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 97.408424][ T4639] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.414351][ T4639] ? _raw_spin_unlock+0x40/0x40 [ 97.419235][ T4639] ? snd_seq_timer_defaults+0x31/0x530 [ 97.424716][ T4639] snd_seq_queue_alloc+0x3b3/0x740 [ 97.429865][ T4639] snd_seq_ioctl_create_queue+0x7b/0x3b0 [ 97.435516][ T4639] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 97.441047][ T4630] loop2: detected capacity change from 0 to 32768 [ 97.441760][ T4639] snd_seq_oss_open+0x622/0xf00 [ 97.453047][ T4639] ? snd_seq_oss_delete_client+0x50/0x50 [ 97.458773][ T4639] ? trace_raw_output_contention_end+0xd0/0xd0 [ 97.464976][ T4639] ? odev_open+0x58/0x90 [ 97.469248][ T4639] ? __lock_acquire+0x7c40/0x7c40 [ 97.474305][ T4639] ? snd_seq_oss_process_event+0x2910/0x2910 [ 97.480314][ T4639] ? async_call_lookup_ports+0x10/0x10 [ 97.485800][ T4639] ? do_raw_spin_unlock+0x11d/0x230 [ 97.486142][ T4630] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.79 (4630) [ 97.491005][ T4639] ? soundcore_open+0x309/0x4b0 [ 97.491038][ T4639] odev_open+0x63/0x90 [ 97.491058][ T4639] chrdev_open+0x585/0x5f0 [ 97.491079][ T4639] ? cd_forget+0x160/0x160 [ 97.491100][ T4639] ? fsnotify_perm+0x39b/0x550 [ 97.491119][ T4639] ? cd_forget+0x160/0x160 [ 97.530173][ T4639] do_dentry_open+0x7dd/0x10b0 [ 97.534977][ T4639] path_openat+0x2674/0x2f10 [ 97.539605][ T4639] ? verify_lock_unused+0x140/0x140 [ 97.544830][ T4639] ? do_sys_openat2+0xdd/0x4f0 [ 97.549629][ T4639] ? do_filp_open+0x420/0x420 [ 97.554357][ T4639] do_filp_open+0x1ee/0x420 [ 97.558891][ T4639] ? vfs_tmpfile+0x470/0x470 [ 97.563518][ T4639] ? _raw_spin_unlock+0x24/0x40 [ 97.568391][ T4639] ? alloc_fd+0x590/0x640 [ 97.572758][ T4639] do_sys_openat2+0x14b/0x4f0 [ 97.577456][ T4639] ? do_sys_open+0xe0/0xe0 [ 97.581895][ T4639] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.587900][ T4639] ? lock_chain_count+0x20/0x20 [ 97.592773][ T4639] __x64_sys_openat+0x135/0x160 [ 97.597637][ T4639] do_syscall_64+0x4c/0xa0 [ 97.602151][ T4639] ? clear_bhb_loop+0x60/0xb0 [ 97.606905][ T4639] ? clear_bhb_loop+0x60/0xb0 [ 97.611583][ T4639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.617481][ T4639] RIP: 0033:0x7f5b15b9e159 [ 97.621891][ T4639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.641583][ T4639] RSP: 002b:00007f5b169f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.649992][ T4639] RAX: ffffffffffffffda RBX: 00007f5b15e25fa0 RCX: 00007f5b15b9e159 [ 97.657959][ T4639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 97.665926][ T4639] RBP: 00007f5b15c3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.673921][ T4639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.681901][ T4639] R13: 00007f5b15e26038 R14: 00007f5b15e25fa0 R15: 00007fffd03ef5e8 [ 97.689879][ T4639] [ 97.713392][ T4630] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.739899][ T4630] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 97.754912][ T4630] BTRFS info (device loop2): setting nodatasum [ 97.763291][ T4630] BTRFS info (device loop2): force zlib compression, level 3 [ 97.772819][ T4630] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 97.784862][ T4630] BTRFS info (device loop2): use lzo compression, level 0 [ 97.795367][ T4630] BTRFS info (device loop2): turning on flush-on-commit [ 97.810776][ T4630] BTRFS info (device loop2): enabling auto defrag [ 97.818922][ T4630] BTRFS info (device loop2): max_inline at 4096 [ 97.858595][ T4630] BTRFS info (device loop2): using free space tree [ 98.400531][ T4630] BTRFS info (device loop2): enabling ssd optimizations [ 99.449817][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.509307][ T4684] loop4: detected capacity change from 0 to 256 [ 99.627653][ T4688] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 100.668610][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 100.852662][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.447303][ T4709] device bridge_slave_1 left promiscuous mode [ 101.455153][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.612846][ T4736] overlayfs: unrecognized mount option "uuid=null" or missing value [ 102.657917][ T4734] fuse: root generation should be zero [ 102.810751][ T4741] loop4: detected capacity change from 0 to 128 [ 102.876231][ T4741] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 102.898400][ T4379] udevd[4379]: incorrect ext4 checksum on /dev/loop4 [ 104.286455][ T4756] process 'syz.0.110' launched './file0' with NULL argv: empty string added [ 104.870984][ T4358] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.093150][ T4358] usb 1-1: config 1 has an invalid interface number: 155 but max is 0 [ 105.110052][ T4767] loop3: detected capacity change from 0 to 4096 [ 105.116922][ T4358] usb 1-1: config 1 has no interface number 0 [ 105.136209][ T4358] usb 1-1: config 1 interface 155 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 105.225165][ T4358] usb 1-1: config 1 interface 155 has no altsetting 0 [ 105.309512][ T4358] usb 1-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=40.66 [ 105.324605][ T4767] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 105.336900][ T4358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.369243][ T4358] usb 1-1: Product: syz [ 105.381064][ T4358] usb 1-1: Manufacturer: syz [ 105.399141][ T4358] usb 1-1: SerialNumber: syz [ 105.443397][ T4758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.668871][ T4358] pegasus 1-1:1.155: Missing or invalid endpoints [ 105.806466][ T4358] usb 1-1: USB disconnect, device number 3 [ 107.703816][ T4272] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 108.139840][ T4796] bond0: (slave bond_slave_1): Releasing backup interface [ 111.866518][ T4840] FAULT_INJECTION: forcing a failure. [ 111.866518][ T4840] name failslab, interval 1, probability 0, space 0, times 0 [ 111.880582][ T4840] CPU: 0 PID: 4840 Comm: syz.1.132 Not tainted syzkaller #0 [ 111.887914][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.897994][ T4840] Call Trace: [ 111.901284][ T4840] [ 111.904231][ T4840] dump_stack_lvl+0x188/0x24e [ 111.908928][ T4840] ? show_regs_print_info+0x12/0x12 [ 111.914146][ T4840] ? load_image+0x410/0x410 [ 111.919000][ T4840] ? __might_sleep+0xd0/0xd0 [ 111.923934][ T4840] ? __lock_acquire+0x7c40/0x7c40 [ 111.929025][ T4840] should_fail_ex+0x390/0x4c0 [ 111.934262][ T4840] should_failslab+0x5/0x20 [ 111.937473][ T4841] fuse: Bad value for 'fd' [ 111.938765][ T4840] slab_pre_alloc_hook+0x59/0x300 [ 111.948230][ T4840] ? lockdep_softirqs_off+0x430/0x430 [ 111.953630][ T4840] kmem_cache_alloc+0x56/0x2f0 [ 111.958393][ T4840] ? security_inode_alloc+0x30/0x110 [ 111.963679][ T4840] security_inode_alloc+0x30/0x110 [ 111.968785][ T4840] inode_init_always+0x910/0xc90 [ 111.973723][ T4840] new_inode_pseudo+0x91/0x1c0 [ 111.978483][ T4840] new_inode+0x25/0x1d0 [ 111.982635][ T4840] shmem_get_inode+0x327/0xbc0 [ 111.987437][ T4840] shmem_mknod+0x54/0x1c0 [ 111.991770][ T4840] shmem_mkdir+0x27/0x60 [ 111.996011][ T4840] vfs_mkdir+0x386/0x570 [ 112.000251][ T4840] do_mkdirat+0x1d8/0x440 [ 112.004574][ T4840] ? vfs_mkdir+0x570/0x570 [ 112.008985][ T4840] __x64_sys_mkdirat+0x85/0x90 [ 112.013752][ T4840] do_syscall_64+0x4c/0xa0 [ 112.018166][ T4840] ? clear_bhb_loop+0x60/0xb0 [ 112.022834][ T4840] ? clear_bhb_loop+0x60/0xb0 [ 112.027502][ T4840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.033393][ T4840] RIP: 0033:0x7fb87e99e159 [ 112.037804][ T4840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.057405][ T4840] RSP: 002b:00007fb87f812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 112.065811][ T4840] RAX: ffffffffffffffda RBX: 00007fb87ec25fa0 RCX: 00007fb87e99e159 [ 112.073775][ T4840] RDX: 00000000000001ff RSI: 0000200000000440 RDI: ffffffffffffff9c [ 112.081739][ T4840] RBP: 00007fb87ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.089701][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.097666][ T4840] R13: 00007fb87ec26038 R14: 00007fb87ec25fa0 R15: 00007ffe5af56648 [ 112.105645][ T4840] [ 112.378172][ T4850] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 112.709386][ T4853] usb usb8: usbfs: process 4853 (syz.3.135) did not claim interface 1 before use [ 113.737547][ T4888] FAULT_INJECTION: forcing a failure. [ 113.737547][ T4888] name failslab, interval 1, probability 0, space 0, times 0 [ 113.757143][ T4888] CPU: 1 PID: 4888 Comm: syz.2.146 Not tainted syzkaller #0 [ 113.764493][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.774572][ T4888] Call Trace: [ 113.777875][ T4888] [ 113.780820][ T4888] dump_stack_lvl+0x188/0x24e [ 113.785528][ T4888] ? show_regs_print_info+0x12/0x12 [ 113.790753][ T4888] ? load_image+0x410/0x410 [ 113.795292][ T4888] ? __might_sleep+0xd0/0xd0 [ 113.799919][ T4888] ? __lock_acquire+0x7c40/0x7c40 [ 113.804980][ T4888] should_fail_ex+0x390/0x4c0 [ 113.809699][ T4888] should_failslab+0x5/0x20 [ 113.814239][ T4888] slab_pre_alloc_hook+0x59/0x300 [ 113.819297][ T4888] ? tomoyo_encode+0x28a/0x550 [ 113.824096][ T4888] __kmem_cache_alloc_node+0x4f/0x270 [ 113.829515][ T4888] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 113.835361][ T4888] ? tomoyo_encode+0x28a/0x550 [ 113.840163][ T4888] __kmalloc+0xa3/0x240 [ 113.844357][ T4888] tomoyo_encode+0x28a/0x550 [ 113.848990][ T4888] tomoyo_realpath_from_path+0x578/0x5c0 [ 113.854665][ T4888] ? tomoyo_domain+0xd2/0x120 [ 113.859387][ T4888] ? tomoyo_path_number_perm+0x205/0x650 [ 113.865069][ T4888] tomoyo_path_number_perm+0x22f/0x650 [ 113.870562][ T4888] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 113.876056][ T4888] ? futex_wake_mark+0x150/0x150 [ 113.881054][ T4888] ? __fget_files+0x28/0x460 [ 113.885687][ T4888] security_file_ioctl+0x6c/0xa0 [ 113.890659][ T4888] __se_sys_ioctl+0x48/0x170 [ 113.895288][ T4888] do_syscall_64+0x4c/0xa0 [ 113.899737][ T4888] ? clear_bhb_loop+0x60/0xb0 [ 113.904439][ T4888] ? clear_bhb_loop+0x60/0xb0 [ 113.909145][ T4888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.915071][ T4888] RIP: 0033:0x7f3090f9e159 [ 113.919489][ T4888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.939096][ T4888] RSP: 002b:00007f308f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.947509][ T4888] RAX: ffffffffffffffda RBX: 00007f3091225fa0 RCX: 00007f3090f9e159 [ 113.955473][ T4888] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 113.963439][ T4888] RBP: 00007f309103506b R08: 0000000000000000 R09: 0000000000000000 [ 113.971405][ T4888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.979368][ T4888] R13: 00007f3091226038 R14: 00007f3091225fa0 R15: 00007ffce2d0c6b8 [ 113.987344][ T4888] [ 114.048843][ T4894] futex_wake_op: syz.1.148 tries to shift op by 144; fix this program [ 114.072466][ T4888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.132928][ T4899] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 114.465927][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 116.125108][ T4924] usb usb8: usbfs: process 4924 (syz.0.155) did not claim interface 1 before use [ 116.240543][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.447603][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.547470][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.656385][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 116.749990][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.862725][ T4260] libceph: connect (1)[c::]:6789 error -101 [ 116.908424][ T4260] libceph: mon0 (1)[c::]:6789 connect error [ 116.934119][ T7] usb 4-1: config 0 descriptor?? [ 117.192740][ T4940] ceph: No mds server is up or the cluster is laggy [ 117.447904][ T7] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 117.468189][ T7] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 117.495663][ T4947] block device autoloading is deprecated and will be removed. [ 117.531216][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input8 [ 117.532432][ T4954] ip_tables: iptables: counters copy to user failed while replacing table [ 117.585694][ T7] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 117.615902][ T4951] IPVS: Scheduler module ip_vs_sip not found [ 117.645304][ T4947] syz.4.163: attempt to access beyond end of device [ 117.645304][ T4947] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 117.673429][ T7] usb 4-1: USB disconnect, device number 2 [ 117.682863][ T4947] XFS (nbd4): SB validate failed with error -5. [ 117.775062][ T4962] fido_id[4962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 118.842301][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 118.857911][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 118.870331][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.877286][ T4287] Bluetooth: hci4: hardware error 0x00 [ 119.081163][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 119.114278][ T126] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 119.131139][ T126] usb 2-1: config 2 has no interface number 0 [ 119.137284][ T126] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 119.148508][ T126] usb 2-1: config 2 interface 79 has no altsetting 0 [ 119.161326][ T126] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 119.176258][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.184860][ T126] usb 2-1: Product: syz [ 119.189089][ T126] usb 2-1: Manufacturer: syz [ 119.194182][ T126] usb 2-1: SerialNumber: syz [ 119.216836][ T4964] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.288788][ T14] usb 1-1: config 0 has no interfaces? [ 119.336896][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.479050][ T14] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.551573][ T14] usb 1-1: Product: syz [ 119.591048][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.597166][ T14] usb 1-1: Manufacturer: syz [ 119.764085][ T14] usb 1-1: config 0 descriptor?? [ 120.014276][ T4990] ceph: No mds server is up or the cluster is laggy [ 120.059239][ T14] usb 1-1: USB disconnect, device number 4 [ 120.179473][ T4999] ip_tables: iptables: counters copy to user failed while replacing table [ 120.232743][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.249842][ T4318] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 120.269579][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.333965][ T4318] as10x_usb: device has been detected [ 120.339898][ T4318] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 121.522304][ T26] audit: type=1326 audit(1790722705.558:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.2.178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3090f9e159 code=0x0 [ 121.523521][ T4287] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 121.619989][ T4318] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 121.663047][ T126] esd_usb 2-1:2.79: sending version message failed [ 121.696151][ T126] esd_usb: probe of 2-1:2.79 failed with error -22 [ 121.707018][ T126] usb 2-1: USB disconnect, device number 2 [ 121.760330][ T4318] as10x_usb: error during firmware upload part1 [ 121.799557][ T4318] Registered device Abilis Systems DVB-Titan [ 122.875712][ T22] usb 4-1: USB disconnect, device number 3 [ 123.006010][ T22] Unregistered device Abilis Systems DVB-Titan [ 123.016779][ T22] as10x_usb: device has been disconnected [ 123.092076][ T5025] loop4: detected capacity change from 0 to 1024 [ 123.121955][ T5025] EXT4-fs: Ignoring removed bh option [ 123.607963][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.752710][ T22] libceph: connect (1)[c::]:6789 error -101 [ 123.777570][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 124.006885][ T5043] ceph: No mds server is up or the cluster is laggy [ 124.083563][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 124.089637][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 124.301920][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 126.921893][ T5090] loop0: detected capacity change from 0 to 32768 [ 126.951183][ T4358] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.967319][ T5090] JBD2: Ignoring recovery information on journal [ 126.976334][ T5090] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 126.985002][ T5090] JBD2: bad block at offset 32 [ 127.003662][ T5090] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.047481][ T5095] loop4: detected capacity change from 0 to 2048 [ 127.101850][ T5095] ext4: Unknown parameter 'euid<00000000000000000000' [ 127.116841][ T5098] overlayfs: failed to resolve './file0': -2 [ 127.234579][ T4358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.245566][ T4358] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 127.271996][ T4529] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.297187][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.373600][ T5100] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 127.395392][ T5100] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 127.405715][ T5100] OCFS2: File system is now read-only. [ 127.411272][ T5100] (syz.0.201,5100,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 127.419630][ T5100] (syz.0.201,5100,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 127.427804][ T5100] (syz.0.201,5100,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 127.435942][ T5100] (syz.0.201,5100,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 127.444523][ T5100] (syz.0.201,5100,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 127.452993][ T5100] (syz.0.201,5100,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 127.461549][ T5100] (syz.0.201,5100,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 127.470187][ T5100] (syz.0.201,5100,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 127.546477][ T4358] as10x_usb: device has been detected [ 128.041358][ T4358] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 128.072456][ T4279] ocfs2: Unmounting device (7,0) on (node local) [ 128.082290][ T4358] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 128.134868][ T4358] as10x_usb: error during firmware upload part1 [ 128.174724][ T4358] Registered device Abilis Systems DVB-Titan [ 128.499763][ T5115] FAULT_INJECTION: forcing a failure. [ 128.499763][ T5115] name failslab, interval 1, probability 0, space 0, times 0 [ 128.522429][ T5115] CPU: 0 PID: 5115 Comm: syz.1.211 Not tainted syzkaller #0 [ 128.529765][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.539855][ T5115] Call Trace: [ 128.543151][ T5115] [ 128.546089][ T5115] dump_stack_lvl+0x188/0x24e [ 128.550805][ T5115] ? show_regs_print_info+0x12/0x12 [ 128.556015][ T5115] ? load_image+0x410/0x410 [ 128.560540][ T5115] ? __might_sleep+0xd0/0xd0 [ 128.565146][ T5115] ? __lock_acquire+0x7c40/0x7c40 [ 128.570194][ T5115] should_fail_ex+0x390/0x4c0 [ 128.574899][ T5115] should_failslab+0x5/0x20 [ 128.579418][ T5115] slab_pre_alloc_hook+0x59/0x300 [ 128.584555][ T5115] ? nf_nat_register_fn+0x29a/0x540 [ 128.589791][ T5115] __kmem_cache_alloc_node+0x4f/0x270 [ 128.595187][ T5115] ? nf_nat_register_fn+0x29a/0x540 [ 128.600419][ T5115] kmalloc_trace+0x26/0xe0 [ 128.604867][ T5115] nf_nat_register_fn+0x29a/0x540 [ 128.609925][ T5115] iptable_nat_table_init+0xd0/0x2d0 [ 128.615238][ T5115] xt_find_table_lock+0x220/0x360 [ 128.620294][ T5115] xt_request_find_table_lock+0x22/0x100 [ 128.625954][ T5115] do_ipt_get_ctl+0x6e2/0x11a0 [ 128.630747][ T5115] ? do_ipt_set_ctl+0xe00/0xe00 [ 128.635633][ T5115] ? nf_getsockopt+0x21b/0x280 [ 128.640430][ T5115] ? __lock_acquire+0x7c40/0x7c40 [ 128.645479][ T5115] ? trace_contention_end+0x5f/0x170 [ 128.650800][ T5115] ? __mutex_lock+0x1ab/0xae0 [ 128.655505][ T5115] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 128.661167][ T5115] ? mutex_unlock+0x10/0x10 [ 128.665692][ T5115] ? __might_fault+0xa6/0x120 [ 128.670391][ T5115] ? __lock_acquire+0x7c40/0x7c40 [ 128.675439][ T5115] nf_getsockopt+0x25e/0x280 [ 128.680067][ T5115] ip_getsockopt+0x19b/0x230 [ 128.684681][ T5115] ? ip_get_mcast_msfilter+0x3c0/0x3c0 [ 128.690160][ T5115] ? aa_sock_opt_perm+0x74/0x100 [ 128.695119][ T5115] ? sctp_getsockopt+0x9e/0x8a0 [ 128.699981][ T5115] ? sock_recv_errqueue+0x590/0x590 [ 128.705208][ T5115] __sys_getsockopt+0x1b0/0x230 [ 128.710081][ T5115] __x64_sys_getsockopt+0xb1/0xc0 [ 128.715311][ T5115] do_syscall_64+0x4c/0xa0 [ 128.719752][ T5115] ? clear_bhb_loop+0x60/0xb0 [ 128.724445][ T5115] ? clear_bhb_loop+0x60/0xb0 [ 128.729144][ T5115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.735083][ T5115] RIP: 0033:0x7fb87e99e159 [ 128.739540][ T5115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.759188][ T5115] RSP: 002b:00007fb87f812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 128.767652][ T5115] RAX: ffffffffffffffda RBX: 00007fb87ec25fa0 RCX: 00007fb87e99e159 [ 128.775644][ T5115] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 128.783639][ T5115] RBP: 00007fb87ea3506b R08: 00002000000000c0 R09: 0000000000000000 [ 128.791638][ T5115] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 128.799629][ T5115] R13: 00007fb87ec26038 R14: 00007fb87ec25fa0 R15: 00007ffe5af56648 [ 128.807638][ T5115] [ 129.071111][ T22] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 129.746429][ T5128] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 129.940495][ T22] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.143438][ T4287] Bluetooth: hci3: command 0x0405 tx timeout [ 130.250804][ T22] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.268547][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.277990][ T22] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 130.287139][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.297346][ T22] usb 3-1: config 0 descriptor?? [ 131.377241][ T22] wacom 0003:056A:005B.0003: hidraw0: USB HID v36.2c Joystick [HID 056a:005b] on usb-dummy_hcd.2-1/input0 [ 131.464235][ T5143] loop4: detected capacity change from 0 to 128 [ 131.514017][ T5143] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.550947][ T5143] hpfs: filesystem error: improperly stopped [ 131.556986][ T5143] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.596969][ T5143] hpfs: You really don't want any checks? You are crazy... [ 131.629315][ T5143] hpfs: Code page index out of array [ 131.645441][ T5143] hpfs: code page support is disabled [ 131.662128][ T5143] hpfs: hpfs_map_4sectors(): unaligned read [ 131.668633][ T5143] hpfs: hpfs_map_4sectors(): unaligned read [ 131.690986][ T5143] hpfs: filesystem error: unable to find root dir [ 132.116968][ T126] usb 3-1: USB disconnect, device number 2 [ 132.672759][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.679103][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.899262][ T5161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.179288][ T126] usb 4-1: USB disconnect, device number 4 [ 134.281978][ T126] Unregistered device Abilis Systems DVB-Titan [ 134.299067][ T126] as10x_usb: device has been disconnected [ 135.087255][ T5190] IPVS: Scheduler module ip_vs_sip not found [ 135.247719][ T5193] loop4: detected capacity change from 0 to 8192 [ 135.307781][ T26] audit: type=1800 audit(1790722719.908:4): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.232" name="bus" dev="loop4" ino=1048596 res=0 errno=0 [ 135.331146][ T5197] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 135.366508][ T26] audit: type=1800 audit(1790722719.928:5): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 135.454706][ T5197] mmap: syz.3.234 (5197) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.977019][ T5214] loop3: detected capacity change from 0 to 512 [ 137.995148][ T5214] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.114185][ T5214] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 138.132604][ T5214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.239: bg 0: block 248: padding at end of block bitmap is not set [ 138.152152][ T5214] Quota error (device loop3): write_blk: dquota write failed [ 138.160176][ T5214] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 138.171089][ T5214] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.239: Failed to acquire dquot type 1 [ 138.200318][ T5214] EXT4-fs (loop3): 1 truncate cleaned up [ 138.207017][ T5214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.947606][ T5231] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 138.957813][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 138.964946][ T5231] netlink: 'syz.0.246': attribute type 22 has an invalid length. [ 138.988396][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.997013][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.183458][ T5234] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 140.212301][ T26] audit: type=1800 audit(1790722724.788:6): pid=5234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 140.242408][ T2123] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.588234][ T2123] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.784232][ T2123] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 140.932655][ T2123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.023633][ T5253] netlink: 124 bytes leftover after parsing attributes in process `syz.2.251'. [ 141.066251][ T2123] as10x_usb: device has been detected [ 141.086423][ T2123] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 141.180394][ T2123] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 141.195192][ T2123] as10x_usb: error during firmware upload part1 [ 141.202069][ T2123] Registered device Abilis Systems DVB-Titan [ 142.405952][ T26] audit: type=1800 audit(1790722727.008:7): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.260" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 142.435530][ T5277] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 142.723225][ T5287] FAULT_INJECTION: forcing a failure. [ 142.723225][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 142.803277][ T5287] CPU: 1 PID: 5287 Comm: syz.2.263 Not tainted syzkaller #0 [ 142.810625][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.820692][ T5287] Call Trace: [ 142.823980][ T5287] [ 142.826920][ T5287] dump_stack_lvl+0x188/0x24e [ 142.831615][ T5287] ? show_regs_print_info+0x12/0x12 [ 142.836826][ T5287] ? load_image+0x410/0x410 [ 142.841345][ T5287] ? __might_sleep+0xd0/0xd0 [ 142.845986][ T5287] ? __lock_acquire+0x7c40/0x7c40 [ 142.851037][ T5287] should_fail_ex+0x390/0x4c0 [ 142.855729][ T5287] should_failslab+0x5/0x20 [ 142.860238][ T5287] slab_pre_alloc_hook+0x59/0x300 [ 142.865276][ T5287] ? qrtr_endpoint_register+0x7c/0x4e0 [ 142.870756][ T5287] __kmem_cache_alloc_node+0x4f/0x270 [ 142.876145][ T5287] ? qrtr_endpoint_register+0x7c/0x4e0 [ 142.881627][ T5287] kmalloc_trace+0x26/0xe0 [ 142.886065][ T5287] qrtr_endpoint_register+0x7c/0x4e0 [ 142.891375][ T5287] qrtr_tun_open+0x133/0x1b0 [ 142.895981][ T5287] ? qrtr_tun_poll+0xd0/0xd0 [ 142.900588][ T5287] misc_open+0x31f/0x390 [ 142.904859][ T5287] chrdev_open+0x585/0x5f0 [ 142.909304][ T5287] ? cd_forget+0x160/0x160 [ 142.913744][ T5287] ? fsnotify_perm+0x39b/0x550 [ 142.918530][ T5287] ? cd_forget+0x160/0x160 [ 142.922960][ T5287] do_dentry_open+0x7dd/0x10b0 [ 142.927750][ T5287] path_openat+0x2674/0x2f10 [ 142.932373][ T5287] ? verify_lock_unused+0x140/0x140 [ 142.937592][ T5287] ? do_filp_open+0x420/0x420 [ 142.942297][ T5287] do_filp_open+0x1ee/0x420 [ 142.946815][ T5287] ? vfs_tmpfile+0x470/0x470 [ 142.951439][ T5287] ? _raw_spin_unlock+0x24/0x40 [ 142.956309][ T5287] ? alloc_fd+0x590/0x640 [ 142.960670][ T5287] do_sys_openat2+0x14b/0x4f0 [ 142.965359][ T5287] ? do_sys_open+0xe0/0xe0 [ 142.969775][ T5287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.975755][ T5287] ? lock_chain_count+0x20/0x20 [ 142.980606][ T5287] __x64_sys_openat+0x135/0x160 [ 142.985461][ T5287] do_syscall_64+0x4c/0xa0 [ 142.989865][ T5287] ? clear_bhb_loop+0x60/0xb0 [ 142.994535][ T5287] ? clear_bhb_loop+0x60/0xb0 [ 142.999212][ T5287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.005109][ T5287] RIP: 0033:0x7f3090f9e159 [ 143.009522][ T5287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.029123][ T5287] RSP: 002b:00007f308f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.037534][ T5287] RAX: ffffffffffffffda RBX: 00007f3091225fa0 RCX: 00007f3090f9e159 [ 143.045500][ T5287] RDX: 00000000000a0140 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 143.053469][ T5287] RBP: 00007f309103506b R08: 0000000000000000 R09: 0000000000000000 [ 143.061431][ T5287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.069394][ T5287] R13: 00007f3091226038 R14: 00007f3091225fa0 R15: 00007ffce2d0c6b8 [ 143.077367][ T5287] [ 144.306510][ T5300] vxcan0: tx address claim with dest, not broadcast [ 145.392298][ T5315] Bluetooth: MGMT ver 1.22 [ 145.588246][ T26] audit: type=1800 audit(1790722730.188:8): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.273" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 145.616072][ T5319] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 146.901445][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.962398][ T126] libceph: connect (1)[c::]:6789 error -101 [ 146.991625][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 147.121100][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 147.133675][ T14] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 147.296767][ T14] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 147.506453][ T14] usb 2-1: config 4 has no interface number 0 [ 147.592142][ T14] usb 2-1: config 4 interface 9 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 147.722241][ T5337] ceph: No mds server is up or the cluster is laggy [ 147.750102][ T14] usb 2-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.777187][ T14] usb 2-1: config 4 interface 9 has no altsetting 0 [ 147.792656][ T126] libceph: connect (1)[c::]:6789 error -101 [ 147.798760][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 147.806930][ T14] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 147.846389][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.884422][ T14] usb 2-1: Product: syz [ 147.888631][ T14] usb 2-1: Manufacturer: syz [ 147.909923][ T14] usb 2-1: SerialNumber: syz [ 147.947793][ T126] usb 5-1: USB disconnect, device number 2 [ 148.007538][ T126] Unregistered device Abilis Systems DVB-Titan [ 148.025328][ T126] as10x_usb: device has been disconnected [ 148.053189][ T14] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 148.231999][ T4320] usb 2-1: USB disconnect, device number 3 [ 148.249853][ T4359] usb 2-1: Failed to submit usb control message: -71 [ 148.257017][ T4359] usb 2-1: unable to send the bmi data to the device: -71 [ 148.286505][ T4359] usb 2-1: unable to get target info from device [ 148.298236][ T4359] usb 2-1: could not get target info (-71) [ 148.315768][ T4359] usb 2-1: could not probe fw (-71) [ 148.335373][ T26] audit: type=1800 audit(1790722732.938:9): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.287" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 148.360714][ T5361] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 148.539575][ T5365] loop4: detected capacity change from 0 to 164 [ 148.775839][ T4379] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.241033][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.368628][ T5386] ceph: No mds server is up or the cluster is laggy [ 150.472920][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.515044][ T4318] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 150.668451][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.781339][ T4318] as10x_usb: device has been detected [ 150.822949][ T4318] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 150.889091][ T4318] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 150.911642][ T26] audit: type=1800 audit(1790722735.518:10): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 150.921055][ T5399] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 150.939513][ T4318] as10x_usb: error during firmware upload part1 [ 151.099483][ T4318] Registered device Abilis Systems DVB-Titan [ 151.278204][ T5407] FAULT_INJECTION: forcing a failure. [ 151.278204][ T5407] name failslab, interval 1, probability 0, space 0, times 0 [ 151.300755][ T5407] CPU: 0 PID: 5407 Comm: syz.3.297 Not tainted syzkaller #0 [ 151.308075][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.318135][ T5407] Call Trace: [ 151.321407][ T5407] [ 151.324328][ T5407] dump_stack_lvl+0x188/0x24e [ 151.329008][ T5407] ? show_regs_print_info+0x12/0x12 [ 151.334199][ T5407] ? load_image+0x410/0x410 [ 151.338696][ T5407] ? __lock_acquire+0x7c40/0x7c40 [ 151.343720][ T5407] should_fail_ex+0x390/0x4c0 [ 151.348398][ T5407] should_failslab+0x5/0x20 [ 151.352892][ T5407] slab_pre_alloc_hook+0x59/0x300 [ 151.357913][ T5407] ? do_dentry_open+0x7dd/0x10b0 [ 151.362841][ T5407] ? path_openat+0x2674/0x2f10 [ 151.367598][ T5407] ? do_filp_open+0x1ee/0x420 [ 151.372267][ T5407] kmem_cache_alloc_node+0x5a/0x310 [ 151.377458][ T5407] ? alloc_vmap_area+0x18e/0x18d0 [ 151.382479][ T5407] alloc_vmap_area+0x18e/0x18d0 [ 151.387335][ T5407] ? vm_map_ram+0xab0/0xab0 [ 151.391834][ T5407] ? rcu_is_watching+0x11/0xa0 [ 151.396599][ T5407] __get_vm_area_node+0x158/0x330 [ 151.401623][ T5407] __vmalloc_node_range+0x357/0x1380 [ 151.406900][ T5407] ? n_tty_open+0x19/0x150 [ 151.411313][ T5407] ? lockdep_hardirqs_on+0x94/0x140 [ 151.416517][ T5407] ? free_vm_area+0x50/0x50 [ 151.421015][ T5407] ? __might_sleep+0xd0/0xd0 [ 151.425598][ T5407] ? n_tty_open+0x19/0x150 [ 151.430010][ T5407] vzalloc+0x75/0x80 [ 151.433903][ T5407] ? n_tty_open+0x19/0x150 [ 151.438311][ T5407] n_tty_open+0x19/0x150 [ 151.442547][ T5407] tty_ldisc_setup+0xbf/0x250 [ 151.447244][ T5407] tty_init_dev+0x274/0x4c0 [ 151.451742][ T5407] ptmx_open+0xdb/0x2c0 [ 151.455890][ T5407] ? pty_start+0x140/0x140 [ 151.460303][ T5407] chrdev_open+0x585/0x5f0 [ 151.464716][ T5407] ? cd_forget+0x160/0x160 [ 151.469129][ T5407] ? fsnotify_perm+0x39b/0x550 [ 151.473891][ T5407] ? cd_forget+0x160/0x160 [ 151.478298][ T5407] do_dentry_open+0x7dd/0x10b0 [ 151.483068][ T5407] path_openat+0x2674/0x2f10 [ 151.487675][ T5407] ? verify_lock_unused+0x140/0x140 [ 151.492878][ T5407] ? do_sys_openat2+0xdd/0x4f0 [ 151.497647][ T5407] ? do_filp_open+0x420/0x420 [ 151.502328][ T5407] do_filp_open+0x1ee/0x420 [ 151.506831][ T5407] ? vfs_tmpfile+0x470/0x470 [ 151.511434][ T5407] ? _raw_spin_unlock+0x24/0x40 [ 151.516276][ T5407] ? alloc_fd+0x590/0x640 [ 151.520689][ T5407] do_sys_openat2+0x14b/0x4f0 [ 151.525363][ T5407] ? do_sys_open+0xe0/0xe0 [ 151.529772][ T5407] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.535750][ T5407] ? lock_chain_count+0x20/0x20 [ 151.540598][ T5407] __x64_sys_openat+0x135/0x160 [ 151.545447][ T5407] do_syscall_64+0x4c/0xa0 [ 151.549859][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 151.554530][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 151.559194][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.565085][ T5407] RIP: 0033:0x7fb28159e159 [ 151.569493][ T5407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.589092][ T5407] RSP: 002b:00007fb2823f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.597498][ T5407] RAX: ffffffffffffffda RBX: 00007fb281825fa0 RCX: 00007fb28159e159 [ 151.605461][ T5407] RDX: 000000000000001e RSI: 0000200000000040 RDI: ffffffffffffff9c [ 151.613423][ T5407] RBP: 00007fb28163506b R08: 0000000000000000 R09: 0000000000000000 [ 151.621394][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.629352][ T5407] R13: 00007fb281826038 R14: 00007fb281825fa0 R15: 00007fffb8cae228 [ 151.637328][ T5407] [ 151.660502][ T5407] syz.3.297: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 151.687379][ T5411] loop4: detected capacity change from 0 to 512 [ 151.701178][ T5407] CPU: 1 PID: 5407 Comm: syz.3.297 Not tainted syzkaller #0 [ 151.708510][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.718580][ T5407] Call Trace: [ 151.721863][ T5407] [ 151.724795][ T5407] dump_stack_lvl+0x188/0x24e [ 151.729485][ T5407] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 151.735994][ T5407] ? show_regs_print_info+0x12/0x12 [ 151.741189][ T5407] ? load_image+0x410/0x410 [ 151.745689][ T5407] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 151.752097][ T5407] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 151.758589][ T5407] warn_alloc+0x242/0x330 [ 151.762920][ T5407] ? slab_free_freelist_hook+0x133/0x1b0 [ 151.768551][ T5407] ? zone_watermark_ok_safe+0x270/0x270 [ 151.774092][ T5407] ? __get_vm_area_node+0x16d/0x330 [ 151.779287][ T5407] ? __get_vm_area_node+0x16d/0x330 [ 151.784483][ T5407] __vmalloc_node_range+0x37c/0x1380 [ 151.789765][ T5407] ? lockdep_hardirqs_on+0x94/0x140 [ 151.794979][ T5407] ? free_vm_area+0x50/0x50 [ 151.799474][ T5407] ? __might_sleep+0xd0/0xd0 [ 151.804060][ T5407] ? n_tty_open+0x19/0x150 [ 151.808489][ T5407] vzalloc+0x75/0x80 [ 151.812383][ T5407] ? n_tty_open+0x19/0x150 [ 151.816789][ T5407] n_tty_open+0x19/0x150 [ 151.821027][ T5407] tty_ldisc_setup+0xbf/0x250 [ 151.825705][ T5407] tty_init_dev+0x274/0x4c0 [ 151.830202][ T5407] ptmx_open+0xdb/0x2c0 [ 151.834348][ T5407] ? pty_start+0x140/0x140 [ 151.838774][ T5407] chrdev_open+0x585/0x5f0 [ 151.843188][ T5407] ? cd_forget+0x160/0x160 [ 151.847600][ T5407] ? fsnotify_perm+0x39b/0x550 [ 151.852358][ T5407] ? cd_forget+0x160/0x160 [ 151.856763][ T5407] do_dentry_open+0x7dd/0x10b0 [ 151.861534][ T5407] path_openat+0x2674/0x2f10 [ 151.866130][ T5407] ? verify_lock_unused+0x140/0x140 [ 151.871320][ T5407] ? do_sys_openat2+0xdd/0x4f0 [ 151.876081][ T5407] ? do_filp_open+0x420/0x420 [ 151.880764][ T5407] do_filp_open+0x1ee/0x420 [ 151.885262][ T5407] ? vfs_tmpfile+0x470/0x470 [ 151.889857][ T5407] ? _raw_spin_unlock+0x24/0x40 [ 151.894704][ T5407] ? alloc_fd+0x590/0x640 [ 151.899034][ T5407] do_sys_openat2+0x14b/0x4f0 [ 151.903705][ T5407] ? do_sys_open+0xe0/0xe0 [ 151.908116][ T5407] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.914108][ T5407] ? lock_chain_count+0x20/0x20 [ 151.918956][ T5407] __x64_sys_openat+0x135/0x160 [ 151.923804][ T5407] do_syscall_64+0x4c/0xa0 [ 151.928212][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 151.932880][ T5407] ? clear_bhb_loop+0x60/0xb0 [ 151.937548][ T5407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.943442][ T5407] RIP: 0033:0x7fb28159e159 [ 151.947849][ T5407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.967450][ T5407] RSP: 002b:00007fb2823f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.975853][ T5407] RAX: ffffffffffffffda RBX: 00007fb281825fa0 RCX: 00007fb28159e159 [ 151.983816][ T5407] RDX: 000000000000001e RSI: 0000200000000040 RDI: ffffffffffffff9c [ 151.991776][ T5407] RBP: 00007fb28163506b R08: 0000000000000000 R09: 0000000000000000 [ 151.999736][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.007698][ T5407] R13: 00007fb281826038 R14: 00007fb281825fa0 R15: 00007fffb8cae228 [ 152.015671][ T5407] [ 152.049552][ T5407] Mem-Info: [ 152.056944][ T5407] active_anon:12699 inactive_anon:0 isolated_anon:0 [ 152.056944][ T5407] active_file:20638 inactive_file:40124 isolated_file:0 [ 152.056944][ T5407] unevictable:768 dirty:160 writeback:0 [ 152.056944][ T5407] slab_reclaimable:21440 slab_unreclaimable:92841 [ 152.056944][ T5407] mapped:30211 shmem:7164 pagetables:829 [ 152.056944][ T5407] sec_pagetables:0 bounce:0 [ 152.056944][ T5407] kernel_misc_reclaimable:0 [ 152.056944][ T5407] free:1315182 free_pcp:8871 free_cma:0 [ 152.131964][ T5407] Node 0 active_anon:39196kB inactive_anon:0kB active_file:82552kB inactive_file:160300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120844kB dirty:632kB writeback:0kB shmem:15720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no [ 152.173558][ T5407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 152.212954][ T5407] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.224122][ T5411] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.303: missing EA_INODE flag [ 152.240930][ T5407] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 152.258421][ T5407] Node 0 DMA32 free:1354696kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:39296kB inactive_anon:0kB active_file:82552kB inactive_file:160300kB unevictable:1536kB writepending:632kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:23344kB local_pcp:17744kB free_cma:0kB [ 152.289231][ T5407] lowmem_reserve[]: 0 0 1 1 1 [ 152.294439][ T5407] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.321686][ T5407] lowmem_reserve[]: 0 0 0 0 0 [ 152.326545][ T5407] Node 1 Normal free:3898012kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16412kB local_pcp:12340kB free_cma:0kB [ 152.354943][ T5411] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.303: error while reading EA inode 2 err=-117 [ 152.356778][ T5407] lowmem_reserve[]: 0 0 0 0 0 [ 152.373880][ T5407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.386786][ T5407] Node 0 DMA32: 534*4kB (UM) 756*8kB (UM) 1093*16kB (UME) 630*32kB (UME) 511*64kB (UM) 64*128kB (UME) 19*256kB (UME) 19*512kB (ME) 14*1024kB (M) 3*2048kB (ME) 301*4096kB (UM) = 1354696kB [ 152.408254][ T5411] EXT4-fs (loop4): 1 orphan inode deleted [ 152.415139][ T5407] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.424274][ T5411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.481086][ T5407] Node 1 Normal: 227*4kB (UME) 52*8kB (UME) 25*16kB (UE) 65*32kB (UME) 17*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898012kB [ 152.596904][ T5407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.607112][ T5407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.616730][ T5407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.626774][ T5407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.658422][ T5407] 70654 total pagecache pages [ 152.671895][ T5407] 0 pages in swap cache [ 152.683842][ T5407] Free swap = 124440kB [ 152.688122][ T5407] Total swap = 124996kB [ 152.695656][ T5407] 2097051 pages RAM [ 152.699551][ T5407] 0 pages HighMem/MovableOnly [ 152.706586][ T5407] 415226 pages reserved [ 152.710830][ T5407] 0 pages cma reserved [ 152.718750][ T5407] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 152.785897][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 152.996894][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.197200][ T4320] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 153.214401][ T26] audit: type=1800 audit(1790722737.818:11): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.313" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 153.215202][ T5439] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 153.237652][ T4320] usb 1-1: config 2 has no interface number 0 [ 153.353983][ T4320] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 153.364681][ T4320] usb 1-1: config 2 interface 79 has no altsetting 0 [ 153.374131][ T4320] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 