last executing test programs: 37.215601534s ago: executing program 5 (id=1656): getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x0, 0x0, &(0x7f0000000180)) 36.870873209s ago: executing program 5 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x0, 0x0, 0xfffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x33}, 0x2, @in6=@dev, 0x0, 0x1, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 35.794082019s ago: executing program 5 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd040027000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112"], 0xfdef) 34.214155896s ago: executing program 5 (id=1667): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xc5, 0x1, 0xde, 0x40, 0x4bb, 0x901, 0x55ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6b, 0x3f, 0x1d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x0, 0x11, 0x2, {0x2, 0x5}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x95, "5e4f48a0ce169753890db0549b1c15e8b751307cae06679535ea71ae85fde60a590fdf83377ec62997ef1a607a386fd857cb3896f6a58053e97e303d03147d4c022e78ab8c35059a77e51730d237be6bf46d41ae488f03494f99eb29bdf9e3d44dfe43287f2c2f2de84330fb592db6b1bacee4e9a164ebdc9548bdbf42e774636c693ed26c399c37c22e437c3cfbe79bceb56b9721"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x877, 0x3, 0x5, 0x5a2, 0x8, 0x80000000, 0x3, 0x80, 0x3, 0x7}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xe2}, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 31.461738144s ago: executing program 5 (id=1671): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 30.846559051s ago: executing program 5 (id=1672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0) 19.885847872s ago: executing program 4 (id=1720): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x4004662b, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), 0x0, 0x0, 0x0) 19.829248981s ago: executing program 0 (id=1721): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020208d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10) 19.644751357s ago: executing program 4 (id=1723): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendto(r0, 0x0, 0x0, 0x4000001, &(0x7f0000000540)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80) 19.567074506s ago: executing program 0 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 19.252692953s ago: executing program 0 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r5 = inotify_init1(0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x7}) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000480)={0x0, 0x0}) r8 = syz_open_procfs(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 18.702935125s ago: executing program 2 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x0) 18.065999703s ago: executing program 0 (id=1728): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 17.936097557s ago: executing program 3 (id=1730): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 17.935399209s ago: executing program 4 (id=1731): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct, @func={0x7}]}}, 0x0, 0x32}, 0x20) 17.729234998s ago: executing program 0 (id=1732): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000240)=ANY=[@ANYBLOB="23833373c1c39d45f178ba82e710e00f097b6913513b690c0d5b88171429444f80ca813f0d116c232cd0f32f2a73b895ee2053d3ba52a25707a5ac5c725db8fa9f8f31e94bbbfb3d1de4f31e15aaea4b59fa0849187b3e90dbf7c9574a5ab7c7725952e1241523edf66be8e62e028ab4413906aa611a9aeddb23a2bb41c65c31"], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) 17.728458225s ago: executing program 2 (id=1733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f00000007c0)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) ioctl$TUNSETOFFLOAD(r2, 0x5760, 0x20000000) 16.788296868s ago: executing program 3 (id=1734): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x9}, 0x90) 16.750071613s ago: executing program 2 (id=1735): lseek(0xffffffffffffffff, 0x851, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002880)={&(0x7f0000002840)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 16.749540203s ago: executing program 4 (id=1736): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000020000000000400000000000890000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 15.596436035s ago: executing program 1 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 15.375008686s ago: executing program 2 (id=1738): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 15.374665805s ago: executing program 3 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r5 = inotify_init1(0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x7}) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000480)={0x0, 0x0}) r8 = syz_open_procfs(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x6612, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 15.374525242s ago: executing program 4 (id=1740): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001c0007ab5d73703a3e00020006000700036cbc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509cd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.301752507s ago: executing program 1 (id=1741): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000240)="f93c2ad8c3c25f75bf1c0d4503458d8b0a1afd331ef30e8066418cf63fa7d3e3f8d4c50eb635e803dae88fbd47ad4ce7aa6521fefd", 0x35) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_setup(0x6248, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 14.262812882s ago: executing program 3 (id=1742): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000032680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408882, 0x13) symlinkat(&(0x7f000001ff80)='./file0\x00', r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) get_robust_list(0x0, &(0x7f0000000280)=&(0x7f0000000240), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008009}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x9e91dd09233669f1}, 0x14}}, 0x0) 14.182921174s ago: executing program 4 (id=1743): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7}, @ext_cap={0x7}]}}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x4c, 0x99, 0x14, 0x40, 0xbda, 0x8179, 0x594f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 13.311504132s ago: executing program 0 (id=1744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.098334957s ago: executing program 3 (id=1745): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 12.747075985s ago: executing program 3 (id=1746): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mlockall(0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000004c0)="90cbdb3e87", 0x5) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount(0x0, &(0x7f0000000240)='./cgroup/file0\x00', 0x0, 0x2040008, 0x0) 12.299615081s ago: executing program 2 (id=1747): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x8913, 0x0) 11.62221043s ago: executing program 2 (id=1748): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0x0, r0, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) read$fb(r3, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r7, &(0x7f00000008c0)=[{&(0x7f00000005c0)="647c8c047faf63cc87546889ea31f7e20b96f11b3f9ad036cebdce8f6523b32a3c19862108a6b7d6093b8ca9863670b59f6f6fb6ec0d3aa5a36c97715b87d0bd6e15d61838", 0x45}, {&(0x7f0000000380)}, {&(0x7f00000006c0)="8d", 0x1}], 0x3) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000000)=0x8) write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/221], 0x138) 10.65229132s ago: executing program 1 (id=1749): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 10.247412201s ago: executing program 1 (id=1750): lseek(0xffffffffffffffff, 0x851, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002880)={&(0x7f0000002840)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 1.496103147s ago: executing program 1 (id=1754): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 0s ago: executing program 1 (id=1756): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000032680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408882, 0x13) symlinkat(&(0x7f000001ff80)='./file0\x00', r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) get_robust_list(0x0, &(0x7f0000000280)=&(0x7f0000000240), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008009}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x9e91dd09233669f1}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): -fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.850851][ T63] team0 (unregistering): Port device team_slave_1 removed [ 720.998277][ T63] team0 (unregistering): Port device team_slave_0 removed [ 721.395566][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 722.015325][T10226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.124300][ T63] team0 (unregistering): Port device team_slave_1 removed [ 723.228372][ T63] team0 (unregistering): Port device team_slave_0 removed [ 724.033626][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.043694][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.081973][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.129819][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.138145][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.164193][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.897696][ T63] team0 (unregistering): Port device team_slave_1 removed [ 724.978463][ T63] team0 (unregistering): Port device team_slave_0 removed [ 726.222415][ T5239] Bluetooth: hci2: command tx timeout [ 726.302910][T11324] loop1: detected capacity change from 0 to 256 [ 726.320810][T11324] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 726.918627][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.996766][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.143843][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1407'. [ 727.583183][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 727.621433][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.628718][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.691137][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.699348][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.189446][T11125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.305061][ T5233] Bluetooth: hci2: command tx timeout [ 728.418968][T11138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 728.472848][T11138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 728.498886][T11138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 728.533639][T11138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 728.881351][T11316] chnl_net:caif_netlink_parms(): no params data found [ 729.215018][T11105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 729.254449][T11105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 729.380229][T11105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 729.419241][T11105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 729.426456][ T5233] Bluetooth: hci1: command 0x1003 tx timeout [ 729.434044][ T5239] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 729.611770][T11125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.753636][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.771279][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.814965][T11316] bridge_slave_0: entered allmulticast mode [ 729.834922][T11316] bridge_slave_0: entered promiscuous mode [ 729.864622][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.880005][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.888452][T11316] bridge_slave_1: entered allmulticast mode [ 729.914564][T11316] bridge_slave_1: entered promiscuous mode [ 730.277061][T11316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.341959][T11316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.372354][ T5239] Bluetooth: hci2: command tx timeout [ 730.713426][T11316] team0: Port device team_slave_0 added [ 730.816108][T11316] team0: Port device team_slave_1 added [ 731.155953][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.423594][T11355] loop1: detected capacity change from 0 to 40427 [ 731.458677][T11316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.460807][T11355] F2FS-fs (loop1): Found nat_bits in checkpoint [ 731.469522][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.503426][T11316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.865655][T11316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.936455][T11316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.043681][T11355] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 732.063030][T11316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.317956][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.462954][ T5239] Bluetooth: hci2: command tx timeout [ 732.531574][T11316] hsr_slave_0: entered promiscuous mode [ 732.582309][T11316] hsr_slave_1: entered promiscuous mode [ 732.625048][T11316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.642308][T11316] Cannot create hsr debugfs directory [ 732.715168][T11105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.846989][T11125] veth0_vlan: entered promiscuous mode [ 732.857375][T11381] loop5: detected capacity change from 0 to 256 [ 732.881425][T11381] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 732.903625][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.910960][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.934972][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.942236][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.140630][T11105] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.195651][T11125] veth1_vlan: entered promiscuous mode [ 733.338984][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.346392][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.365840][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.373327][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.485986][T11385] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1416'. [ 734.056384][T11105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.091903][T11105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.235403][T11138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.247114][T11138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.295809][T11388] loop5: detected capacity change from 0 to 512 [ 734.355811][T11388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.371813][T11388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.783259][ T29] audit: type=1326 audit(1725333009.974:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b11179eb9 code=0x7ffc0000 [ 734.844735][ T63] bridge_slave_1: left allmulticast mode [ 734.850491][ T63] bridge_slave_1: left promiscuous mode [ 734.858272][ T29] audit: type=1326 audit(1725333009.974:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b11179eb9 code=0x7ffc0000 [ 734.861017][T10220] syz-executor: attempt to access beyond end of device [ 734.861017][T10220] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 734.900946][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.922683][ T29] audit: type=1326 audit(1725333009.974:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b11179eb9 code=0x7ffc0000 [ 734.926650][T10220] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 734.947224][ T63] bridge_slave_0: left allmulticast mode [ 734.966670][ T63] bridge_slave_0: left promiscuous mode [ 734.976671][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.989807][ T29] audit: type=1326 audit(1725333009.974:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.5.