last executing test programs: 7.573469954s ago: executing program 3 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.843836855s ago: executing program 3 (id=168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 6.645129281s ago: executing program 0 (id=171): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) 6.212321855s ago: executing program 2 (id=173): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800a0001006c696d6974000000100002800c00014000000000000000040900010073797a30000000000904020073797a320000000014"], 0x78}}, 0x0) 6.111973468s ago: executing program 3 (id=174): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x93, 0x89, 0x3f, 0x10, 0x46d, 0x900, 0xfa5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0xf0, 0xd5, 0x9a}}]}}]}}, 0x0) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) 6.044414509s ago: executing program 0 (id=175): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) 5.702492954s ago: executing program 4 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 5.53637861s ago: executing program 2 (id=178): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.396036423s ago: executing program 0 (id=180): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.96270831s ago: executing program 4 (id=181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) syz_open_dev$video4linux(0x0, 0x7f, 0x80) madvise(&(0x7f0000163000/0x1000)=nil, 0x1000, 0x9) 4.815990949s ago: executing program 1 (id=182): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffff000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2, 0x4, 0x7, 0x80, 0x0, 0x3}, &(0x7f0000000180)=0x14) 4.632618028s ago: executing program 2 (id=183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4.008522693s ago: executing program 1 (id=184): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 3.656628503s ago: executing program 0 (id=185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x161) recvfrom(r0, 0x0, 0x0, 0x40014757, 0x0, 0x0) 3.634215126s ago: executing program 2 (id=186): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001400)=""/226, 0x57}], 0x1) 3.352708571s ago: executing program 3 (id=187): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 3.106192731s ago: executing program 4 (id=188): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYRES64=0x0], 0x1, 0xf01, &(0x7f0000001e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$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") read(r0, &(0x7f0000000400)=""/4096, 0x1000) 2.825770606s ago: executing program 0 (id=189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect(0x0, 0x8b, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xdd, 0xc4, 0x85, 0x40, 0x8ca, 0x3103, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x37, 0x0, 0xc0, 0x7f, [{{0x9, 0x4, 0x90, 0x2, 0x0, 0x10, 0xf, 0x54, 0x1, [@generic={0x67, 0x2, "43748ae6fd93e444475461588ebfff8401b62f0431a7066d7dc7df56d2e18b6ed06f203c13ccd29ddd99ef8e348b02a677396e2193451668ca41e8d0e4920dc2ab06565d237c59d0961f7cc3503ab33e19fc69e83914f109df9afcf019dac487dae9e12df7"}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x0, 0x9, 0x1, 0x10}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0xa}]}, 0x1, [{0xb4, &(0x7f0000000180)=@string={0xb4, 0x3, "10c1e83b327de83873c1efdb1612ed63a9a32324d95af2b6a3cb24925430cf931027031623636a16720466f537007a00226f412875f85d9b9abd1e123061d940fd76b8190aac847b8c418464d464b4d536d5c0bdcd28e4edaca4cfe35f0fc80b1af3a50e94b7814141adde4399ce3fe01873c9ecec5520458b7eb9e826aa08455d7feee8d3a74fdf390513ed37a7367a47eb6b450f0304924c3409ae3ba2730257e5135dbcc273a6090e8bf0206d48c58ba0"}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.719376384s ago: executing program 1 (id=190): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2.661660669s ago: executing program 2 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x0, 0x0, 0x2a, 0x0, "9e7bc47f631cfaff3e1a34bd7968afc95e2b4ef810637b038252ff2b42d0bced59a4719dce7a6c88931dffab22a81a3fc7621c082d0f604f54c39544c5f2e9c346555ea8fa21b7f1a144a78d91de45e7"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 2.212546049s ago: executing program 1 (id=192): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r0 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) 1.812040099s ago: executing program 2 (id=193): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f00000005c0)={0x20, 0x18}, 0x0, 0x0}) 1.530890087s ago: executing program 4 (id=194): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, r0, 0x0) 1.36292205s ago: executing program 3 (id=195): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@loopback, @local, @local, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008502"]) 687.600193ms ago: executing program 4 (id=196): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044001}, 0x240080d0) 643.807986ms ago: executing program 1 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4844) 60.534104ms ago: executing program 0 (id=197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x93, 0x89, 0x3f, 0x10, 0x46d, 0x900, 0xfa5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0xf0, 0xd5, 0x9a}}]}}]}}, 0x0) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) 55.338446ms ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 52.859234ms ago: executing program 3 (id=199): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r1}, 0x10) 0s ago: executing program 4 (id=200): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x23845480, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 193.530494][ T5766] cgroup: Unknown subsys name 'net' [ 193.681913][ T5766] cgroup: Unknown subsys name 'cpuset' [ 193.698792][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.517348][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.524225][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.623763][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 