153.383312][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.401779][ T4320] usb 1-1: Product: syz [ 153.406014][ T4320] usb 1-1: Manufacturer: syz [ 153.410649][ T4320] usb 1-1: SerialNumber: syz [ 153.436409][ T5423] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 153.663002][ T4320] esd_usb 1-1:2.79: sending version message failed [ 153.677687][ T4320] esd_usb: probe of 1-1:2.79 failed with error -22 [ 153.866051][ T4320] usb 1-1: USB disconnect, device number 5 [ 154.137558][ T5456] loop4: detected capacity change from 0 to 512 [ 154.204447][ T5456] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.320: missing EA_INODE flag [ 154.221389][ T5456] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.320: error while reading EA inode 2 err=-117 [ 154.281402][ T5456] EXT4-fs (loop4): 1 orphan inode deleted [ 154.297529][ T5456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.058978][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 155.538295][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.588422][ T5480] IPVS: Scheduler module ip_vs_sip not found [ 155.727687][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.804717][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.815989][ T22] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 155.825378][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.845790][ T22] usb 4-1: config 0 descriptor?? [ 156.557217][ T22] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 156.575929][ T22] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 156.606476][ T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0004/input/input12 [ 156.676331][ T22] cm6533_jd 0003:0D8C:0022.0004: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 156.776632][ T22] usb 4-1: USB disconnect, device number 5 [ 157.077873][ T5506] fido_id[5506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 157.179570][ T14] usb 2-1: USB disconnect, device number 4 [ 157.254990][ T5511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.267230][ T14] Unregistered device Abilis Systems DVB-Titan [ 157.273978][ T14] as10x_usb: device has been disconnected [ 157.311066][ T5513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 157.438042][ T5511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.339'. [ 157.595380][ T5511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.971253][ T22] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 158.212515][ T22] usb 1-1: config 1 has an invalid interface number: 155 but max is 0 [ 158.233026][ T22] usb 1-1: config 1 has no interface number 0 [ 158.258528][ T22] usb 1-1: config 1 interface 155 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 158.281036][ T5521] IPVS: Scheduler module ip_vs_sip not found [ 158.289253][ T5511] bond0 (unregistering): Released all slaves [ 158.347999][ T22] usb 1-1: config 1 interface 155 has no altsetting 0 [ 158.413996][ T22] usb 1-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=40.66 [ 158.455398][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.649927][ T22] usb 1-1: Product: syz [ 158.672150][ T22] usb 1-1: Manufacturer: syz [ 158.700281][ T22] usb 1-1: SerialNumber: syz [ 158.744898][ T5525] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.968420][ T22] pegasus 1-1:1.155: Missing or invalid endpoints [ 159.000104][ T22] usb 1-1: USB disconnect, device number 6 [ 159.571127][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.721206][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.548193][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.559534][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.576535][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 160.586329][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.611289][ T7] usb 3-1: config 0 descriptor?? [ 160.773047][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.793759][ T126] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.816018][ T126] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 160.839730][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.858864][ T126] usb 4-1: Product: syz [ 160.869005][ T126] usb 4-1: Manufacturer: syz [ 160.879165][ T126] usb 4-1: SerialNumber: syz [ 160.903636][ T126] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 160.965333][ T126] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 160.965333][ T126] Please send a copy of this message to and [ 161.954804][ T7] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 161.981030][ T7] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 161.997524][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input13 [ 162.092251][ T7] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 162.168697][ T22] usb 3-1: USB disconnect, device number 3 [ 162.431854][ T126] ums-sddr09: probe of 4-1:1.0 failed with error -5 [ 162.452673][ T126] usb 4-1: USB disconnect, device number 6 [ 162.492828][ T5597] fido_id[5597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 163.967542][ T5618] usb usb8: usbfs: process 5618 (syz.2.376) did not claim interface 1 before use [ 164.088790][ T5625] ip_tables: iptables: counters copy to user failed while replacing table [ 164.178713][ T26] audit: type=1800 audit(1790722748.778:12): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 164.200061][ T5629] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 164.771343][ T2123] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.343759][ T2123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.358334][ T2123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.696224][ T2123] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 165.758311][ T2123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.948652][ T2123] usb 1-1: config 0 descriptor?? [ 166.163683][ T5664] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 166.177925][ T26] audit: type=1800 audit(1790722750.768:13): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 166.446024][ T2123] usbhid 1-1:0.0: can't add hid device: -71 [ 166.454114][ T2123] usbhid: probe of 1-1:0.0 failed with error -71 [ 166.471129][ T2123] usb 1-1: USB disconnect, device number 7 [ 167.235386][ T5688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.403'. [ 168.342727][ T26] audit: type=1800 audit(1790722752.948:14): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.409" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 168.366244][ T5705] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 171.580613][ T26] audit: type=1800 audit(1790722756.178:15): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.425" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 171.609986][ T5769] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 171.670977][ T2123] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.350995][ T2123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.401048][ T2123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.464324][ T2123] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 172.481968][ T2123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.647065][ T2123] usb 3-1: config 0 descriptor?? [ 174.044164][ T2123] usbhid 3-1:0.0: can't add hid device: -71 [ 174.044257][ T2123] usbhid: probe of 3-1:0.0 failed with error -71 [ 174.045928][ T2123] usb 3-1: USB disconnect, device number 4 [ 174.583277][ T5800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.554596][ T5811] netlink: 104 bytes leftover after parsing attributes in process `syz.1.438'. [ 175.731430][ T5813] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 175.771083][ T26] audit: type=1800 audit(1790722760.318:16): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.439" name="sysfs" dev="sda1" ino=2048 res=0 errno=0 [ 176.681539][ T5829] netlink: 72 bytes leftover after parsing attributes in process `syz.0.444'. [ 176.723082][ T5824] block device autoloading is deprecated and will be removed. [ 178.281532][ T5846] netlink: 104 bytes leftover after parsing attributes in process `syz.2.450'. [ 178.466759][ T5852] overlayfs: failed to resolve './file0': -2 [ 179.417869][ T4358] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 179.615447][ T4358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.748945][ T4358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.766862][ T5867] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.453'. [ 179.943443][ T4358] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 180.043700][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.089880][ T4358] usb 2-1: config 0 descriptor?? [ 180.613773][ T4358] usbhid 2-1:0.0: can't add hid device: -71 [ 180.619797][ T4358] usbhid: probe of 2-1:0.0 failed with error -71 [ 180.682996][ T4358] usb 2-1: USB disconnect, device number 5 [ 180.732914][ T5876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 180.757000][ T5871] loop4: detected capacity change from 0 to 40427 [ 180.772162][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 180.801491][ T5871] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 180.814089][ T5871] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 180.839288][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 180.842988][ T5871] F2FS-fs (loop4): Unrecognized mount option "errors=remount-ro" or missing value [ 181.084465][ T5883] loop4: detected capacity change from 0 to 128 [ 181.180393][ T5883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.201628][ T5883] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.287758][ T5883] syz.4.461 (pid 5883) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 181.455836][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 181.959021][ T5899] overlayfs: failed to resolve './file0': -2 [ 182.510988][ T5908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 182.548846][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'. [ 182.620988][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'. [ 182.645444][ T5906] syz.0.468 (5906) used greatest stack depth: 18128 bytes left [ 182.903849][ T5930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.031507][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.299846][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.358352][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.419690][ T4318] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 183.491201][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.581677][ T4318] usb 4-1: config 0 descriptor?? [ 184.003011][ T4318] usbhid 4-1:0.0: can't add hid device: -71 [ 184.009029][ T4318] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.043060][ T5939] loop4: detected capacity change from 0 to 512 [ 184.059881][ T4318] usb 4-1: USB disconnect, device number 7 [ 184.149825][ T5939] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.480: missing EA_INODE flag [ 184.197895][ T5939] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.480: error while reading EA inode 2 err=-117 [ 184.225661][ T5939] EXT4-fs (loop4): 1 orphan inode deleted [ 184.246619][ T5939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.949194][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 185.004754][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 185.016919][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 185.026830][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 185.312361][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 185.941029][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 185.941105][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 185.954587][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 185.960816][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 186.076036][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.490'. [ 186.551200][ T4318] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 186.893032][ T4318] usb 5-1: config 1 has an invalid interface number: 155 but max is 0 [ 187.293999][ T4318] usb 5-1: config 1 has no interface number 0 [ 187.300193][ T4318] usb 5-1: config 1 interface 155 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 187.420936][ T4318] usb 5-1: config 1 interface 155 has no altsetting 0 [ 187.575487][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.645294][ T4318] usb 5-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=40.66 [ 187.657866][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.671556][ T4318] usb 5-1: Product: syz [ 187.675751][ T4318] usb 5-1: Manufacturer: syz [ 187.688309][ T4318] usb 5-1: SerialNumber: syz [ 187.702695][ T5975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.793577][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.814305][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.837580][ T126] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 187.875818][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.905501][ T126] usb 1-1: config 0 descriptor?? [ 187.920196][ T4318] pegasus 5-1:1.155: Missing or invalid endpoints [ 187.938060][ T4318] usb 5-1: USB disconnect, device number 3 [ 188.139183][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 188.340478][ T126] usbhid 1-1:0.0: can't add hid device: -71 [ 188.347016][ T126] usbhid: probe of 1-1:0.0 failed with error -71 [ 188.356283][ T126] usb 1-1: USB disconnect, device number 8 [ 188.725546][ T6009] bond0: (slave bond_slave_1): Releasing backup interface [ 188.884327][ T22] libceph: connect (1)[c::]:6789 error -101 [ 188.966723][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 189.315812][ T22] libceph: connect (1)[c::]:6789 error -101 [ 189.338193][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 189.400540][ T6009] ceph: No mds server is up or the cluster is laggy [ 189.500475][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 189.772220][ T6026] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 189.891266][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.871061][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 190.882574][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.892961][ T22] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 190.902666][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.939729][ T22] as10x_usb: device has been detected [ 191.004590][ T22] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 191.122334][ T22] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 191.578217][ T22] as10x_usb: error during firmware upload part1 [ 191.640197][ T22] Registered device Abilis Systems DVB-Titan [ 192.341155][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.671774][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.683724][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.693872][ T22] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 192.838930][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.851476][ T22] usb 4-1: config 0 descriptor?? [ 194.034741][ T6071] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 194.114400][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.120742][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.243645][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 194.249675][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 194.300394][ T22] usb 4-1: USB disconnect, device number 8 [ 198.122698][ T4358] usb 1-1: USB disconnect, device number 9 [ 198.215159][ T4358] Unregistered device Abilis Systems DVB-Titan [ 198.244722][ T4358] as10x_usb: device has been disconnected [ 198.921115][ T4358] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.063337][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.562654][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.592440][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.605861][ T4358] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 199.615473][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.632063][ T4358] usb 1-1: config 0 descriptor?? [ 199.657002][ T22] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.754776][ T22] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.796295][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.887907][ T22] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 199.925136][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.103283][ T4358] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 200.115371][ T22] usb 2-1: config 0 descriptor?? [ 200.182856][ T4358] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 200.211289][ T4358] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input14 [ 200.274294][ T4358] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 200.401170][ T4358] usb 1-1: USB disconnect, device number 10 [ 200.660266][ T22] elan 0003:04F3:074D.0007: ignoring exceeding usage max [ 200.863650][ T6139] fido_id[6139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 201.007859][ T22] elan 0003:04F3:074D.0007: No inputs registered, leaving [ 201.016995][ T22] elan 0003:04F3:074D.0007: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 201.038331][ T22] usb 2-1: USB disconnect, device number 6 [ 201.095458][ T6141] overlayfs: failed to resolve './file0': -2 [ 201.243918][ T6146] fido_id[6146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 