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b11179eb9 code=0x7ffc0000 [ 736.009662][T11404] loop1: detected capacity change from 0 to 512 [ 736.028225][T11404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 736.083822][T11404] EXT4-fs (loop1): 1 truncate cleaned up [ 736.089187][T11407] loop5: detected capacity change from 0 to 1024 [ 736.091047][T11404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.097015][T11407] EXT4-fs: Ignoring removed oldalloc option [ 736.141410][T11407] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 736.179861][T11407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.435395][ T29] audit: type=1804 audit(1725333011.634:456): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1422" name="/newroot/83/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 736.627368][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.656130][T10226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.692872][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.730371][ T63] bond0 (unregistering): Released all slaves [ 736.952355][ T29] audit: type=1804 audit(1725333011.734:457): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1420" name="/newroot/89/bus/bus" dev="loop1" ino=19 res=1 errno=0 [ 737.008013][ T63] hsr_slave_0: left promiscuous mode [ 737.053293][ T63] hsr_slave_1: left promiscuous mode [ 737.076349][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.119133][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.308402][T10220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.450213][T11415] loop1: detected capacity change from 0 to 2048 [ 737.494977][T11415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.684847][T10089] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 737.734367][T10089] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 737.771561][T10089] EXT4-fs (loop1): This should not happen!! Data will be lost [ 737.771561][T10089] [ 737.781899][T10089] EXT4-fs (loop1): Total free blocks count 0 [ 737.792246][T10089] EXT4-fs (loop1): Free/Dirty block details [ 737.802370][T10089] EXT4-fs (loop1): free_blocks=2415919104 [ 737.808121][T10089] EXT4-fs (loop1): dirty_blocks=16 [ 737.836931][T10089] EXT4-fs (loop1): Block reservation details [ 737.846587][T10089] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 737.876811][T10220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.197536][ T63] team0 (unregistering): Port device team_slave_1 removed [ 738.416070][T11425] loop5: detected capacity change from 0 to 512 [ 738.533212][T11427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 738.745372][T11425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.856032][ T63] team0 (unregistering): Port device team_slave_0 removed [ 738.955583][T11425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.937710][T11431] warning: `syz.1.1428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 740.028509][T11125] veth0_macvtap: entered promiscuous mode [ 740.094911][T11440] netlink: 'syz.1.1432': attribute type 17 has an invalid length. [ 740.127275][T11125] veth1_macvtap: entered promiscuous mode [ 740.178166][T11105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.313614][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.324391][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.334666][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.433414][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.488964][T11125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.531569][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.660699][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.777381][T11452] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1435'. [ 741.047131][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.222294][T11125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.261049][T11125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.294589][T11125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.404652][T11125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.454072][T11125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.463105][T11125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.472469][T11125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.515494][T11454] loop1: detected capacity change from 0 to 1024 [ 741.599117][T11456] fuse: Bad value for 'fd' [ 741.880396][T11138] veth0_vlan: entered promiscuous mode [ 741.923935][T11105] veth0_vlan: entered promiscuous mode [ 742.051420][T11138] veth1_vlan: entered promiscuous mode [ 742.065433][T11316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.091636][T11316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.158282][T11316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.203482][T11105] veth1_vlan: entered promiscuous mode [ 742.224314][T11316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.420113][ T9397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.479082][T11138] veth0_macvtap: entered promiscuous mode [ 742.485212][ T9397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.511101][T11138] veth1_macvtap: entered promiscuous mode [ 742.588649][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.629040][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'. [ 742.639971][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.643620][T11464] fuse: Bad value for 'fd' [ 742.671862][T11105] veth0_macvtap: entered promiscuous mode [ 742.726151][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.738119][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.758981][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.769716][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.772464][T11467] loop5: detected capacity change from 0 to 1024 [ 742.780468][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.806665][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.838208][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.842784][T11467] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 742.861454][T11105] veth1_macvtap: entered promiscuous mode [ 742.892360][T11468] netlink: 'syz.1.1443': attribute type 17 has an invalid length. [ 742.941778][T11467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.966069][T11473] loop4: detected capacity change from 0 to 512 [ 742.998275][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.007479][T11473] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 743.025113][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.040189][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.065258][T11473] EXT4-fs (loop4): 1 truncate cleaned up [ 743.067702][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.082441][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.093372][T11473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.106022][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.119281][T11467] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 743.138432][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.439961][T11138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.822597][ T29] audit: type=1804 audit(1725333018.874:458): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1356" name="/newroot/0/bus/bus" dev="loop4" ino=19 res=1 errno=0 [ 744.237127][T11138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.247501][T11138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.256651][T11138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.270845][T11125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.385130][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.436835][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.478113][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.508657][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.528903][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.548451][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.558461][T11486] loop1: detected capacity change from 0 to 128 [ 744.564862][T11488] fuse: Bad value for 'fd' [ 744.580556][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.597235][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.614262][T10226] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.625721][T11105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.670522][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.684518][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.698966][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.714669][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.726687][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.741752][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.756539][T11105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.774566][T11105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.793835][T11105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.836066][T11105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.854470][T11105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.876810][T11105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.888299][T11492] loop5: detected capacity change from 0 to 1024 [ 744.897898][T11105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.114975][ T5294] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 745.304609][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 745.321157][ T5294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.325822][T11316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.339667][ T5294] usb 2-1: config 0 has no interfaces? [ 745.367713][ T5294] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 745.379722][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.417632][ T5294] usb 2-1: Product: syz [ 745.427689][ T5294] usb 2-1: Manufacturer: syz [ 745.451831][ T5294] usb 2-1: SerialNumber: syz [ 745.481757][ T5294] usb 2-1: config 0 descriptor?? [ 745.512464][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.528419][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.549768][T11316] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.614246][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.615150][T10089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.621466][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.648610][T10089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.691841][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.699127][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.879252][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 745.927175][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.942966][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.957339][ T9397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.998168][ T9397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.602514][T11515] loop3: detected capacity change from 0 to 128 [ 746.845723][T11316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.863195][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.869821][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.888358][T11515] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 746.958629][T11515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.094407][T11316] veth0_vlan: entered promiscuous mode [ 747.266042][T11316] veth1_vlan: entered promiscuous mode [ 747.502007][T11316] veth0_macvtap: entered promiscuous mode [ 747.569358][T11316] veth1_macvtap: entered promiscuous mode [ 747.710403][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.760678][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.772062][T11509] loop2: detected capacity change from 0 to 32768 [ 747.788787][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.802019][T11509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1206 (11509) [ 747.819499][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.845019][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.859063][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.869263][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.879984][T11509] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.891973][T11509] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 747.903622][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.923415][T11509] BTRFS info (device loop2): using free-space-tree [ 747.930220][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.949358][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.960344][ T5294] usb 2-1: USB disconnect, device number 13 [ 747.965433][T11316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.987650][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 760.988587][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 761.016954][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 761.227086][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.302793][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 761.409612][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.429770][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.465380][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 761.466359][T11509] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 761.476109][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.582329][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.625307][T11509] BTRFS error (device loop2): open_ctree failed [ 761.672339][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.713348][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.757307][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.812899][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.853408][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.269068][T11316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.976194][T11316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.042330][T11316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.051225][T11316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.155703][T11316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.354684][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.367993][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.376074][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.391569][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.399156][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.410336][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.410339][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.441964][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 763.450927][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.458764][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 763.470526][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 763.478547][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.884361][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 763.907307][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.919745][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 763.937070][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 763.961313][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 764.024050][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 764.034394][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.089647][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.134261][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.144369][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.163335][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.176305][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 764.184046][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.291385][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 764.304802][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 764.318451][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 764.396531][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 764.461941][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 764.469946][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 764.763016][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.985509][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.154295][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.404375][T10089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.412940][T10089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.573212][ T5239] Bluetooth: hci1: command tx timeout [ 765.574140][ T54] Bluetooth: hci0: command tx timeout [ 765.771429][T10211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.796625][T10211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.798766][ T12] bridge_slave_1: left allmulticast mode [ 765.809876][ T12] bridge_slave_1: left promiscuous mode [ 765.816661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.827284][ T12] bridge_slave_0: left allmulticast mode [ 765.833291][ T12] bridge_slave_0: left promiscuous mode [ 765.846971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.141903][ T54] Bluetooth: hci4: command tx timeout [ 766.292682][ T54] Bluetooth: hci3: command tx timeout [ 766.569349][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.584273][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.597233][ T12] bond0 (unregistering): Released all slaves [ 766.612767][ T54] Bluetooth: hci6: command tx timeout [ 766.809367][T11553] chnl_net:caif_netlink_parms(): no params data found [ 766.983103][T11575] loop0: detected capacity change from 0 to 64 [ 767.042313][T11552] chnl_net:caif_netlink_parms(): no params data found [ 767.139061][T11556] chnl_net:caif_netlink_parms(): no params data found [ 767.377425][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.392387][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.399757][T11553] bridge_slave_0: entered allmulticast mode [ 767.419363][T11553] bridge_slave_0: entered promiscuous mode [ 767.521064][ T12] hsr_slave_0: left promiscuous mode [ 767.552464][ T12] hsr_slave_1: left promiscuous mode [ 767.568913][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.589365][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.610896][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.628183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.652601][ T54] Bluetooth: hci1: command tx timeout [ 767.658186][ T54] Bluetooth: hci0: command tx timeout [ 767.746133][ T12] veth1_macvtap: left promiscuous mode [ 767.753502][ T12] veth0_macvtap: left promiscuous mode [ 767.760147][ T12] veth1_vlan: left promiscuous mode [ 767.766457][ T12] veth0_vlan: left promiscuous mode [ 768.213529][ T5239] Bluetooth: hci4: command tx timeout [ 768.394543][ T5239] Bluetooth: hci3: command tx timeout [ 768.694305][ T5239] Bluetooth: hci6: command tx timeout [ 769.269163][ T12] team0 (unregistering): Port device team_slave_1 removed [ 769.370422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 769.738885][ T5239] Bluetooth: hci0: command tx timeout [ 769.742804][ T54] Bluetooth: hci1: command tx timeout [ 770.207754][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.222374][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.229647][T11553] bridge_slave_1: entered allmulticast mode [ 770.236986][T11553] bridge_slave_1: entered promiscuous mode [ 770.265340][T11557] chnl_net:caif_netlink_parms(): no params data found [ 770.292273][ T54] Bluetooth: hci4: command tx timeout [ 770.311224][T11560] chnl_net:caif_netlink_parms(): no params data found [ 770.384749][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.413635][T11603] fuse: Bad value for 'fd' [ 770.453807][ T54] Bluetooth: hci3: command tx timeout [ 770.477491][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.646310][T11607] loop0: detected capacity change from 0 to 1024 [ 770.678130][T11607] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 770.772432][ T54] Bluetooth: hci6: command tx timeout [ 770.793848][T11607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.817934][T11553] team0: Port device team_slave_0 added [ 770.870288][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.879708][T11607] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 770.891260][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.899562][T11552] bridge_slave_0: entered allmulticast mode [ 770.907634][T11552] bridge_slave_0: entered promiscuous mode [ 770.917756][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.925410][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.934584][T11552] bridge_slave_1: entered allmulticast mode [ 770.941917][T11552] bridge_slave_1: entered