250.080022][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.089779][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.098720][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.112116][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.120176][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.135205][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.145959][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.155623][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.164583][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.177517][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.186743][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.207929][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.219386][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.264755][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.276215][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.323074][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.332708][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.347880][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.352072][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.365708][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.374440][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.393871][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.403916][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.417571][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.447004][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.583162][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 252.302871][ T5795] Bluetooth: hci0: command tx timeout [ 252.360938][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 252.373563][ T5795] Bluetooth: hci2: command tx timeout [ 252.379293][ T5795] Bluetooth: hci1: command tx timeout [ 252.454178][ T5795] Bluetooth: hci4: command tx timeout [ 252.611135][ T5795] Bluetooth: hci3: command tx timeout [ 252.646464][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 252.760444][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 252.984759][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.992554][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.000266][ T5791] bridge_slave_0: entered allmulticast mode [ 253.015056][ T5791] bridge_slave_0: entered promiscuous mode [ 253.062946][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 253.084647][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.092337][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.112993][ T5791] bridge_slave_1: entered allmulticast mode [ 253.122771][ T5791] bridge_slave_1: entered promiscuous mode [ 253.549707][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.560736][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.568445][ T5788] bridge_slave_0: entered allmulticast mode [ 253.578138][ T5788] bridge_slave_0: entered promiscuous mode [ 253.613835][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.663492][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.671279][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.678932][ T5788] bridge_slave_1: entered allmulticast mode [ 253.690514][ T5788] bridge_slave_1: entered promiscuous mode [ 253.713633][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.077600][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.147368][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.159745][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.169974][ T5796] bridge_slave_0: entered allmulticast mode [ 254.181669][ T5796] bridge_slave_0: entered promiscuous mode [ 254.208143][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.282254][ T5791] team0: Port device team_slave_0 added [ 254.335050][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.343102][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.350932][ T5796] bridge_slave_1: entered allmulticast mode [ 254.359433][ T5796] bridge_slave_1: entered promiscuous mode [ 254.371210][ T5795] Bluetooth: hci0: command tx timeout [ 254.419404][ T5791] team0: Port device team_slave_1 added [ 254.427538][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.435356][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.443143][ T5802] bridge_slave_0: entered allmulticast mode [ 254.452976][ T5802] bridge_slave_0: entered promiscuous mode [ 254.466840][ T5795] Bluetooth: hci1: command tx timeout [ 254.472748][ T5795] Bluetooth: hci2: command tx timeout [ 254.531200][ T5792] Bluetooth: hci4: command tx timeout [ 254.579844][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.590084][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.598040][ T5802] bridge_slave_1: entered allmulticast mode [ 254.607417][ T5802] bridge_slave_1: entered promiscuous mode [ 254.666811][ T5788] team0: Port device team_slave_0 added [ 254.690931][ T5792] Bluetooth: hci3: command tx timeout [ 254.821910][ T5788] team0: Port device team_slave_1 added [ 254.840113][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.892166][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.899848][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.907959][ T5794] bridge_slave_0: entered allmulticast mode [ 254.916619][ T5794] bridge_slave_0: entered promiscuous mode [ 254.967659][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.975025][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.001702][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.019149][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.026527][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.053039][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.076999][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.129344][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.137126][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.145068][ T5794] bridge_slave_1: entered allmulticast mode [ 255.154972][ T5794] bridge_slave_1: entered promiscuous mode [ 255.176782][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.281573][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.288802][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.315311][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.337774][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.398327][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.445542][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.452990][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.479460][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.596910][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.656067][ T5796] team0: Port device team_slave_0 added [ 255.678958][ T5791] hsr_slave_0: entered promiscuous mode [ 255.689347][ T5791] hsr_slave_1: entered promiscuous mode [ 255.833197][ T5796] team0: Port device team_slave_1 added [ 255.885189][ T5802] team0: Port device team_slave_0 added [ 256.019643][ T5788] hsr_slave_0: entered promiscuous mode [ 256.029996][ T5788] hsr_slave_1: entered promiscuous mode [ 256.038594][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.046534][ T5788] Cannot create hsr debugfs directory [ 256.061224][ T5802] team0: Port device team_slave_1 added [ 256.075533][ T5794] team0: Port device team_slave_0 added [ 256.094767][ T5794] team0: Port device team_slave_1 added [ 256.267552][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.275007][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.302195][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.450899][ T5792] Bluetooth: hci0: command tx timeout [ 256.464853][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.473770][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.501132][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.532819][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.540006][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.548821][ T5792] Bluetooth: hci2: command tx timeout [ 256.566407][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.570789][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.581200][ T5795] Bluetooth: hci1: command tx timeout [ 256.582539][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.621827][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.622414][ T5792] Bluetooth: hci4: command tx timeout [ 256.727782][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.735198][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.761631][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.778450][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.785938][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.786239][ T5792] Bluetooth: hci3: command tx timeout [ 256.812276][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.159564][ T5796] hsr_slave_0: entered promiscuous mode [ 257.169910][ T5796] hsr_slave_1: entered promiscuous mode [ 257.179109][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.186961][ T5796] Cannot create hsr debugfs directory [ 257.386798][ T5794] hsr_slave_0: entered promiscuous mode [ 257.397192][ T5794] hsr_slave_1: entered promiscuous mode [ 257.405873][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.413831][ T5794] Cannot create hsr debugfs directory [ 257.578364][ T5802] hsr_slave_0: entered promiscuous mode [ 257.589017][ T5802] hsr_slave_1: entered promiscuous mode [ 257.597969][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.605896][ T5802] Cannot create hsr debugfs directory [ 258.340214][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.385177][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.499516][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.541612][ T5792] Bluetooth: hci0: command tx timeout [ 258.615374][ T5792] Bluetooth: hci2: command tx timeout [ 258.621441][ T5792] Bluetooth: hci1: command tx timeout [ 258.698646][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.706939][ T5795] Bluetooth: hci4: command tx timeout [ 258.728426][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.787137][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.851545][ T5795] Bluetooth: hci3: command tx timeout [ 258.922879][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.969068][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.192387][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.279264][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.309518][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.334130][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.509806][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.575635][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.672006][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.742503][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.920172][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.004183][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.047235][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.077728][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.423147][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.457591][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.687014][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.735656][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.798239][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.805948][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.872668][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.889837][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.897530][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.004149][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.011830][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.106883][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.114583][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.207168][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.437811][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.445478][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.470399][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.478103][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.560356][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.599836][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.816928][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.843249][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.942823][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.950432][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.050371][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.058269][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.074506][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.082229][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.161791][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.169380][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.813592][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.309244][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.404345][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.463032][ T5788] veth0_vlan: entered promiscuous mode [ 264.556250][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.635647][ T5788] veth1_vlan: entered promiscuous mode [ 264.852387][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.087378][ T5794] veth0_vlan: entered promiscuous mode [ 265.176663][ T5788] veth0_macvtap: entered promiscuous mode [ 265.226580][ T5802] veth0_vlan: entered promiscuous mode [ 265.266186][ T5788] veth1_macvtap: entered promiscuous mode [ 265.314822][ T5794] veth1_vlan: entered promiscuous mode [ 265.346196][ T5791] veth0_vlan: entered promiscuous mode [ 265.359009][ T5802] veth1_vlan: entered promiscuous mode [ 265.497370][ T5791] veth1_vlan: entered promiscuous mode [ 265.606798][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.741273][ T5794] veth0_macvtap: entered promiscuous mode [ 265.777849][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.851196][ T5802] veth0_macvtap: entered promiscuous mode [ 265.884265][ T5794] veth1_macvtap: entered promiscuous mode [ 265.915321][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.924710][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.933956][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.943170][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.992095][ T5791] veth0_macvtap: entered promiscuous mode [ 266.017867][ T5802] veth1_macvtap: entered promiscuous mode [ 266.091028][ T5791] veth1_macvtap: entered promiscuous mode [ 266.219080][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.253687][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.354117][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.389221][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.452211][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.496136][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.507498][ T5802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.517851][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.527105][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.565848][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.575270][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.584517][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.593713][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.635524][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.711987][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.722865][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.733508][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.742958][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.954507][ T5796] veth0_vlan: entered promiscuous mode [ 268.110524][ T5796] veth1_vlan: entered promiscuous mode [ 268.493460][ T5796] veth0_macvtap: entered promiscuous mode [ 268.574249][ T5796] veth1_macvtap: entered promiscuous mode [ 268.770288][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.890492][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.975813][ T5796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.986459][ T5796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.997110][ T5796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.007570][ T5796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.585374][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.594209][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.868436][ T4025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.876775][ T4025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.043658][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.051831][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.248655][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.257881][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.429191][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.437487][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.574209][ T5788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 274.644287][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.653323][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.687767][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.696629][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.002998][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.011598][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.219140][ T5976] loop3: detected capacity change from 0 to 128 [ 276.301727][ T5976] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 276.978627][ T5982] loop2: detected capacity change from 0 to 2048 [ 277.079244][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.087785][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.218893][ T5984] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.463249][ T5984] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 277.474954][ T5984] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 277.529443][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.538058][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.572337][ T5984] Remounting filesystem read-only [ 279.082259][ T24] psmouse serio2: Failed to reset mouse on : -5 [ 279.375891][ T6010] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.517642][ T5104] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 279.740994][ T5104] usb 5-1: Using ep0 maxpacket: 16 [ 280.008147][ T6013] dvmrp1: entered allmulticast mode [ 280.179756][ T6013] dvmrp1: left allmulticast mode [ 