201.480944][ T4358] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.047768][ T4358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.107950][ T4358] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 202.573757][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.637245][ T4358] as10x_usb: device has been detected [ 202.649157][ T4358] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 203.100052][ T4358] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 203.162854][ T6175] ------------[ cut here ]------------ [ 203.168369][ T6175] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 203.175146][ T4358] as10x_usb: error during firmware upload part1 [ 203.187776][ T6175] WARNING: CPU: 1 PID: 6175 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 203.197240][ T6175] Modules linked in: [ 203.201197][ T6175] CPU: 1 PID: 6175 Comm: syz.0.543 Not tainted syzkaller #0 [ 203.208487][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.218633][ T6175] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 203.224031][ T6175] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 65 5b e5 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 e4 2b 12 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 61 c1 96 80 [ 203.244262][ T6175] RSP: 0018:ffffc9000ce07580 EFLAGS: 00010246 [ 203.250350][ T6175] RAX: 879c8354cca27e00 RBX: ffff888056b4e010 RCX: 0000000000080000 [ 203.258476][ T6175] RDX: ffffc9000ee33000 RSI: 000000000000248f RDI: 0000000000002490 [ 203.266501][ T6175] RBP: ffffc9000ce076e0 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 203.274524][ T6175] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 203.282538][ T6175] R13: 0000000000000000 R14: ffff888056b4e008 R15: 0000000000000000 [ 203.290519][ T6175] FS: 00007f5b169d66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 203.299501][ T6175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.306129][ T6175] CR2: 00007f5b169d5ff8 CR3: 000000001b2df000 CR4: 00000000003506e0 [ 203.314151][ T6175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.322157][ T6175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.330147][ T6175] Call Trace: [ 203.333467][ T6175] [ 203.336408][ T6175] ? __mutex_trylock_common+0x15c/0x260 [ 203.342007][ T6175] ? as102_stream_ctrl+0x23/0xb0 [ 203.346962][ T6175] ? trace_raw_output_contention_end+0xd0/0xd0 [ 203.353166][ T6175] ? mutex_lock_nested+0x10/0x10 [ 203.358125][ T6175] as102_stream_ctrl+0x23/0xb0 [ 203.362935][ T6175] dvb_frontend_open+0x52c/0x12d0 [ 203.367973][ T6175] ? down_read+0x1a8/0x2d0 [ 203.372434][ T6175] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 203.378255][ T6175] dvb_device_open+0x269/0x360 [ 203.383063][ T6175] chrdev_open+0x585/0x5f0 [ 203.387522][ T6175] ? cd_forget+0x160/0x160 [ 203.391985][ T6175] ? fsnotify_perm+0x39b/0x550 [ 203.396761][ T6175] ? cd_forget+0x160/0x160 [ 203.401222][ T6175] do_dentry_open+0x7dd/0x10b0 [ 203.406007][ T6175] path_openat+0x2674/0x2f10 [ 203.410614][ T6175] ? verify_lock_unused+0x140/0x140 [ 203.415859][ T6175] ? do_sys_openat2+0xdd/0x4f0 [ 203.420636][ T6175] ? do_filp_open+0x420/0x420 [ 203.425460][ T6175] do_filp_open+0x1ee/0x420 [ 203.429985][ T6175] ? vfs_tmpfile+0x470/0x470 [ 203.434633][ T6175] ? _raw_spin_unlock+0x24/0x40 [ 203.439496][ T6175] ? alloc_fd+0x590/0x640 [ 203.443876][ T6175] do_sys_openat2+0x14b/0x4f0 [ 203.448577][ T6175] ? do_sys_open+0xe0/0xe0 [ 203.453030][ T6175] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.459026][ T6175] ? lock_chain_count+0x20/0x20 [ 203.463926][ T6175] __x64_sys_openat+0x135/0x160 [ 203.468789][ T6175] do_syscall_64+0x4c/0xa0 [ 203.473238][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 203.477922][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 203.482631][ T6175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.488538][ T6175] RIP: 0033:0x7f5b15b5e98e [ 203.492980][ T6175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.512633][ T6175] RSP: 002b:00007f5b169d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.521198][ T6175] RAX: ffffffffffffffda RBX: 00007f5b169d66c0 RCX: 00007f5b15b5e98e [ 203.529196][ T6175] RDX: 0000000000000802 RSI: 00007f5b169d5c00 RDI: ffffffffffffff9c [ 203.537221][ T6175] RBP: 00007f5b169d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 203.545237][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 203.553241][ T6175] R13: 00007f5b15e26128 R14: 00007f5b15e26090 R15: 00007fffd03ef5e8 [ 203.561258][ T6175] [ 203.564290][ T6175] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.571566][ T6175] CPU: 1 PID: 6175 Comm: syz.0.543 Not tainted syzkaller #0 [ 203.578936][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.588993][ T6175] Call Trace: [ 203.592285][ T6175] [ 203.595218][ T6175] dump_stack_lvl+0x188/0x24e [ 203.599938][ T6175] ? memcpy+0x3c/0x60 [ 203.603933][ T6175] ? show_regs_print_info+0x12/0x12 [ 203.609143][ T6175] ? load_image+0x410/0x410 [ 203.613662][ T6175] panic+0x2d3/0x710 [ 203.617564][ T6175] ? bpf_jit_dump+0xd0/0xd0 [ 203.622077][ T6175] __warn+0x2f8/0x4f0 [ 203.626071][ T6175] ? __mutex_lock+0xa1c/0xae0 [ 203.630753][ T6175] ? __mutex_lock+0xa1c/0xae0 [ 203.635436][ T6175] report_bug+0x2ba/0x4f0 [ 203.639773][ T6175] ? __mutex_lock+0xa1c/0xae0 [ 203.644462][ T6175] handle_bug+0x3a/0x70 [ 203.648632][ T6175] exc_invalid_op+0x16/0x40 [ 203.653147][ T6175] asm_exc_invalid_op+0x16/0x20 [ 203.658003][ T6175] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 203.663283][ T6175] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 65 5b e5 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 e4 2b 12 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 61 c1 96 80 [ 203.682884][ T6175] RSP: 0018:ffffc9000ce07580 EFLAGS: 00010246 [ 203.688943][ T6175] RAX: 879c8354cca27e00 RBX: ffff888056b4e010 RCX: 0000000000080000 [ 203.696900][ T6175] RDX: ffffc9000ee33000 RSI: 000000000000248f RDI: 0000000000002490 [ 203.704858][ T6175] RBP: ffffc9000ce076e0 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 203.712816][ T6175] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 203.720774][ T6175] R13: 0000000000000000 R14: ffff888056b4e008 R15: 0000000000000000 [ 203.728739][ T6175] ? __mutex_trylock_common+0x15c/0x260 [ 203.734283][ T6175] ? as102_stream_ctrl+0x23/0xb0 [ 203.739221][ T6175] ? trace_raw_output_contention_end+0xd0/0xd0 [ 203.745387][ T6175] ? mutex_lock_nested+0x10/0x10 [ 203.750327][ T6175] as102_stream_ctrl+0x23/0xb0 [ 203.755084][ T6175] dvb_frontend_open+0x52c/0x12d0 [ 203.760100][ T6175] ? down_read+0x1a8/0x2d0 [ 203.764509][ T6175] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 203.770306][ T6175] dvb_device_open+0x269/0x360 [ 203.775058][ T6175] chrdev_open+0x585/0x5f0 [ 203.779462][ T6175] ? cd_forget+0x160/0x160 [ 203.783866][ T6175] ? fsnotify_perm+0x39b/0x550 [ 203.788625][ T6175] ? cd_forget+0x160/0x160 [ 203.793033][ T6175] do_dentry_open+0x7dd/0x10b0 [ 203.797812][ T6175] path_openat+0x2674/0x2f10 [ 203.802406][ T6175] ? verify_lock_unused+0x140/0x140 [ 203.807601][ T6175] ? do_sys_openat2+0xdd/0x4f0 [ 203.812365][ T6175] ? do_filp_open+0x420/0x420 [ 203.817037][ T6175] do_filp_open+0x1ee/0x420 [ 203.821530][ T6175] ? vfs_tmpfile+0x470/0x470 [ 203.826118][ T6175] ? _raw_spin_unlock+0x24/0x40 [ 203.830956][ T6175] ? alloc_fd+0x590/0x640 [ 203.835289][ T6175] do_sys_openat2+0x14b/0x4f0 [ 203.839975][ T6175] ? do_sys_open+0xe0/0xe0 [ 203.844382][ T6175] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 203.850439][ T6175] ? lock_chain_count+0x20/0x20 [ 203.855283][ T6175] __x64_sys_openat+0x135/0x160 [ 203.860143][ T6175] do_syscall_64+0x4c/0xa0 [ 203.864545][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 203.869205][ T6175] ? clear_bhb_loop+0x60/0xb0 [ 203.873874][ T6175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.879761][ T6175] RIP: 0033:0x7f5b15b5e98e [ 203.884163][ T6175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.903861][ T6175] RSP: 002b:00007f5b169d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.912260][ T6175] RAX: ffffffffffffffda RBX: 00007f5b169d66c0 RCX: 00007f5b15b5e98e [ 203.920217][ T6175] RDX: 0000000000000802 RSI: 00007f5b169d5c00 RDI: ffffffffffffff9c [ 203.928172][ T6175] RBP: 00007f5b169d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 203.936129][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 203.944100][ T6175] R13: 00007f5b15e26128 R14: 00007f5b15e26090 R15: 00007fffd03ef5e8 [ 203.952065][ T6175] [ 203.955327][ T6175] Kernel Offset: disabled [ 203.959644][ T6175] Rebooting in 86400 seconds..