promiscuous mode [ 771.021901][T11553] team0: Port device team_slave_1 added [ 771.240393][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.270946][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.312761][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.336897][T11316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.381748][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.399501][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.407223][T11556] bridge_slave_0: entered allmulticast mode [ 771.417061][T11556] bridge_slave_0: entered promiscuous mode [ 771.427957][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.435727][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.449108][T11556] bridge_slave_1: entered allmulticast mode [ 771.456624][T11556] bridge_slave_1: entered promiscuous mode [ 771.478473][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.493876][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.531049][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.539235][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.565798][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.589146][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.596971][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.604255][T11557] bridge_slave_0: entered allmulticast mode [ 771.611539][T11557] bridge_slave_0: entered promiscuous mode [ 771.721668][T11622] loop0: detected capacity change from 0 to 128 [ 771.730029][T11622] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 771.731677][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.759476][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.794226][T11560] bridge_slave_0: entered allmulticast mode [ 771.801952][T11560] bridge_slave_0: entered promiscuous mode [ 771.831152][ T5239] Bluetooth: hci0: command tx timeout [ 771.838713][ T54] Bluetooth: hci1: command tx timeout [ 771.879522][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.889187][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.897287][T11557] bridge_slave_1: entered allmulticast mode [ 771.905257][T11557] bridge_slave_1: entered promiscuous mode [ 771.965396][T11556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.043650][T11552] team0: Port device team_slave_0 added [ 772.050455][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.058688][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.066219][T11560] bridge_slave_1: entered allmulticast mode [ 772.074148][T11560] bridge_slave_1: entered promiscuous mode [ 772.190409][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.228563][T11556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.283463][T11552] team0: Port device team_slave_1 added [ 772.382281][ T54] Bluetooth: hci4: command tx timeout [ 772.532443][ T54] Bluetooth: hci3: command tx timeout [ 772.574896][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.692152][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.699719][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.752222][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.767632][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.774875][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.801308][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.831835][T11560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.862152][ T54] Bluetooth: hci6: command tx timeout [ 772.869648][T11553] hsr_slave_0: entered promiscuous mode [ 772.891653][T11553] hsr_slave_1: entered promiscuous mode [ 772.974175][ T9397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.123693][T11556] team0: Port device team_slave_0 added [ 773.136015][T11556] team0: Port device team_slave_1 added [ 773.168836][T11560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.276650][ T9397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.311596][T11557] team0: Port device team_slave_0 added [ 773.458673][T11557] team0: Port device team_slave_1 added [ 773.595060][T11552] hsr_slave_0: entered promiscuous mode [ 773.612588][T11552] hsr_slave_1: entered promiscuous mode [ 773.646894][T11552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.660563][T11552] Cannot create hsr debugfs directory [ 774.139898][T11560] team0: Port device team_slave_0 added [ 774.304733][ T9397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.365953][T11556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.377273][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.403774][T11556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.422165][T11556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.429249][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.469180][T11556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.523892][T11560] team0: Port device team_slave_1 added [ 774.537247][T11557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.547475][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.576440][T11557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.625575][ T9397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.856584][T11557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.882755][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.909925][T11557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.979513][T11556] hsr_slave_0: entered promiscuous mode [ 775.005893][T11556] hsr_slave_1: entered promiscuous mode [ 775.018599][T11556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.026825][T11556] Cannot create hsr debugfs directory [ 775.040930][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 775.043759][T11560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.060388][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.078814][T11644] af_packet: tpacket_rcv: packet too big, clamped from 22860 to 3952. macoff=96 [ 775.099131][T11560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.210945][T11560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.221519][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.248962][T11560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.340682][T11647] loop0: detected capacity change from 0 to 128 [ 775.370012][T11647] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 775.608099][T11557] hsr_slave_0: entered promiscuous mode [ 775.631566][T11557] hsr_slave_1: entered promiscuous mode [ 775.641725][T11557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.658212][T11557] Cannot create hsr debugfs directory [ 776.064581][T11560] hsr_slave_0: entered promiscuous mode [ 776.093494][T11560] hsr_slave_1: entered promiscuous mode [ 776.111681][T11560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.121745][T11560] Cannot create hsr debugfs directory [ 776.341043][ T9397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.550910][T11552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.647256][ T9397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.789137][T11552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.858056][ T9397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.947067][T11552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.055333][ T9397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.212036][T11552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.079985][ T9397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.169599][T11553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 778.275704][ T9397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.318123][T11553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 778.368999][T11553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 778.456188][ T9397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.515539][T11553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 778.598383][ T9397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.914040][ T9397] bridge_slave_1: left allmulticast mode [ 778.919766][ T9397] bridge_slave_1: left promiscuous mode [ 778.925966][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.936384][ T9397] bridge_slave_0: left allmulticast mode [ 778.947728][ T9397] bridge_slave_0: left promiscuous mode [ 778.961772][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.976912][ T9397] bridge_slave_1: left allmulticast mode [ 778.983930][ T9397] bridge_slave_1: left promiscuous mode [ 778.989712][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.015703][ T9397] bridge_slave_0: left allmulticast mode [ 779.021404][ T9397] bridge_slave_0: left promiscuous mode [ 779.039724][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.060926][ T9397] bridge_slave_1: left allmulticast mode [ 779.082351][ T9397] bridge_slave_1: left promiscuous mode [ 779.088229][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.093860][T11672] loop0: detected capacity change from 0 to 128 [ 779.108024][ T9397] bridge_slave_0: left allmulticast mode [ 779.111946][T11672] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 779.113911][ T9397] bridge_slave_0: left promiscuous mode [ 779.128017][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.140026][ T9397] bridge_slave_1: left allmulticast mode [ 779.147091][ T9397] bridge_slave_1: left promiscuous mode [ 779.154863][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.164989][ T9397] bridge_slave_0: left allmulticast mode [ 779.170660][ T9397] bridge_slave_0: left promiscuous mode [ 779.177934][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.640326][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.654754][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.667335][ T9397] bond0 (unregistering): Released all slaves [ 781.865774][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.879932][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.893712][ T9397] bond0 (unregistering): Released all slaves [ 782.138785][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.151325][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.168357][ T9397] bond0 (unregistering): Released all slaves [ 782.476706][ T9397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.491493][ T9397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.510117][ T9397] bond0 (unregistering): Released all slaves [ 782.666483][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.829738][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.900680][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.908246][T10089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.958910][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.966223][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.750634][T11552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.794635][T11552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.810339][T11552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.833137][T11552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 784.972016][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.443707][T11556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.515174][T11556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.558438][T11556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.592597][T11556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.704295][ T9397] hsr_slave_0: left promiscuous mode [ 785.723229][ T9397] hsr_slave_1: left promiscuous mode [ 785.729905][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.743658][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.764778][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.773594][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.798703][ T9397] hsr_slave_0: left promiscuous mode [ 785.813349][ T9397] hsr_slave_1: left promiscuous mode [ 785.823063][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.830561][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.839971][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.862486][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.875972][ T9397] hsr_slave_0: left promiscuous mode [ 785.893461][ T9397] hsr_slave_1: left promiscuous mode [ 785.903718][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.923049][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.931499][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.942317][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.968197][ T9397] hsr_slave_0: left promiscuous mode [ 785.984491][ T9397] hsr_slave_1: left promiscuous mode [ 785.993582][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.001180][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.023845][ T9397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.031379][ T9397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.249418][ T9397] veth1_macvtap: left promiscuous mode [ 786.255136][ T9397] veth0_macvtap: left promiscuous mode [ 786.260862][ T9397] veth1_vlan: left promiscuous mode [ 786.266449][ T9397] veth0_vlan: left promiscuous mode [ 786.292601][ T9397] veth1_macvtap: left promiscuous mode [ 786.298589][ T9397] veth0_macvtap: left promiscuous mode [ 786.312373][ T9397] veth1_vlan: left promiscuous mode [ 786.317789][ T9397] veth0_vlan: left promiscuous mode [ 786.337827][ T9397] veth1_macvtap: left promiscuous mode [ 786.352404][ T9397] veth0_macvtap: left promiscuous mode [ 786.358294][ T9397] veth1_vlan: left promiscuous mode [ 786.364814][ T9397] veth0_vlan: left promiscuous mode [ 786.374492][ T9397] veth1_macvtap: left promiscuous mode [ 786.380096][ T9397] veth0_macvtap: left promiscuous mode [ 786.386085][ T9397] veth1_vlan: left promiscuous mode [ 786.391469][ T9397] veth0_vlan: left promiscuous mode [ 787.902273][ T2631] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 788.120311][ T2631] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 788.128940][ T2631] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.150420][ T2631] usb 1-1: config 0 has no interface number 0 [ 788.160316][ T2631] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 788.169606][ T2631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.177730][ T2631] usb 1-1: Product: syz [ 788.182183][ T2631] usb 1-1: Manufacturer: syz [ 788.198213][ T2631] usb 1-1: SerialNumber: syz [ 788.222850][ T2631] usb 1-1: config 0 descriptor?? [ 788.241290][ T2631] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 788.251313][ T2631] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 788.277411][ T9397] team0 (unregistering): Port device team_slave_1 removed [ 788.361684][ T9397] team0 (unregistering): Port device team_slave_0 removed [ 789.790476][ T9397] team0 (unregistering): Port device team_slave_1 removed [ 789.865898][ T9397] team0 (unregistering): Port device team_slave_0 removed [ 791.209550][ T9397] team0 (unregistering): Port device team_slave_1 removed [ 791.270418][ T9397] team0 (unregistering): Port device team_slave_0 removed [ 792.736179][ T9397] team0 (unregistering): Port device team_slave_1 removed [ 792.816328][ T9397] team0 (unregistering): Port device team_slave_0 removed [ 793.499402][ T25] usb 1-1: USB disconnect, device number 8 [ 793.716026][T11553] veth0_vlan: entered promiscuous mode [ 793.741963][T11557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 793.815519][T11557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 793.834109][T11557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 793.890118][T11552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.916707][T11553] veth1_vlan: entered promiscuous mode [ 793.996798][T11557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 794.118203][T11560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 794.178154][T11560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.209550][T11560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.275248][T11560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 794.406902][T11552] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.469123][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.476404][T10089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.487121][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.494824][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.552896][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.573994][T11553] veth0_macvtap: entered promiscuous mode [ 794.597651][T11553] veth1_macvtap: entered promiscuous mode [ 794.763460][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.931832][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.939150][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.964634][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.971901][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.006339][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.019918][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.057713][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.074017][T11701] loop0: detected capacity change from 0 to 128 [ 795.081252][T11701] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 795.110613][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.124577][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.140332][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.152918][T11553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.161783][T11553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.171040][T11553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.190990][T11553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.329659][T11556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 795.358975][T11556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.459373][T11557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.738180][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.940820][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.948180][T10089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.975965][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.002333][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.086413][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.094264][T10089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.204443][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.250175][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.283393][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.364447][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.467957][T11560] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.479589][T11713] loop1: detected capacity change from 0 to 128 [ 796.490635][T11713] EXT4-fs: Ignoring removed i_version option [ 796.497890][T11713] EXT4-fs: Ignoring removed orlov option [ 796.557457][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.590399][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.597633][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.607370][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.614519][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.623931][T11713] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 796.658670][T11713] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 796.860025][T11552] veth0_vlan: entered promiscuous mode [ 796.970674][T11552] veth1_vlan: entered promiscuous mode [ 797.101771][T11556] veth0_vlan: entered promiscuous mode [ 797.169399][T11552] veth0_macvtap: entered promiscuous mode [ 797.211536][T11556] veth1_vlan: entered promiscuous mode [ 797.248157][T11552] veth1_macvtap: entered promiscuous mode [ 797.362011][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.391049][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.433384][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.462365][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.492752][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.534451][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.598624][T11556] veth0_macvtap: entered promiscuous mode [ 797.626296][T11556] veth1_macvtap: entered promiscuous mode [ 797.665999][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.685268][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.696322][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.713587][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.731138][T11552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.748667][T11731] sit0: entered promiscuous mode [ 797.756463][T11731] sit0: entered allmulticast mode [ 797.787239][T11728] sit0: left promiscuous mode [ 797.825008][T11552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.841717][T11552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.852637][T11552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.861436][T11552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.940728][T11560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.009488][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.045910][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.083484][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.116040][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.146904][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.157565][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.171794][T11556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.218858][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.230718][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.248053][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.260081][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.275479][T11556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.289363][T11556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.308387][T11556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.380985][T11556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.390454][T11556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.409045][T11556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.421489][T11556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.622869][T11557] veth0_vlan: entered promiscuous mode [ 798.631078][T10211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.650545][T10211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.847110][ T9397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.862448][ T9397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.865234][T11557] veth1_vlan: entered promiscuous mode [ 798.905266][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.946294][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.990281][T11560] veth0_vlan: entered promiscuous mode [ 799.153953][ T9397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.161957][ T9397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.214734][T11560] veth1_vlan: entered promiscuous mode [ 799.348889][T11557] veth0_macvtap: entered promiscuous mode [ 799.686409][T11557] veth1_macvtap: entered promiscuous mode [ 800.165511][T11553] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 800.185079][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.232286][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.252119][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.309633][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.335305][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.346460][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.358476][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.369305][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.391623][T11557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.408658][T11560] veth0_macvtap: entered promiscuous mode [ 800.430885][T11756] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 800.459054][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.490406][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.513314][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.531258][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.557631][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.582999][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.600201][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.611576][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.637721][T11557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.731680][T11756] lo: entered allmulticast mode [ 800.761362][T11557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.781472][T11557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.790852][T11557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.807429][T11557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.881567][T11560] veth1_macvtap: entered promiscuous mode [ 801.150637][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.188290][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.211765][T11780] loop1: detected capacity change from 0 to 128 [ 801.220578][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.236971][T11780] EXT4-fs: Ignoring removed i_version option [ 801.247605][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.269198][T11780] EXT4-fs: Ignoring removed orlov option [ 801.285285][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.300979][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.302647][T11780] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 801.328622][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.343452][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.344264][T11780] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 801.394750][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.431180][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.450246][T11560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.602555][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.638460][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.659254][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.676073][T11789] loop2: detected capacity change from 0 to 128 [ 801.683704][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.704950][T11789] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 801.713282][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.744957][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.990717][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.048717][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.059930][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.082128][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.148309][T11560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.219497][T11560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.241581][T11560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.262245][T11560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.271570][T11560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.695226][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.735454][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.809578][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.827983][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.888893][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.913856][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.946869][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.971778][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.073653][ T1179] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 803.132269][ T9302] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 803.292415][ T1179] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.311607][ T1179] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 803.334336][ T9302] usb 3-1: Using ep0 maxpacket: 32 [ 803.354171][ T1179] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.365960][ T9302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.377254][ T5237] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 803.390832][ T1179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 803.402628][ T9302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.526308][T11818] ubi0: attaching mtd0 [ 803.530568][T11818] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 804.307371][ T1179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 804.318647][ T9302] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 804.327844][ T9302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.338572][ T1179] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.350928][ T1179] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.360674][ T9302] usb 3-1: config 0 descriptor?? [ 804.373573][ T1179] usb 4-1: Product: syz [ 804.381817][ T1179] usb 4-1: Manufacturer: syz [ 804.398649][ T1179] cdc_wdm 4-1:1.0: skipping garbage [ 804.419447][ T1179] cdc_wdm 4-1:1.0: skipping garbage [ 804.454215][ T1179] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 804.460484][ T1179] cdc_wdm 4-1:1.0: Unknown control protocol [ 804.489619][ T5237] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7 [ 804.588640][ T5237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.620043][ T5288] usb 4-1: USB disconnect, device number 14 [ 804.622142][ T5237] usb 1-1: Product: syz [ 804.641521][ T5237] usb 1-1: Manufacturer: syz [ 804.656877][ T5237] usb 1-1: SerialNumber: syz [ 804.677704][ T5237] usb 1-1: config 0 descriptor?? [ 804.753366][ T25] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 804.817184][ T9302] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 804.856350][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 804.869461][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 804.881235][ T5239] Bluetooth: hci2: hardware error 0x00 [ 804.951817][ T25] usb 6-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 804.964778][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.973033][ T25] usb 6-1: Product: syz [ 804.977228][ T25] usb 6-1: Manufacturer: syz [ 804.981935][ T25] usb 6-1: SerialNumber: syz [ 804.990817][ T25] usb 6-1: config 0 descriptor?? [ 805.017244][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.032479][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.045378][ T9302] ft260 0003:0403:6030.0016: failed to retrieve chip version [ 805.064787][ T9302] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -71 [ 805.084243][ T9302] usb 3-1: USB disconnect, device number 10 [ 805.118653][T11553] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 805.214565][ T25] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 805.335851][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 805.358343][ T25] dib0700: firmware download failed at 7 with -22 [ 805.384145][ T25] usb 6-1: USB disconnect, device number 9 [ 805.395538][T11829] loop4: detected capacity change from 0 to 128 [ 805.414493][T11829] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 805.762288][ T9302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 805.922232][ T5292] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 805.978937][ T9302] usb 4-1: Using ep0 maxpacket: 8 [ 805.986740][ T5288] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 805.992314][ T9302] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 806.017021][ T9302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.029898][ T9302] usb 4-1: Product: syz [ 806.034293][ T9302] usb 4-1: Manufacturer: syz [ 806.040156][ T9302] usb 4-1: SerialNumber: syz [ 806.054562][ T9302] usb 4-1: config 0 descriptor?? [ 806.110076][ T5237] usb 1-1: USB disconnect, device number 9 [ 806.140011][ T5292] usb 2-1: Using ep0 maxpacket: 8 [ 806.169732][ T5292] usb 2-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=dd.2d [ 806.192233][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 806.192596][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.202288][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 806.218686][ T5292] usb 2-1: Product: syz [ 806.228835][ T5292] usb 2-1: Manufacturer: syz [ 806.230411][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.234698][ T5292] usb 2-1: SerialNumber: syz [ 806.261064][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.274192][ T9302] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 806.283487][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.293342][ T5292] usb 2-1: config 0 descriptor?? [ 806.339123][ T5288] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 806.397168][T11852] ubi0: attaching mtd0 [ 806.401775][T11852] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 806.729093][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.934648][ T5239] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 806.972373][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 807.086722][ T5288] usb 3-1: config 0 descriptor?? [ 807.096744][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.118690][T11855] loop4: detected capacity change from 0 to 128 [ 807.145972][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.157899][T11855] EXT4-fs: Ignoring removed i_version option [ 807.176376][T11855] EXT4-fs: Ignoring removed orlov option [ 807.192215][ T25] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 807.219078][ T5292] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 807.237946][T11855] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 807.263077][ T5292] dvb-usb: bulk message failed: -22 (4/0) [ 807.265216][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.281662][ T25] usb 6-1: config 0 descriptor?? [ 807.282702][T11855] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 807.321328][ T5292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 807.362325][ T5292] dvb-usb: bulk message failed: -22 (5/0) [ 807.368136][ T5292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 807.427153][ T5292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.438542][ T5292] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 807.450690][ T5292] usb 2-1: media controller created [ 807.537763][ T5292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.600708][ T5292] usb 2-1: selecting invalid altsetting 3 [ 807.616372][ T5292] ttusb2: set interface to alts=3 failed [ 807.628500][ T5288] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0017/input/input21 [ 807.717194][ T25] ntrig 0003:1B96:0008.0018: item fetching failed at offset 5/7 [ 807.753062][ T25] ntrig 0003:1B96:0008.0018: parse failed [ 807.758975][ T25] ntrig 0003:1B96:0008.0018: probe with driver ntrig failed with error -22 [ 807.800517][ T5288] sony 0003:054C:03D5.0017: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 807.810160][ T5292] DVB: Unable to find symbol tda10086_attach() [ 807.838881][ T5292] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 807.852951][ T5292] dvb-usb: bulk message failed: -22 (4/0) [ 807.859210][ T5292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 807.859532][ T5288] usb 3-1: USB disconnect, device number 11 [ 807.885870][ T5292] dvb-usb: bulk message failed: -22 (5/0) [ 807.902261][ T5292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 807.952772][ T5292] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 807.964217][ T25] usb 6-1: USB disconnect, device number 10 [ 808.026711][ T5292] usb 2-1: USB disconnect, device number 14 [ 808.157087][ T5292] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 808.312914][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.322732][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.440436][ T9302] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 808.468641][ T9302] usb 4-1: USB disconnect, device number 15 [ 808.614756][ T5239] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 808.624625][ T5239] Bluetooth: hci3: Injecting HCI hardware error event [ 808.636798][ T54] Bluetooth: hci3: hardware error 0x00 [ 808.654089][T11876] loop5: detected capacity change from 0 to 128 [ 808.661501][T11876] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 809.654075][T11889] loop2: detected capacity change from 0 to 512 [ 809.825553][T11889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.879214][T11889] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.006840][ T29] audit: type=1800 audit(1725333085.194:459): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1554" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 