280.767667][ T5104] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 280.777078][ T5104] usb 5-1: can't read configurations, error -71 [ 281.795452][ T6022] loop2: detected capacity change from 0 to 256 [ 281.870078][ T6022] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a72f0b3, utbl_chksum : 0xe619d30d) [ 282.471364][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 282.481190][ T5104] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.505649][ T6030] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 282.508744][ T6029] ======================================================= [ 282.508744][ T6029] WARNING: The mand mount option has been deprecated and [ 282.508744][ T6029] and is ignored by this kernel. Remove the mand [ 282.508744][ T6029] option from the mount to silence this warning. [ 282.508744][ T6029] ======================================================= [ 282.513832][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24'. [ 282.609373][ T6030] team0: Port device netdevsim1 added [ 282.675779][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.687232][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.687959][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.697438][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.709161][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.721664][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.731551][ T5104] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.740951][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.754120][ T5104] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.754269][ T5104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.799956][ T5104] usb 2-1: config 0 descriptor?? [ 282.923597][ T9] usb 1-1: config 0 descriptor?? [ 283.219722][ T6033] loop4: detected capacity change from 0 to 256 [ 283.292114][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 283.315317][ T6033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 283.325335][ T5104] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 283.369781][ T5104] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 283.386580][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 283.402852][ T9] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 283.936864][ T6040] capability: warning: `syz.2.28' uses 32-bit capabilities (legacy support in use) [ 284.057436][ T6040] loop2: detected capacity change from 0 to 512 [ 284.103243][ T6040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.234230][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.247718][ T6040] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.344088][ T24] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 284.559779][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.581164][ T24] psmouse serio2: Failed to enable mouse on [ 284.683349][ T5843] usb 1-1: USB disconnect, device number 2 [ 285.272043][ T6053] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 285.474280][ T1602] usb 2-1: USB disconnect, device number 2 [ 285.784422][ T6060] block nbd3: shutting down sockets [ 286.067202][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 286.155253][ T30] audit: type=1326 audit(1747414100.557:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 286.279864][ T24] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 286.288895][ T24] usb 1-1: config 0 has no interface number 0 [ 286.361593][ T1602] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 286.376437][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 286.386059][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.394618][ T24] usb 1-1: Product: syz [ 286.399059][ T24] usb 1-1: Manufacturer: syz [ 286.404181][ T24] usb 1-1: SerialNumber: syz [ 286.446363][ T24] usb 1-1: config 0 descriptor?? [ 286.529702][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 286.600932][ T1602] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.612841][ T1602] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 286.693614][ T1602] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.703674][ T1602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.712177][ T1602] usb 5-1: Product: syz [ 286.716607][ T1602] usb 5-1: Manufacturer: syz [ 286.721738][ T1602] usb 5-1: SerialNumber: syz [ 286.802040][ T1602] cdc_mbim 5-1:1.0: skipping garbage [ 286.990220][ T6072] loop2: detected capacity change from 0 to 1024 [ 287.029412][ T6067] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.050995][ T24] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 287.059271][ T24] usb 1-1: Firmware version (0.0) predates our first public release. [ 287.073054][ T24] usb 1-1: Please update to version 0.2 or newer [ 287.380030][ T24] usb 1-1: USB disconnect, device number 3 [ 287.661253][ T5104] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 287.753804][ T6067] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.771370][ T1602] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 287.793320][ T1602] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 287.821350][ T1602] wwan wwan0: port wwan0mbim0 attached [ 287.841699][ T1602] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 26:51:34:e6:bc:8c [ 287.862970][ T5104] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.874645][ T5104] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.888132][ T5104] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.903324][ T5104] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.912840][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.035792][ T5104] usb 4-1: config 0 descriptor?? [ 288.036863][ T1602] usb 5-1: USB disconnect, device number 4 [ 288.048965][ T1602] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 288.079839][ T6081] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 288.164316][ T1602] wwan wwan0: port wwan0mbim0 disconnected [ 288.508259][ T5104] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 288.551767][ T5104] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 288.660309][ T6085] dvmrp5: entered allmulticast mode [ 288.737533][ T6085] dvmrp5: left allmulticast mode [ 288.792679][ T5104] usb 4-1: USB disconnect, device number 2 [ 288.999448][ T6089] Bluetooth: MGMT ver 1.23 [ 289.478697][ T6097] loop0: detected capacity change from 0 to 64 [ 289.679970][ T6097] minix_free_block (loop0:1): bit already cleared [ 289.687831][ T6097] minix_free_block (loop0:4): bit already cleared [ 289.694802][ T6097] minix_free_block (loop0:3): bit already cleared [ 289.701634][ T6097] minix_free_block (loop0:2): bit already cleared [ 289.708296][ T6097] minix_free_block (loop0:1): bit already cleared [ 290.580907][ T6105] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.55'. [ 290.711574][ T6100] loop4: detected capacity change from 0 to 32768 [ 290.837860][ T6100] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 290.969733][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.976765][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.189743][ T6100] XFS (loop4): Ending clean mount [ 291.208554][ T6100] XFS (loop4): Quotacheck needed: Please wait. [ 291.366753][ T6100] XFS (loop4): Quotacheck: Done. [ 291.523488][ T5796] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 291.633425][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 292.151380][ T6128] macvlan1: entered promiscuous mode [ 292.164885][ T6128] ipvlan0: entered promiscuous mode [ 292.176885][ T6128] ipvlan0: left promiscuous mode [ 292.210486][ T6128] macvlan1: left promiscuous mode [ 292.401099][ T1602] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 292.642313][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.657992][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.669005][ T1602] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.682575][ T1602] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.699968][ T1602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.853178][ T1602] usb 1-1: config 0 descriptor?? [ 293.396394][ T1602] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 293.455785][ T1602] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 293.581306][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 293.668901][ T1602] usb 1-1: USB disconnect, device number 4 [ 293.798171][ T6146] netlink: 'syz.3.69': attribute type 3 has an invalid length. [ 294.207918][ T30] audit: type=1800 audit(1747414108.627:3): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.70" name="cgroup.controllers" dev="tmpfs" ino=90 res=0 errno=0 [ 294.823956][ T6158] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 294.832526][ T6158] netlink: 'syz.0.74': attribute type 2 has an invalid length. [ 294.924811][ T6158] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 294.933391][ T6158] netlink: 'syz.0.74': attribute type 2 has an invalid length. [ 295.265134][ T5104] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 295.472345][ T5104] usb 4-1: Using ep0 maxpacket: 16 [ 295.507585][ T5104] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 295.516408][ T5104] usb 4-1: config 0 has no interface number 0 [ 295.523275][ T5104] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 295.534839][ T5104] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 295.655184][ T5104] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 295.668717][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 295.678418][ T5104] usb 4-1: Product: syz [ 295.684192][ T5104] usb 4-1: SerialNumber: syz [ 295.773260][ T5104] usb 4-1: config 0 descriptor?? [ 295.809348][ T5104] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 295.819749][ T5104] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 295.952331][ T6175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 296.023682][ T6175] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 296.270219][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 296.274399][ T1602] usb 4-1: USB disconnect, device number 3 [ 296.277429][ C1] cm109 4-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 296.362156][ T1602] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 296.758727][ T6184] loop2: detected capacity change from 0 to 2048 [ 298.573056][ T6213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 299.391494][ T6223] vlan2: entered allmulticast mode [ 299.396912][ T6223] hsr0: entered allmulticast mode [ 299.402491][ T6223] hsr_slave_0: entered allmulticast mode [ 299.408385][ T6223] hsr_slave_1: entered allmulticast mode [ 299.592215][ T1602] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.660503][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 299.790955][ T1602] usb 5-1: Using ep0 maxpacket: 16 [ 299.821596][ T1602] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 299.833720][ T1602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 299.860918][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 299.898647][ T9] usb 2-1: config 0 has an invalid interface number: 60 but max is 0 [ 299.908352][ T9] usb 2-1: config 0 has no interface number 0 [ 299.932941][ T1602] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 299.942904][ T1602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.951505][ T1602] usb 5-1: Product: syz [ 299.956143][ T1602] usb 5-1: Manufacturer: syz [ 299.961274][ T1602] usb 5-1: SerialNumber: syz [ 299.982475][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 299.992090][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.000374][ T9] usb 2-1: Product: syz [ 300.005010][ T9] usb 2-1: Manufacturer: syz [ 300.009860][ T9] usb 2-1: SerialNumber: syz [ 300.053155][ T1602] usb 5-1: config 0 descriptor?? [ 300.062800][ T9] usb 2-1: config 0 descriptor?? [ 300.084715][ T9] gspca_main: spca500-2.14.0 probing 046d:0900 [ 300.124807][ T1602] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.135610][ T1602] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 300.223192][ T6230] loop3: detected capacity change from 0 to 128 [ 300.872480][ T9] gspca_spca500: reg write: error -71 [ 300.906900][ T9] gspca_spca500: reg write: error -71 [ 300.931313][ T9] gspca_spca500: reg write: error -71 [ 301.561721][ T9] gspca_spca500: reg write: error -71 [ 301.641608][ T1602] em28xx 5-1:0.0: chip ID is em2874 [ 301.672781][ T9] gspca_spca500: reg write: error -71 [ 301.695683][ T9] gspca_spca500: reg write: error -71 [ 301.730506][ T9] gspca_spca500: reg write: error -71 [ 301.737618][ T6234] loop2: detected capacity change from 0 to 32768 [ 301.749224][ T5104] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 301.757604][ T9] gspca_spca500: reg write: error -71 [ 301.774982][ T9] gspca_spca500: reg write: error -71 [ 301.796011][ T9] gspca_spca500: reg write: error -71 [ 301.804078][ T9] gspca_spca500: reg write: error -71 [ 301.822070][ T9] gspca_spca500: reg write: error -71 [ 301.829273][ T1602] usb 5-1: USB disconnect, device number 5 [ 301.838411][ T1602] em28xx 5-1:0.0: Disconnecting em28xx [ 301.845372][ T9] gspca_spca500: reg write: error -71 [ 301.857653][ T9] gspca_spca500: reg write: error -71 [ 301.863893][ T6234] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 301.877057][ T1602] em28xx 5-1:0.0: Freeing device [ 301.897796][ T9] usb 2-1: USB disconnect, device number 3 [ 301.951421][ T5104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.963226][ T5104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.973887][ T5104] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 301.983362][ T5104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.042366][ T5104] usb 1-1: config 0 descriptor?? [ 302.154163][ T6234] XFS (loop2): Ending clean mount [ 302.170103][ T6234] XFS (loop2): Quotacheck needed: Please wait. [ 302.237568][ T6234] XFS (loop2): Quotacheck: Done. [ 302.409726][ T5794] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 302.647041][ T5104] kone 0003:1E7D:2CED.0005: item fetching failed at offset 2/5 [ 302.712155][ T5104] kone 0003:1E7D:2CED.0005: parse failed [ 302.718380][ T5104] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22 [ 302.868557][ T5104] usb 1-1: USB disconnect, device number 5 [ 303.221023][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.421247][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 303.471245][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.482837][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.571676][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.581489][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 303.590121][ T24] usb 2-1: Product: syz [ 303.594848][ T24] usb 2-1: Manufacturer: syz [ 303.701627][ T24] hub 2-1:4.0: USB hub found [ 303.954803][ T24] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 304.301789][ T9] usb 2-1: USB disconnect, device number 4 [ 305.926133][ T6283] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.014345][ T6279] loop3: detected capacity change from 0 to 4096 [ 306.125508][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.233832][ T6279] EXT4-fs (loop3): shut down requested (1) [ 306.248117][ T6279] fs-verity: sha256 using implementation "sha256-generic" [ 306.527658][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.706169][ T6293] loop0: detected capacity change from 0 to 512 [ 306.736563][ T6293] EXT4-fs: Ignoring removed orlov option [ 306.796512][ T6293] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.907655][ T6293] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.128: casefold flag without casefold feature [ 306.947921][ T6293] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.128: couldn't read orphan inode 15 (err -117) [ 306.992601][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.993563][ T6298] loop2: detected capacity change from 0 to 128 [ 307.282855][ T6302] input: syz0 as /devices/virtual/input/input7 [ 307.418318][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.921377][ T6312] loop2: detected capacity change from 0 to 256 [ 308.123284][ T6312] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 308.137368][ T6312] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 308.756379][ T6310] loop0: detected capacity change from 0 to 32768 [ 308.888937][ T6310] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 309.195883][ T6310] XFS (loop0): Ending clean mount [ 309.206594][ T6310] XFS (loop0): Quotacheck needed: Please wait. [ 309.256925][ T6310] XFS (loop0): Quotacheck: Done. [ 309.366463][ T5788] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 309.452677][ T6332] loop2: detected capacity change from 0 to 164 [ 309.502065][ T6332] Unable to read rock-ridge attributes [ 309.841047][ T5104] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 310.051867][ T5104] usb 2-1: Using ep0 maxpacket: 16 [ 310.071552][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.083194][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.093542][ T5104] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 310.106386][ T5104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.125569][ T5104] usb 2-1: config 0 descriptor?? [ 310.593085][ T5104] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0006/input/input8 [ 310.680850][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 310.724940][ T5104] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 310.851644][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 310.896425][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 310.907277][ T9] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 310.982106][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 310.991881][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.000177][ T9] usb 3-1: Product: syz [ 311.004684][ T9] usb 3-1: Manufacturer: syz [ 311.009519][ T9] usb 3-1: SerialNumber: syz [ 311.917903][ T9] usb 3-1: USB disconnect, device number 2 [ 312.320954][ T5122] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 312.524159][ T24] usb 2-1: USB disconnect, device number 5 [ 312.574512][ T5122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 312.623068][ T5122] usb 5-1: not running at top speed; connect to a high speed hub [ 312.658832][ T5122] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 312.671928][ T5122] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 312.684673][ T5122] usb 