810.061156][ T29] audit: type=1800 audit(1725333085.194:460): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1554" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 810.358364][T11901] ubi0: attaching mtd0 [ 810.362827][T11901] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 810.772556][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 811.136933][T11552] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.418746][T11557] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 811.645980][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 811.700775][T11912] vlan2: entered promiscuous mode [ 811.737664][T11912] macvlan0: entered promiscuous mode [ 812.118515][T11921] Bluetooth: MGMT ver 1.23 [ 812.442277][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 812.575004][T11932] loop4: detected capacity change from 0 to 512 [ 812.620304][ T54] block nbd2: Receive control failed (result -32) [ 812.627879][ T5239] block nbd2: Receive control failed (result -32) [ 812.652320][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 812.673310][T11932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.686369][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.686930][T11914] block nbd2: shutting down sockets [ 812.697753][ T25] usb 4-1: config 0 descriptor?? [ 812.719742][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 812.730151][T11932] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.884826][ T29] audit: type=1800 audit(1725333088.084:461): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1569" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 813.016372][T11940] ubi0: attaching mtd0 [ 813.021039][T11940] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 813.130818][ T29] audit: type=1800 audit(1725333088.114:462): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1569" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 813.861878][T11557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.241316][T11952] loop1: detected capacity change from 0 to 128 [ 814.260563][T11952] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 815.562406][ T5239] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 815.571765][ T5239] Bluetooth: hci4: Injecting HCI hardware error event [ 815.582976][ T5239] Bluetooth: hci4: hardware error 0x00 [ 815.664029][ T25] gspca_stv06xx: Photobit pb0100 sensor detected [ 815.784873][T11947] loop0: detected capacity change from 0 to 40427 [ 816.047099][T11947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 816.924763][T11947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 817.609251][ T25] input: STV06xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 817.747456][ T5239] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 817.760055][ T25] usb 4-1: USB disconnect, device number 16 [ 818.126785][T11985] loop5: detected capacity change from 0 to 512 [ 818.240175][T11985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.252918][T11985] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.305243][ T29] audit: type=1800 audit(1725333093.484:463): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1586" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 818.367240][T11992] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1588'. [ 818.382363][ T29] audit: type=1800 audit(1725333093.484:464): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1586" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 818.552123][T11997] ubi0: attaching mtd0 [ 818.556939][T11997] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 819.410729][T11560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.695422][T11316] syz-executor: attempt to access beyond end of device [ 819.695422][T11316] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 819.733173][T11316] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 819.826926][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 820.142367][ T5288] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 820.362300][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 820.377509][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.432347][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.489801][ T5288] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 820.517920][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.554127][ T5288] usb 4-1: config 0 descriptor?? [ 820.991224][ T5288] usbhid 4-1:0.0: can't add hid device: -71 [ 821.010919][ T5288] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 821.048315][ T5288] usb 4-1: USB disconnect, device number 17 [ 821.235730][T12033] ubi0: attaching mtd0 [ 821.242771][T12033] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 822.224803][ T9302] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 822.459619][T12045] loop4: detected capacity change from 0 to 64 [ 822.518326][ T9302] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 822.529170][ T9302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.538111][ T9302] usb 2-1: Product: syz [ 822.543654][ T9302] usb 2-1: Manufacturer: syz [ 822.548296][ T9302] usb 2-1: SerialNumber: syz [ 822.558282][ T9302] usb 2-1: config 0 descriptor?? [ 822.693699][T12049] loop3: detected capacity change from 0 to 128 [ 822.708333][T12049] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 823.710102][ T9302] asix 2-1:0.0 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 823.752522][ T9302] usb 2-1: USB disconnect, device number 15 [ 823.792875][ T9302] asix 2-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 824.000337][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 824.047213][T12047] loop0: detected capacity change from 0 to 40427 [ 824.158095][T12047] F2FS-fs (loop0): Found nat_bits in checkpoint [ 824.371028][T12047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 824.752488][ T1179] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 824.875115][T12089] loop5: detected capacity change from 0 to 64 [ 824.946777][ T1179] usb 2-1: Using ep0 maxpacket: 16 [ 824.967570][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.979157][ T1179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.989755][ T1179] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 824.990368][T11316] syz-executor: attempt to access beyond end of device [ 824.990368][T11316] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 824.999006][ T1179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.011194][ T1179] usb 2-1: config 0 descriptor?? [ 825.054655][T11316] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 825.494709][ T1179] usbhid 2-1:0.0: can't add hid device: -71 [ 825.511064][ T1179] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 825.529961][ T1179] usb 2-1: USB disconnect, device number 16 [ 825.548913][T12099] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 826.087595][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1633'. [ 826.305457][ T29] audit: type=1326 audit(1725333101.504:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 826.350444][ T29] audit: type=1326 audit(1725333101.504:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 826.378009][ T29] audit: type=1326 audit(1725333101.504:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 826.408574][T12128] loop1: detected capacity change from 0 to 512 [ 826.425289][ T29] audit: type=1326 audit(1725333101.504:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.5.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 826.469992][T12128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.485277][T12128] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.488153][T12133] loop5: detected capacity change from 0 to 128 [ 826.502592][ T2631] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 826.518954][T12133] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 826.547222][ T29] audit: type=1800 audit(1725333101.744:469): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1638" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 826.601153][ T29] audit: type=1800 audit(1725333101.744:470): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1638" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 826.860881][T11553] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.902145][ T2631] usb 1-1: Using ep0 maxpacket: 32 [ 826.936926][ T2631] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 826.960724][ T2631] usb 1-1: config 0 has no interface number 0 [ 827.029119][ T2631] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 827.116371][ T2631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.297509][ T2631] usb 1-1: Product: syz [ 827.439911][ T2631] usb 1-1: Manufacturer: syz [ 827.601931][ T2631] usb 1-1: SerialNumber: syz [ 827.848714][ T2631] usb 1-1: config 0 descriptor?? [ 828.300621][T12160] bond0: option primary_reselect: invalid value (244) [ 828.310086][ T29] audit: type=1326 audit(1725333103.494:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.5.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 828.341837][ T5292] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 828.400016][ T29] audit: type=1326 audit(1725333103.494:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.5.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 828.469309][ T29] audit: type=1326 audit(1725333103.494:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.5.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b64179eb9 code=0x7ffc0000 [ 828.552277][ T5292] usb 3-1: Using ep0 maxpacket: 16 [ 828.562462][ T2631] peak_usb 1-1:0.215 can0: unable to request usb[type=2 value=5] err=-71 [ 828.562632][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.588923][T12170] loop1: detected capacity change from 0 to 512 [ 828.615001][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.643423][ T5292] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 828.647659][T12170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.665834][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.668509][ T5292] usb 3-1: config 0 descriptor?? [ 828.699265][ T2631] peak_usb 1-1:0.215: probe with driver peak_usb failed with error -71 [ 828.771098][ T2631] usb 1-1: USB disconnect, device number 10 [ 828.789467][T12170] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.944167][ T29] audit: type=1800 audit(1725333104.134:474): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1655" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 829.112547][ T5292] usbhid 3-1:0.0: can't add hid device: -71 [ 829.120234][ T5292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 829.169716][ T5292] usb 3-1: USB disconnect, device number 12 [ 829.202187][T11553] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.558500][T12195] loop2: detected capacity change from 0 to 128 [ 830.664603][T12195] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 831.140774][T12189] syzkaller0: entered promiscuous mode [ 831.481799][T12189] syzkaller0: entered allmulticast mode [ 831.653922][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 831.653947][ T29] audit: type=1326 audit(1725333106.854:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d2f79eb9 code=0x7ffc0000 [ 831.775486][ T29] audit: type=1326 audit(1725333106.884:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f78d2f79eb9 code=0x7ffc0000 [ 831.831098][ T29] audit: type=1326 audit(1725333106.894:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.4.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d2f79eb9 code=0x7ffc0000 [ 831.903033][ T9302] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 832.107384][ T9302] usb 2-1: Using ep0 maxpacket: 8 [ 832.122316][ T9302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 832.139735][ T9302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 832.186460][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 832.186601][ T9302] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e [ 832.212460][ T9302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.220726][ T9302] usb 2-1: Product: syz [ 832.232599][ T9302] usb 2-1: Manufacturer: syz [ 832.237354][ T9302] usb 2-1: SerialNumber: syz [ 832.244611][ T9302] usb 2-1: config 0 descriptor?? [ 832.255222][ T9302] cyberjack 2-1:0.0: Reiner SCT Cyberjack USB card reader converter detected [ 832.267460][ T9302] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 832.275974][ T9302] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 832.475150][ T9302] usb 2-1: USB disconnect, device number 17 [ 832.489971][ T9302] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 832.493602][ T46] usb 6-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 832.513496][ T9302] cyberjack 2-1:0.0: device disconnected [ 832.514657][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.548916][ T46] usb 6-1: Product: syz [ 832.553462][ T46] usb 6-1: Manufacturer: syz [ 832.558311][ T46] usb 6-1: SerialNumber: syz [ 832.600732][ T46] usb 6-1: config 0 descriptor?? [ 832.858096][ T46] kaweth 6-1:0.0: Firmware present in device. [ 833.038032][ T46] kaweth 6-1:0.0: Statistics collection: 0 [ 833.044750][ T46] kaweth 6-1:0.0: Multicast filter limit: 0 [ 833.050891][ T46] kaweth 6-1:0.0: MTU: 0 [ 833.059453][ T46] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 833.099284][ T9302] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 833.312532][ T9302] usb 5-1: Using ep0 maxpacket: 8 [ 833.328782][ T9302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.358013][ T9302] usb 5-1: config 0 has no interfaces? [ 833.366737][ T9302] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 833.376177][ T9302] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 833.384484][ T9302] usb 5-1: Product: syz [ 833.388984][ T9302] usb 5-1: Manufacturer: syz [ 833.393816][ T9302] usb 5-1: SerialNumber: syz [ 833.403112][ T9302] usb 5-1: config 0 descriptor?? [ 834.380339][T12214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.405936][T12214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.614485][T12218] loop5: detected capacity change from 0 to 512 [ 834.704810][T12218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.747571][T12218] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.853887][ T29] audit: type=1800 audit(1725333110.044:479): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1671" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 834.906941][ T29] audit: type=1800 audit(1725333110.044:480): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1671" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 835.119418][T11560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.121069][ T5292] usb 5-1: USB disconnect, device number 9 [ 836.694882][T12224] lo speed is unknown, defaulting to 1000 [ 836.707189][ T46] kaweth 6-1:0.0: kaweth interface created at eth1 [ 836.724692][ T46] usb 6-1: USB disconnect, device number 11 [ 836.849134][T12224] lo speed is unknown, defaulting to 1000 [ 836.924610][T12224] lo speed is unknown, defaulting to 1000 [ 837.252783][ T5239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 837.261937][ T5239] Bluetooth: hci1: Injecting HCI hardware error event [ 837.273162][ T54] Bluetooth: hci1: hardware error 0x00 [ 837.502145][ T29] audit: type=1326 audit(1725333112.694:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1959979eb9 code=0x7ffc0000 [ 837.766779][ T29] audit: type=1326 audit(1725333112.694:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1959979eb9 code=0x7ffc0000 [ 838.192274][ T29] audit: type=1326 audit(1725333112.694:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1959979eb9 code=0x7ffc0000 [ 838.415443][ T29] audit: type=1326 audit(1725333112.694:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.2.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1959979eb9 code=0x7ffc0000 [ 838.567129][ T46] lo speed is unknown, defaulting to 1000 [ 838.573997][T12224] infiniband syz0: set active [ 838.582443][T12224] infiniband syz0: added lo [ 838.618193][T12224] syz0: rxe_create_cq: returned err = -12 [ 838.654258][T12224] infiniband syz0: Couldn't create ib_mad CQ [ 838.660677][T12224] infiniband syz0: Couldn't open port 1 [ 838.734895][T12260] loop4: detected capacity change from 0 to 512 [ 838.830126][T12224] RDS/IB: syz0: added [ 838.835978][T12260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.862742][T12224] smc: adding ib device syz0 with port count 1 [ 838.883598][T12224] smc: ib device syz0 port 1 has pnetid [ 838.894337][ T1179] lo speed is unknown, defaulting to 1000 [ 838.912433][T12260] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.946513][T12224] lo speed is unknown, defaulting to 1000 [ 838.972949][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 838.992869][ T29] audit: type=1800 audit(1725333114.194:485): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1684" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 839.038043][ T29] audit: type=1800 audit(1725333114.214:486): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1684" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 839.416856][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 839.421787][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.452869][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.485234][ T46] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 839.524926][ T46] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 839.551131][T11557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.562249][ T46] usb 4-1: Manufacturer: syz [ 839.596256][ T46] usb 4-1: config 0 descriptor?? [ 839.801998][T12224] lo speed is unknown, defaulting to 1000 [ 839.847838][ T1179] usb 4-1: USB disconnect, device number 18 [ 839.996345][T12276] loop4: detected capacity change from 0 to 128 [ 840.023966][T12276] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 840.462225][ T1179] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 840.627542][T12224] lo speed is unknown, defaulting to 1000 [ 840.642250][ T1179] usb 4-1: Using ep0 maxpacket: 8 [ 840.674665][ T1179] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 840.701879][ T1179] usb 4-1: config 0 has no interface number 0 [ 840.722173][ T1179] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.755982][ T1179] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.792139][ T1179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.843372][ T1179] usb 4-1: config 0 descriptor?? [ 840.862895][ T1179] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 840.955328][T12281] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1690'. [ 841.122019][ T5292] usb 4-1: USB disconnect, device number 19 [ 841.155104][ T5292] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 841.320377][T12224] lo speed is unknown, defaulting to 1000 [ 841.625350][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 842.120474][ T5288] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 842.403452][ T5288] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 842.472355][ T5288] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 842.479834][ T5288] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 842.572465][ T5288] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 842.623283][T12224] lo speed is unknown, defaulting to 1000 [ 843.410854][T12302] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 843.939909][T12317] loop0: detected capacity change from 0 to 128 [ 843.993233][T12317] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 844.128857][T12224] lo speed is unknown, defaulting to 1000 [ 844.292229][ T9302] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 844.844074][ T2631] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 844.941929][ T46] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 845.161530][ T46] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 845.273570][ T2631] usb 4-1: Using ep0 maxpacket: 8 [ 845.363458][ T46] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 845.463513][ T46] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 845.471390][ T2631] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 845.491293][ T9302] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 845.491612][ T2631] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 845.500957][ T9302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.519503][ T9302] usb 2-1: Product: syz [ 845.523740][ T9302] usb 2-1: Manufacturer: syz [ 845.528350][ T9302] usb 2-1: SerialNumber: syz [ 845.545735][ T46] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 845.554816][ T9302] usb 2-1: config 0 descriptor?? [ 845.562095][ T2631] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 845.620738][ T2631] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 845.685845][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 845.748360][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 845.777490][ T9302] usb 2-1: USB disconnect, device number 18 [ 845.812194][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 845.866081][ T2631] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 845.873958][T12345] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.885666][ T2631] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 845.896126][T12344] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 845.904091][ T2631] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 845.917903][T12345] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1718'. [ 845.936507][ T2631] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 845.969763][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 846.001987][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 846.056199][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 846.075109][ T2631] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 846.092127][ T2631] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 846.112107][ T2631] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 846.143133][ T2631] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 846.185443][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 846.240577][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 846.269986][ T2631] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 846.313048][ T2631] usb 4-1: string descriptor 0 read error: -22 [ 846.319411][ T2631] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 846.350306][ T2631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.362354][ T9302] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 846.386423][ T2631] adutux 4-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 846.423119][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 846.640517][ T9302] usb 2-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 846.670316][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 846.687448][ T9302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.706088][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 846.743574][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 846.750944][ T9302] usb 2-1: Product: syz [ 846.760942][ T9302] usb 2-1: Manufacturer: syz [ 846.769673][ T9302] usb 2-1: SerialNumber: syz [ 846.775500][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 846.788992][ T9302] usb 2-1: config 0 descriptor?? [ 846.794345][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 846.803165][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 846.887600][T12359] lo speed is unknown, defaulting to 1000 [ 847.068866][T12366] ubi0: attaching mtd0 [ 847.073903][T12366] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 847.885587][ T5292] usb 2-1: USB disconnect, device number 19 [ 847.926402][ T5237] usb 4-1: USB disconnect, device number 20 [ 848.141693][ T965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.162493][T12374] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 848.433487][ T5237] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 848.662897][ T5237] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 848.933709][ T54] Bluetooth: hci5: command tx timeout [ 848.946173][ T5237] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 849.113185][T12382] loop0: detected capacity change from 0 to 128 [ 849.120912][T12382] vfat: Unknown parameter '#3sÝEx {iQ;i [)DOʁ?l#' [ 849.132316][ T5237] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 849.163069][ T5237] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 849.884831][ T965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.717607][ T965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.751813][T12399] netlink: 'syz.4.1740': attribute type 28 has an invalid length. [ 850.860743][T12403] ubi0: attaching mtd0 [ 850.865059][T12403] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 850.907735][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 850.954620][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 851.033310][ T54] Bluetooth: hci5: command tx timeout [ 851.602514][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 851.626641][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.676805][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.742433][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 851.763796][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.822161][ T5237] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 851.844949][ T965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.912621][ T25] usb 3-1: config 0 descriptor?? [ 852.135022][ T5237] usb 2-1: Using ep0 maxpacket: 8 [ 852.432496][ T5237] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 852.546052][ T5237] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 852.612012][ T5237] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 852.633456][ T5237] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 852.672942][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 852.685563][ T5292] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 852.697020][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 852.708961][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 852.723763][ T5237] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 852.733509][ T5237] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 852.741647][ T5237] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 852.759652][ T5237] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 852.761830][ T25] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 852.780569][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 852.780619][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 852.780657][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 852.782238][ T5237] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 852.882996][ T5237] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 852.890551][ T5237] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 852.913324][ T5292] usb 5-1: config index 0 descriptor too short (expected 213, got 72) [ 852.944827][ T5292] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 852.955226][ T25] ft260 0003:0403:6030.001C: failed to retrieve chip version [ 852.962946][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.971116][ T5237] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 852.973124][ T25] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -71 [ 853.002022][ T25] usb 3-1: USB disconnect, device number 13 [ 853.018232][ T5292] usb 5-1: Product: syz [ 853.038242][ T5292] usb 5-1: Manufacturer: syz [ 853.052401][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 853.081558][ T5292] usb 5-1: SerialNumber: syz [ 853.092847][ T54] Bluetooth: hci5: command tx timeout [ 853.112747][ T5292] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 853.123640][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 853.128171][T12411] lo speed is unknown, defaulting to 1000 [ 853.172463][ T5237] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 853.233202][ T5237] usb 2-1: string descriptor 0 read error: -22 [ 853.252297][ T5237] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 853.261466][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.299107][ T965] bridge_slave_1: left allmulticast mode [ 853.305844][ T965] bridge_slave_1: left promiscuous mode [ 853.319572][ T9302] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 853.332981][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.365627][ T965] bridge_slave_0: left allmulticast mode [ 853.371380][ T965] bridge_slave_0: left promiscuous mode [ 853.377681][ T5237] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 853.390660][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.734377][ T25] usb 2-1: USB disconnect, device number 20 [ 855.182449][ T54] Bluetooth: hci5: command tx timeout [ 864.788708][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 864.807201][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 864.819764][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 864.832523][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 864.842821][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 864.850448][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 865.023018][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 865.041980][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 865.062468][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 865.073295][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 865.083210][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 865.090703][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 865.958693][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 865.979057][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 865.994887][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 866.011423][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 866.023474][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 866.048655][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 866.153050][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 866.169457][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 866.187085][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 866.206033][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 866.214816][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 866.224073][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 866.942667][ T54] Bluetooth: hci6: command tx timeout [ 867.184506][ T54] Bluetooth: hci7: command tx timeout [ 868.152338][ T54] Bluetooth: hci8: command tx timeout [ 868.302370][ T54] Bluetooth: hci9: command tx timeout [ 894.757083][ T9302] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 894.850944][ T54] Bluetooth: hci6: command tx timeout [ 894.856628][ T5239] Bluetooth: hci7: command tx timeout [ 894.866749][ T5233] Bluetooth: hci8: command tx timeout [ 894.884253][ T5233] Bluetooth: hci9: command tx timeout [ 894.908517][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.922126][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.652332][ C0] hrtimer: interrupt took 11250518 ns [ 948.194359][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.200767][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.207718][T12448] Bluetooth: hci9: command tx timeout [ 948.213246][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 948.222327][ T5239] Bluetooth: hci7: command tx timeout [ 948.227777][ T5239] Bluetooth: hci6: command tx timeout [ 948.252142][T12448] Bluetooth: hci8: command tx timeout [ 950.315695][T12450] Bluetooth: hci9: command tx timeout [ 950.322091][ T5233] Bluetooth: hci6: command tx timeout [ 950.327530][ T5233] Bluetooth: hci8: command tx timeout [ 950.333077][T12448] Bluetooth: hci7: command tx timeout [ 955.591136][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 955.603045][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 955.622395][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 955.702254][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 955.712801][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 955.720312][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 955.933638][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.967973][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 956.026230][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 956.046809][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 956.055022][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 956.062539][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 956.278916][T12450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.297758][T12450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.322304][T12450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.331008][T12450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.340927][T12450] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 956.348765][T12450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.394644][T12450] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 956.422404][T12450] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 956.432550][T12450] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 956.440901][T12450] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 956.448904][T12450] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 956.462264][T12450] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 956.631972][T12450] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 956.680762][T12450] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 956.696880][T12450] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 956.705597][T12450] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 956.785885][T12450] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 956.842245][T12450] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 956.928756][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 956.940957][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 956.949276][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 956.965952][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 956.974075][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 956.982275][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 957.822445][T12450] Bluetooth: hci0: command tx timeout [ 958.148694][T12450] Bluetooth: hci3: command tx timeout [ 958.462463][T12450] Bluetooth: hci4: command tx timeout [ 958.542476][T12450] Bluetooth: hci10: command tx timeout [ 958.942517][T12450] Bluetooth: hci11: command tx timeout [ 959.022437][T12450] Bluetooth: hci12: command tx timeout [ 959.902254][T12450] Bluetooth: hci0: command tx timeout [ 960.222450][T12450] Bluetooth: hci3: command tx timeout [ 960.545720][T12450] Bluetooth: hci4: command tx timeout [ 960.633123][T12450] Bluetooth: hci10: command tx timeout [ 961.022379][T12450] Bluetooth: hci11: command tx timeout [ 961.102277][T12450] Bluetooth: hci12: command tx timeout [ 961.982429][T12450] Bluetooth: hci0: command tx timeout [ 962.302499][T12450] Bluetooth: hci3: command tx timeout [ 962.622172][T12450] Bluetooth: hci4: command tx timeout [ 962.702432][T12450] Bluetooth: hci10: command tx timeout [ 963.106377][T12450] Bluetooth: hci11: command tx timeout [ 963.182216][T12450] Bluetooth: hci12: command tx timeout [ 964.062277][T12450] Bluetooth: hci0: command tx timeout [ 964.382274][T12450] Bluetooth: hci3: command tx timeout [ 964.702341][T12450] Bluetooth: hci4: command tx timeout [ 964.772636][T12450] Bluetooth: hci10: command tx timeout [ 965.182456][T12450] Bluetooth: hci11: command tx timeout [ 965.266327][T12450] Bluetooth: hci12: command tx timeout [ 969.994871][T12450] Bluetooth: hci5: command 0x0406 tx timeout [ 972.887085][ T9302] ath9k_htc: Failed to initialize the device [ 989.622216][T12476] Bluetooth: hci7: command 0x0406 tx timeout [ 989.628414][T12476] Bluetooth: hci8: command 0x0406 tx timeout [ 989.652445][T12476] Bluetooth: hci6: command 0x0406 tx timeout [ 989.658543][T12476] Bluetooth: hci9: command 0x0406 tx timeout [ 992.809800][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.816325][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.743772][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 997.751489][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 997.770134][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 997.802106][ T30] task:kworker/u8:3 state:D stack:20536 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 997.816634][ T30] Workqueue: events_unbound linkwatch_event [ 997.828890][ T30] Call Trace: [ 997.837080][ T30] [ 997.840319][ T30] __schedule+0x1800/0x4a60 [ 997.844931][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.850695][ T30] ? __pfx___schedule+0x10/0x10 [ 997.859104][ T30] ? __pfx_lock_release+0x10/0x10 [ 997.865112][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 997.870601][ T30] ? kthread_data+0x52/0xd0 [ 997.884555][ T30] ? schedule+0x90/0x320 [ 997.888851][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.901452][ T30] ? wq_worker_sleeping+0x66/0x240 [ 997.906750][ T30] ? schedule+0x90/0x320 [ 997.911034][ T30] schedule+0x14b/0x320 [ 997.915287][ T30] schedule_preempt_disabled+0x13/0x30 [ 997.920943][ T30] __mutex_lock+0x6a4/0xd70 [ 997.945093][ T30] ? __mutex_lock+0x527/0xd70 [ 997.949857][ T30] ? linkwatch_event+0xe/0x60 [ 997.966365][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 997.971474][ T30] ? process_scheduled_works+0x945/0x1830 [ 997.977510][ T30] linkwatch_event+0xe/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 997.991585][ T30] process_scheduled_works+0xa2e/0x1830 [ 997.997362][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 998.012275][ T30] ? assign_work+0x364/0x3d0 [ 998.016953][ T30] worker_thread+0x86d/0xd10 [ 998.021595][ T30] ? __kthread_parkme+0x169/0x1d0 [ 998.059554][ T30] ? __pfx_worker_thread+0x10/0x10 [ 998.147431][ T30] kthread+0x2f2/0x390 [ 998.151582][ T30] ? __pfx_worker_thread+0x10/0x10 [ 998.242042][ T30] ? __pfx_kthread+0x10/0x10 [ 998.246726][ T30] ret_from_fork+0x4d/0x80 [ 998.251184][ T30] ? __pfx_kthread+0x10/0x10 [ 998.310546][ T30] ret_from_fork_asm+0x1a/0x30 [ 998.322314][ T30] [ 998.325491][ T30] INFO: task kworker/0:5:5292 blocked for more than 143 seconds. [ 998.370594][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 998.409776][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.449155][ T30] task:kworker/0:5 state:D stack:20912 pid:5292 tgid:5292 ppid:2 flags:0x00004000 [ 998.482260][ T30] Workqueue: events switchdev_deferred_process_work [ 998.488938][ T30] Call Trace: [ 998.543384][ T30] [ 998.546554][ T30] __schedule+0x1800/0x4a60 [ 998.551121][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 998.609688][ T30] ? __pfx___schedule+0x10/0x10 [ 998.642096][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 998.648155][ T30] ? __pfx_lock_release+0x10/0x10 [ 998.711806][ T30] ? kick_pool+0x45c/0x620 [ 998.722044][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.745669][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 998.751379][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 998.776975][ T30] ? schedule+0x90/0x320 [ 998.781351][ T30] schedule+0x14b/0x320 [ 998.803396][ T30] schedule_preempt_disabled+0x13/0x30 [ 998.808903][ T30] __mutex_lock+0x6a4/0xd70 [ 998.829986][ T30] ? __mutex_lock+0x527/0xd70 [ 998.834788][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 998.840896][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 998.852057][ T30] ? process_scheduled_works+0x945/0x1830 [ 998.857838][ T30] switchdev_deferred_process_work+0xe/0x20 [ 998.865145][ T30] process_scheduled_works+0xa2e/0x1830 [ 998.871013][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 998.883025][ T30] ? assign_work+0x364/0x3d0 [ 998.888761][ T30] worker_thread+0x86d/0xd10 [ 998.893593][ T30] ? __kthread_parkme+0x169/0x1d0 [ 998.898660][ T30] ? __pfx_worker_thread+0x10/0x10 [ 998.914979][ T30] kthread+0x2f2/0x390 [ 998.919121][ T30] ? __pfx_worker_thread+0x10/0x10 [ 998.924742][ T30] ? __pfx_kthread+0x10/0x10 [ 998.929362][ T30] ret_from_fork+0x4d/0x80 [ 998.940559][ T30] ? __pfx_kthread+0x10/0x10 [ 998.945497][ T30] ret_from_fork_asm+0x1a/0x30 [ 998.950338][ T30] [ 998.971605][ T30] INFO: task syz-executor:12359 blocked for more than 144 seconds. [ 998.979876][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 998.992259][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 999.000951][ T30] task:syz-executor state:D stack:21728 pid:12359 tgid:12359 ppid:1 flags:0x00004004 [ 999.020052][ T30] Call Trace: [ 999.025542][ T30] [ 999.028530][ T30] __schedule+0x1800/0x4a60 [ 999.033615][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.039317][ T30] ? __pfx___schedule+0x10/0x10 [ 999.051288][ T30] ? __pfx_lock_release+0x10/0x10 [ 999.056464][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 999.062278][ T30] ? schedule+0x90/0x320 [ 999.066656][ T30] schedule+0x14b/0x320 [ 999.070863][ T30] schedule_preempt_disabled+0x13/0x30 [ 999.099154][ T30] __mutex_lock+0x6a4/0xd70 [ 999.110926][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.122042][ T30] ? __mutex_lock+0x527/0xd70 [ 999.126773][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 999.131591][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 999.138594][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.150444][ T30] ? __asan_memset+0x23/0x50 [ 999.157579][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.163302][ T30] ? nla_strscpy+0x113/0x180 [ 999.168024][ T30] rtnl_newlink+0xab7/0x20a0 [ 999.172923][ T30] ? rtnl_newlink+0x451/0x20a0 [ 999.177746][ T30] ? rtnl_newlink+0x451/0x20a0 [ 999.191942][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.197184][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.204943][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 999.219162][ T30] ? __mutex_lock+0x527/0xd70 [ 999.241967][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.247899][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.257820][ T30] rtnetlink_rcv_msg+0x741/0xcf0 [ 999.266790][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 999.271985][ T30] ? __lock_acquire+0x137a/0x2040 [ 999.279452][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.288452][ T30] netlink_rcv_skb+0x1e5/0x430 [ 999.293429][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.299024][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.314096][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.319379][ T30] netlink_unicast+0x7f8/0x990 [ 999.330051][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 999.336604][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.342329][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.348117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.369050][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.379619][ T30] ? __check_object_size+0x49c/0x900 [ 999.389279][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.397975][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.403829][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 999.408943][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.416283][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.430281][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 999.435690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.441399][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.454272][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 999.459849][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.472279][ T30] __sock_sendmsg+0x223/0x270 [ 999.477262][ T30] __sys_sendto+0x3a4/0x4f0 [ 999.481832][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 999.511837][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.531087][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 999.538536][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.544270][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 999.550329][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 999.562053][ T30] __x64_sys_sendto+0xde/0x100 [ 999.566887][ T30] do_syscall_64+0xf3/0x230 [ 999.571426][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.583332][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.589272][ T30] RIP: 0033:0x7f108b77bd4c [ 999.593823][ T30] RSP: 002b:00007ffea5f47050 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 999.610554][ T30] RAX: ffffffffffffffda RBX: 00007f108c444620 RCX: 00007f108b77bd4c [ 999.641430][ T30] RDX: 000000000000003c RSI: 00007f108c444670 RDI: 0000000000000003 [ 999.649822][ T30] RBP: 0000000000000000 R08: 00007ffea5f470a4 R09: 000000000000000c [ 999.666688][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 999.678337][ T30] R13: 0000000000000000 R14: 00007f108c444670 R15: 0000000000000000 [ 999.689961][ T30] [ 999.693103][ T30] INFO: task syz.0.1744:12411 blocked for more than 145 seconds. [ 999.700931][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 999.712030][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 999.728527][ T30] task:syz.0.1744 state:D stack:23800 pid:12411 tgid:12410 ppid:11316 flags:0x00004006 [ 999.757463][ T30] Call Trace: [ 999.760822][ T30] [ 999.768615][ T30] __schedule+0x1800/0x4a60 [ 999.781079][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.795038][ T30] ? __pfx___schedule+0x10/0x10 [ 999.802317][ T30] ? __pfx_lock_release+0x10/0x10 [ 999.807421][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 999.818265][ T30] ? schedule+0x90/0x320 [ 999.833269][ T30] schedule+0x14b/0x320 [ 999.837526][ T30] schedule_preempt_disabled+0x13/0x30 [ 999.848592][ T30] __mutex_lock+0x6a4/0xd70 [ 999.854700][ T30] ? __mutex_lock+0x527/0xd70 [ 999.859427][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 999.870546][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 999.876839][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.882583][ T30] ? read_word_at_a_time+0xe/0x20 [ 999.887655][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.900140][ T30] ? sized_strscpy+0x8d/0x220 [ 999.904959][ T30] ip_tunnel_init_net+0x20e/0x710 [ 999.910149][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 999.915836][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.947584][ T30] ops_init+0x35b/0x610 [ 999.951848][ T30] setup_net+0x515/0xca0 [ 999.966183][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 999.971929][ T30] ? __pfx_setup_net+0x10/0x10 [ 999.983189][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 999.988895][ T30] ? read_word_at_a_time+0xe/0x20 [ 999.995408][ T30] copy_net_ns+0x4e2/0x7b0 [ 999.999873][ T30] create_new_namespaces+0x425/0x7b0 [ 1000.011319][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.017224][ T30] ? copy_namespaces+0x5c/0x490 [ 1000.023511][ T30] copy_namespaces+0x41a/0x490 [ 1000.031577][ T30] copy_process+0x195e/0x3dc0 [ 1000.042088][ T30] ? copy_process+0xa03/0x3dc0 [ 1000.047261][ T30] ? __pfx_copy_process+0x10/0x10 [ 1000.053814][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.059494][ T30] ? futex_wait+0x285/0x360 [ 1000.072088][ T30] kernel_clone+0x226/0x8f0 [ 1000.076708][ T30] ? __pfx_kernel_clone+0x10/0x10 [ 1000.081814][ T30] __x64_sys_clone+0x258/0x2a0 [ 1000.101574][ T30] ? __pfx___x64_sys_clone+0x10/0x10 [ 1000.108413][ T30] ? do_syscall_64+0x100/0x230 [ 1000.113284][ T30] ? do_syscall_64+0xb6/0x230 [ 1000.118004][ T30] do_syscall_64+0xf3/0x230 [ 1000.134429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.140434][ T30] RIP: 0033:0x7ff9de579eb9 [ 1000.146384][ T30] RSP: 002b:00007ff9df420fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1000.162046][ T30] RAX: ffffffffffffffda RBX: 00007ff9de715f80 RCX: 00007ff9de579eb9 [ 1000.170091][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 1000.185772][ T30] RBP: 00007ff9de5e793e R08: 0000000000000000 R09: 0000000000000000 [ 1000.194341][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1000.208309][ T30] R13: 0000000000000000 R14: 00007ff9de715f80 R15: 00007ffe343e87e8 [ 1000.229714][ T30] [ 1000.240979][ T30] [ 1000.240979][ T30] Showing all locks held in the system: [ 1000.252033][ T30] 1 lock held by khungtaskd/30: [ 1000.256911][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1000.272908][ T30] 3 locks held by kworker/u8:3/52: [ 1000.278063][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.298352][ T30] #1: ffffc90000bc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.309722][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1000.325714][ T30] 5 locks held by kworker/u9:0/54: [ 1000.330872][ T30] #0: ffff88807b577948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.350937][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.392131][ T30] #2: ffff88805d250d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1000.405484][ T30] #3: ffff88805d250078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1000.420852][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1000.434195][ T30] 4 locks held by kworker/u8:5/965: [ 1000.447394][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.472210][ T30] #1: ffffc90003bf7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.492118][ T30] #2: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1000.501745][ T30] #3: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 1000.531395][ T30] 3 locks held by kworker/1:2/2631: [ 1000.537867][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.559670][ T30] #1: ffffc90009547d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.572386][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1000.584420][ T30] 3 locks held by kworker/R-ipv6_/2726: [ 1000.589998][ T30] #0: ffff88802fc17148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.608166][ T30] #1: ffffc90009667c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.625952][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1000.639113][ T30] 2 locks held by getty/4983: [ 1000.667810][ T30] #0: ffff8880309cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1000.682420][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1000.700091][ T30] 6 locks held by kworker/u9:2/5233: [ 1000.705514][ T30] #0: ffff88805c9e5148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.716503][ T30] #1: ffffc900049cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.736443][ T30] #2: ffff88804d69cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1000.755998][ T30] #3: ffff88804d69c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1000.772046][ T30] #4: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 1000.808433][ T30] #5: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1000.825909][ T30] 7 locks held by kworker/0:4/5237: [ 1000.831168][ T30] 3 locks held by kworker/0:5/5292: [ 1000.842031][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1000.871021][ T30] #1: ffffc90004797d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1000.885930][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1000.902421][ T30] 4 locks held by kworker/0:8/5315: [ 1000.907758][ T30] 2 locks held by kworker/0:1/9302: [ 1000.914276][ T30] 1 lock held by syz-executor/11557: [ 1000.919593][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1000.938856][ T30] 1 lock held by syz-executor/12359: [ 1000.953311][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 1000.982262][ T30] 2 locks held by syz.0.1744/12411: [ 1000.987810][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1001.005602][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 1001.018867][ T30] 1 lock held by syz.3.1746/12417: [ 1001.027647][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1001.036889][ T30] 1 lock held by syz.2.1748/12422: [ 1001.045436][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1001.061545][ T30] 1 lock held by syz-executor/12436: [ 1001.070333][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.083349][ T30] 1 lock held by syz-executor/12438: [ 1001.088679][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.110553][ T30] 1 lock held by syz.1.1756/12442: [ 1001.121166][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1001.136508][ T30] 1 lock held by syz-executor/12444: [ 1001.141838][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.161520][ T30] 1 lock held by syz-executor/12446: [ 1001.169703][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.184420][ T30] 1 lock held by syz-executor/12464: [ 1001.189745][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.207482][ T30] 1 lock held by syz-executor/12466: [ 1001.212913][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.222729][ T30] 1 lock held by syz-executor/12468: [ 1001.228043][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.259900][ T30] 1 lock held by syz-executor/12469: [ 1001.272982][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.284662][ T30] 1 lock held by syz-executor/12472: [ 1001.289976][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.304490][ T30] 1 lock held by syz-executor/12474: [ 1001.309810][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1001.325243][ T30] [ 1001.327597][ T30] ============================================= [ 1001.327597][ T30] [ 1001.340953][ T30] NMI backtrace for cpu 1 [ 1001.345310][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1001.355831][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.365904][ T30] Call Trace: [ 1001.369199][ T30] [ 1001.372145][ T30] dump_stack_lvl+0x241/0x360 [ 1001.376848][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.382073][ T30] ? __pfx__printk+0x10/0x10 [ 1001.386679][ T30] ? vprintk_emit+0x667/0x7c0 [ 1001.391380][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1001.396437][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1001.401413][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1001.406895][ T30] ? _printk+0xd5/0x120 [ 1001.411096][ T30] ? __pfx__printk+0x10/0x10 [ 1001.415790][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1001.421470][ T30] ? __pfx__printk+0x10/0x10 [ 1001.426171][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.431835][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1001.436886][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1001.442894][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1001.448905][ T30] watchdog+0xff4/0x1040 [ 1001.453184][ T30] ? watchdog+0x1ea/0x1040 [ 1001.457638][ T30] ? __pfx_watchdog+0x10/0x10 [ 1001.462348][ T30] kthread+0x2f2/0x390 [ 1001.466448][ T30] ? __pfx_watchdog+0x10/0x10 [ 1001.471356][ T30] ? __pfx_kthread+0x10/0x10 [ 1001.475973][ T30] ret_from_fork+0x4d/0x80 [ 1001.480421][ T30] ? __pfx_kthread+0x10/0x10 [ 1001.485030][ T30] ret_from_fork_asm+0x1a/0x30 [ 1001.489845][ T30] [ 1001.494203][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1001.499443][ C0] NMI backtrace for cpu 0 [ 1001.499458][ C0] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:8 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1001.499484][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.499501][ C0] Workqueue: events kfree_rcu_monitor [ 1001.499538][ C0] RIP: 0010:unwind_next_frame+0x2e1/0x2a00 [ 1001.499577][ C0] Code: c1 0f 83 bd 1d 00 00 4b 8d 0c 64 48 8d 8c 09 14 b0 98 90 48 39 c1 0f 87 a8 1d 00 00 44 89 e7 44 89 fe e8 42 64 52 00 45 39 fc <0f> 85 70 01 00 00 e8 74 62 52 00 48 8b 04 24 49 bd 00 00 00 00 00 [ 1001.499596][ C0] RSP: 0018:ffffc90000005d68 EFLAGS: 00000002 [ 1001.499615][ C0] RAX: 0000000000010100 RBX: ffffffff916e31c8 RCX: ffffffff913653a8 [ 1001.499633][ C0] RDX: ffff888026129e00 RSI: 00000000001a45ed RDI: 00000000001a45ee [ 1001.499650][ C0] RBP: 00000000000a2f95 R08: ffffffff81412a2e R09: ffffc90000005f30 [ 1001.499666][ C0] R10: 0000000000000003 R11: ffffffff817f2f80 R12: 00000000001a45ee [ 1001.499682][ C0] R13: 00000000000b0001 R14: dffffc0000000000 R15: 00000000001a45ed [ 1001.499702][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1001.499721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.499737][ C0] CR2: 000000110c2cd2ba CR3: 000000000e734000 CR4: 0000000000350ef0 [ 1001.499756][ C0] Call Trace: [ 1001.499765][ C0] [ 1001.499775][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1001.499806][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1001.499842][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1001.499872][ C0] ? nmi_handle+0x2a/0x5a0 [ 1001.499909][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1001.499938][ C0] ? nmi_handle+0x151/0x5a0 [ 1001.499961][ C0] ? nmi_handle+0x2a/0x5a0 [ 1001.499986][ C0] ? unwind_next_frame+0x2e1/0x2a00 [ 1001.500020][ C0] ? default_do_nmi+0x63/0x160 [ 1001.500053][ C0] ? exc_nmi+0x123/0x1f0 [ 1001.500089][ C0] ? end_repeat_nmi+0xf/0x53 [ 1001.500128][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1001.500159][ C0] ? unwind_next_frame+0x2de/0x2a00 [ 1001.500197][ C0] ? unwind_next_frame+0x2e1/0x2a00 [ 1001.500234][ C0] ? unwind_next_frame+0x2e1/0x2a00 [ 1001.500272][ C0] ? unwind_next_frame+0x2e1/0x2a00 [ 1001.500308][ C0] [ 1001.500316][ C0] [ 1001.500329][ C0] ? ieee80211_rx_napi+0x189/0x3c0 [ 1001.500369][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.500403][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.500436][ C0] ? __kernel_text_address+0xd/0x40 [ 1001.500461][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.500495][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1001.500525][ C0] arch_stack_walk+0x151/0x1b0 [ 1001.500555][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.500594][ C0] stack_trace_save+0x118/0x1d0 [ 1001.500625][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.500653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.500693][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.500731][ C0] kasan_save_track+0x3f/0x80 [ 1001.500763][ C0] ? kasan_save_track+0x3f/0x80 [ 1001.500792][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 1001.500824][ C0] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1001.500850][ C0] ? dummy_urb_enqueue+0x7d/0x760 [ 1001.500875][ C0] ? usb_hcd_submit_urb+0x36e/0x1e80 [ 1001.500909][ C0] ? ath9k_hif_usb_reg_in_cb+0x472/0x650 [ 1001.500935][ C0] ? __usb_hcd_giveback_urb+0x42e/0x6e0 [ 1001.500969][ C0] ? dummy_timer+0x830/0x45a0 [ 1001.500993][ C0] ? __hrtimer_run_queues+0x59d/0xd50 [ 1001.501017][ C0] ? hrtimer_interrupt+0x396/0x990 [ 1001.501041][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1001.501081][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1001.501116][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.501147][ C0] ? __entry_text_end+0x1020c9/0x1020c9 [ 1001.501179][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.501212][ C0] ? unwind_get_return_address+0x71/0xc0 [ 1001.501247][ C0] ? arch_stack_walk+0x125/0x1b0 [ 1001.501268][ C0] ? stack_trace_save+0x118/0x1d0 [ 1001.501295][ C0] ? kasan_save_track+0x3f/0x80 [ 1001.501325][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 1001.501357][ C0] ? __kmalloc_noprof+0x1fc/0x400 [ 1001.501379][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1001.501407][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1001.501432][ C0] ? cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1001.501458][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1001.501493][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 1001.501525][ C0] ? ieee80211_rx_list+0x2b02/0x3780 [ 1001.501558][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.501618][ C0] __kasan_kmalloc+0x98/0xb0 [ 1001.501650][ C0] ? dummy_urb_enqueue+0x7d/0x760 [ 1001.501676][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 1001.501707][ C0] dummy_urb_enqueue+0x7d/0x760 [ 1001.501740][ C0] usb_hcd_submit_urb+0x36e/0x1e80 [ 1001.501782][ C0] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 1001.501815][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1001.501844][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1001.501885][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.501918][ C0] ? usb_submit_urb+0x10e4/0x1930 [ 1001.501942][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1001.501980][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.502019][ C0] ath9k_hif_usb_reg_in_cb+0x472/0x650 [ 1001.502048][ C0] ? usb_unanchor_urb+0x7d/0xc0 [ 1001.502082][ C0] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 1001.502121][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1001.502161][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1001.502189][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.502231][ C0] dummy_timer+0x830/0x45a0 [ 1001.502267][ C0] ? __pfx_lock_release+0x10/0x10 [ 1001.502318][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1001.502359][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 1001.502387][ C0] ? __pfx_lock_release+0x10/0x10 [ 1001.502428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.502463][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1001.502501][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1001.502536][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1001.502564][ C0] __hrtimer_run_queues+0x59d/0xd50 [ 1001.502592][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1001.502645][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1001.502674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.502717][ C0] hrtimer_interrupt+0x396/0x990 [ 1001.502766][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1001.502809][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1001.502849][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.502882][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 1001.502918][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 1001.502939][ C0] RSP: 0018:ffffc90000006c08 EFLAGS: 00000246 [ 1001.502960][ C0] RAX: ffffffff81412601 RBX: ffffc90000006c88 RCX: ffff888026129e00 [ 1001.502980][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 1001.502996][ C0] RBP: 0000000000000001 R08: ffffffff814125f8 R09: ffffffff814140bf [ 1001.503013][ C0] R10: 0000000000000003 R11: ffff888026129e00 R12: ffff888026129e00 [ 1001.503029][ C0] R13: ffffffff817f2f80 R14: dffffc0000000000 R15: 1ffff92000000d91 [ 1001.503050][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1001.503089][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 1001.503123][ C0] ? unwind_get_return_address+0x68/0xc0 [ 1001.503158][ C0] ? unwind_get_return_address+0x71/0xc0 [ 1001.503199][ C0] ? __kernel_text_address+0xd/0x40 [ 1001.503223][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 1001.503256][ C0] unwind_get_return_address+0x71/0xc0 [ 1001.503291][ C0] ? handle_softirqs+0x2c6/0x970 [ 1001.503322][ C0] arch_stack_walk+0x125/0x1b0 [ 1001.503350][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1001.503385][ C0] stack_trace_save+0x118/0x1d0 [ 1001.503412][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.503445][ C0] ? __lock_acquire+0x137a/0x2040 [ 1001.503479][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.503520][ C0] kasan_save_track+0x3f/0x80 [ 1001.503551][ C0] ? kasan_save_track+0x3f/0x80 [ 1001.503580][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 1001.503612][ C0] ? __kmalloc_noprof+0x1fc/0x400 [ 1001.503635][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1001.503661][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1001.503686][ C0] ? cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1001.503712][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1001.503746][ C0] ? ieee80211_scan_rx+0x526/0x9c0 [ 1001.503778][ C0] ? ieee80211_rx_list+0x2b02/0x3780 [ 1001.503811][ C0] ? ieee80211_rx_napi+0x18a/0x3c0 [ 1001.503844][ C0] ? ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1001.503878][ C0] ? tasklet_action_common+0x323/0x4d0 [ 1001.503910][ C0] ? handle_softirqs+0x2c6/0x970 [ 1001.503972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504008][ C0] __kasan_kmalloc+0x98/0xb0 [ 1001.504041][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1001.504072][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1001.504099][ C0] __kmalloc_noprof+0x1fc/0x400 [ 1001.504129][ C0] cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1001.504168][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1001.504217][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 1001.504248][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1001.504277][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.504316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504353][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1001.504383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504416][ C0] ? ieee80211_rx_handlers+0xb7be/0xb830 [ 1001.504451][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1001.504480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504514][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1001.504541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504573][ C0] ? validate_chain+0x11e/0x5900 [ 1001.504596][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504629][ C0] ? ieee80211_rx_handlers+0xb7be/0xb830 [ 1001.504679][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1001.504706][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1001.504733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504766][ C0] ? mark_lock+0x9a/0x350 [ 1001.504802][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504835][ C0] ? __lock_acquire+0x137a/0x2040 [ 1001.504880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.504923][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1001.504955][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1001.504995][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1001.505032][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1001.505071][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1001.505112][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1001.505156][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.505188][ C0] ? kcov_remote_start+0x97/0x7d0 [ 1001.505220][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.505252][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 1001.505281][ C0] ieee80211_scan_rx+0x526/0x9c0 [ 1001.505317][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.505356][ C0] ieee80211_rx_list+0x2b02/0x3780 [ 1001.505389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.505422][ C0] ? __lock_acquire+0x137a/0x2040 [ 1001.505466][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1001.505511][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1001.505547][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.505580][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1001.505615][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.505656][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1001.505689][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 1001.505723][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1001.505764][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1001.505803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.505836][ C0] ? skb_dequeue+0x113/0x150 [ 1001.505862][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1001.505902][ C0] tasklet_action_common+0x323/0x4d0 [ 1001.505941][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1001.505981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.506014][ C0] ? workqueue_softirq_action+0xce/0x140 [ 1001.506053][ C0] handle_softirqs+0x2c6/0x970 [ 1001.506092][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1001.506126][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1001.506160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.506193][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1001.506231][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1001.506262][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1001.506296][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1001.506333][ C0] irq_exit_rcu+0x9/0x30 [ 1001.506360][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1001.506397][ C0] [ 1001.506405][ C0] [ 1001.506414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.506445][ C0] RIP: 0010:kmem_cache_free_bulk+0x1a9/0x370 [ 1001.506473][ C0] Code: 6d 0b 00 48 8b 5c 24 08 e9 ce fe ff ff 89 6c 24 14 0f 1f 44 00 00 45 31 ed 31 ed 45 31 e4 41 8b 76 1c 41 8b 46 28 4c 8b 3c 18 <48> 89 df e8 df ee 80 ff 41 f6 46 09 08 75 0c 41 8b 76 1c 48 89 df [ 1001.506492][ C0] RSP: 0018:ffffc9000318f968 EFLAGS: 00000202 [ 1001.506511][ C0] RAX: 0000000000000030 RBX: ffff888145ef6100 RCX: ffffffff81703fea [ 1001.506527][ C0] RDX: dffffc0000000000 RSI: 0000000000000060 RDI: ffffffff8c608d40 [ 1001.506545][ C0] RBP: 0000000000000000 R08: ffffffff941e488f R09: 1ffffffff283c911 [ 1001.506561][ C0] R10: dffffc0000000000 R11: fffffbfff283c912 R12: 0000000000000000 [ 1001.506578][ C0] R13: 0000000000000000 R14: ffff88801ac41280 R15: 0000000000000000 [ 1001.506601][ C0] ? mark_lock+0x9a/0x350 [ 1001.506640][ C0] ? kmem_cache_free_bulk+0x1f8/0x370 [ 1001.506667][ C0] ? kvfree_rcu_bulk+0x24b/0x4e0 [ 1001.506710][ C0] kvfree_rcu_bulk+0x24b/0x4e0 [ 1001.506742][ C0] ? kvfree_rcu_bulk+0x101/0x4e0 [ 1001.506778][ C0] kfree_rcu_monitor+0x8a4/0x1020 [ 1001.506820][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1001.506855][ C0] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 1001.506898][ C0] ? process_scheduled_works+0x945/0x1830 [ 1001.506929][ C0] process_scheduled_works+0xa2e/0x1830 [ 1001.506984][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1001.507051][ C0] ? assign_work+0x364/0x3d0 [ 1001.507089][ C0] worker_thread+0x86d/0xd10 [ 1001.507129][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1001.507169][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1001.507206][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1001.507238][ C0] kthread+0x2f2/0x390 [ 1001.507259][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1001.507291][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.507313][ C0] ret_from_fork+0x4d/0x80 [ 1001.507346][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.507367][ C0] ret_from_fork_asm+0x1a/0x30 [ 1001.507415][ C0] [ 1003.042215][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1003.049170][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1003.059711][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1003.069803][ T30] Call Trace: [ 1003.073110][ T30] [ 1003.076066][ T30] dump_stack_lvl+0x241/0x360 [ 1003.080781][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.086015][ T30] ? __pfx__printk+0x10/0x10 [ 1003.090641][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1003.096695][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.103164][ T30] ? vscnprintf+0x5d/0x90 [ 1003.107538][ T30] panic+0x349/0x860 [ 1003.111474][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.117243][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1003.123452][ T30] ? __pfx_panic+0x10/0x10 [ 1003.128088][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1003.133525][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.139245][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1003.144857][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.150543][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1003.155968][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1003.162180][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1003.168397][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.174112][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1003.180337][ T30] watchdog+0x1033/0x1040 [ 1003.184717][ T30] ? watchdog+0x1ea/0x1040 [ 1003.189183][ T30] ? __pfx_watchdog+0x10/0x10 [ 1003.193894][ T30] kthread+0x2f2/0x390 [ 1003.197986][ T30] ? __pfx_watchdog+0x10/0x10 [ 1003.202699][ T30] ? __pfx_kthread+0x10/0x10 [ 1003.207310][ T30] ret_from_fork+0x4d/0x80 [ 1003.211755][ T30] ? __pfx_kthread+0x10/0x10 [ 1003.216364][ T30] ret_from_fork_asm+0x1a/0x30 [ 1003.221176][ T30] [ 1003.228570][ T30] Kernel Offset: disabled [ 1003.232898][ T30] Rebooting in 86400 seconds..