5-1: config 4 has no interface number 0 [ 312.825875][ T5122] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 312.835471][ T5122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.844051][ T5122] usb 5-1: Product: syz [ 312.848490][ T5122] usb 5-1: Manufacturer: syz [ 312.853527][ T5122] usb 5-1: SerialNumber: syz [ 313.231495][ T5122] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 313.238578][ T5122] usb 5-1: No valid video chain found. [ 313.285597][ T5122] usb 5-1: USB disconnect, device number 6 [ 313.881954][ T6369] block device autoloading is deprecated and will be removed. [ 314.236759][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 315.135879][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 315.562320][ T6395] loop8: detected capacity change from 0 to 8 [ 315.598390][ T6395] Dev loop8: unable to read RDB block 8 [ 315.605003][ T6395] loop8: unable to read partition table [ 315.648822][ T6395] loop8: partition table beyond EOD, truncated [ 315.657319][ T6395] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 316.157947][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 316.764702][ T5122] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.020018][ T6416] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 317.100960][ T5122] usb 4-1: Using ep0 maxpacket: 16 [ 317.119865][ T5122] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 317.129002][ T5122] usb 4-1: config 0 has no interface number 0 [ 317.363019][ T5122] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 317.376526][ T5122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.386060][ T5122] usb 4-1: Product: syz [ 317.390490][ T5122] usb 4-1: Manufacturer: syz [ 317.395470][ T5122] usb 4-1: SerialNumber: syz [ 317.462629][ T5122] usb 4-1: config 0 descriptor?? [ 317.488806][ T5122] gspca_main: spca500-2.14.0 probing 046d:0900 [ 317.866629][ T5122] gspca_spca500: reg write: error -71 [ 317.881298][ T5122] gspca_spca500: reg write: error -71 [ 317.929201][ T5122] gspca_spca500: reg write: error -71 [ 317.939643][ T5122] gspca_spca500: reg write: error -71 [ 317.943465][ T1270] af_packet: tpacket_rcv: packet too big, clamped from 4356 to 3952. macoff=96 [ 317.965671][ T5122] gspca_spca500: reg write: error -71 [ 317.974811][ T5122] gspca_spca500: reg write: error -71 [ 318.011745][ T5122] gspca_spca500: reg write: error -71 [ 318.031184][ T5122] gspca_spca500: reg write: error -71 [ 318.069884][ T5122] gspca_spca500: reg write: error -71 [ 318.077328][ T5122] gspca_spca500: reg write: error -71 [ 318.102059][ T5122] gspca_spca500: reg write: error -71 [ 318.119263][ T5122] gspca_spca500: reg write: error -71 [ 318.129486][ T5122] gspca_spca500: reg write: error -71 [ 318.177826][ T5122] gspca_spca500: reg write: error -71 [ 318.242560][ T5122] usb 4-1: USB disconnect, device number 4 [ 319.715051][ T6440] loop4: detected capacity change from 0 to 4096 [ 319.876304][ T6448] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.950960][ T5122] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 319.991281][ T30] audit: type=1800 audit(1747414134.417:4): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 320.211167][ T5122] usb 1-1: Using ep0 maxpacket: 16 [ 320.225389][ T5122] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.236964][ T5122] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.250840][ T5122] usb 1-1: config 0 interface 0 has no altsetting 0 [ 320.257797][ T5122] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 320.268368][ T5122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.317027][ T5122] usb 1-1: config 0 descriptor?? [ 320.583952][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.594104][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.932488][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 320.946777][ T5122] hid (null): global environment stack underflow [ 320.954106][ T5122] hid (null): global environment stack underflow [ 320.966585][ T5122] hid (null): invalid report_size 6584 [ 320.973897][ T5122] hid (null): unknown global tag 0xd [ 320.979448][ T5122] hid (null): global environment stack underflow [ 320.986336][ T5122] hid (null): unknown global tag 0xd [ 320.992076][ T5122] hid (null): unknown global tag 0xd [ 320.997612][ T5122] hid (null): unknown global tag 0xe [ 321.003638][ T5122] hid (null): unknown global tag 0xe [ 321.009314][ T5122] hid (null): unknown global tag 0xc [ 321.120986][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 321.121590][ T5122] hid (null): unknown global tag 0xc [ 321.133173][ T5122] hid (null): report_id 0 is invalid [ 321.149841][ T9] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 321.158595][ T9] usb 3-1: config 1 has no interface number 0 [ 321.166780][ T5122] usb 1-1: USB disconnect, device number 6 [ 321.176215][ T9] usb 3-1: config 1 interface 242 has no altsetting 0 [ 321.274910][ T9] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 321.284830][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.293350][ T9] usb 3-1: Product: syz [ 321.297770][ T9] usb 3-1: Manufacturer: syz [ 321.302706][ T9] usb 3-1: SerialNumber: syz [ 322.448311][ T9] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 322.461958][ T9] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 322.475105][ T9] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 322.487269][ T9] ===================================================== [ 322.500200][ T9] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 322.508703][ T9] usbnet_probe+0x2e57/0x4390 [ 322.514003][ T9] usb_probe_interface+0xd04/0x1310 [ 322.519438][ T9] really_probe+0x4d4/0xd90 [ 322.524306][ T9] __driver_probe_device+0x268/0x380 [ 322.529841][ T9] driver_probe_device+0x70/0x8b0 [ 322.535285][ T9] __device_attach_driver+0x4ee/0x950 [ 322.541036][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.546088][ T9] __device_attach+0x3c8/0x5c0 [ 322.551185][ T9] device_initial_probe+0x33/0x40 [ 322.557003][ T9] bus_probe_device+0x3ba/0x5e0 [ 322.562154][ T9] device_add+0x12a9/0x1c10 [ 322.566868][ T9] usb_set_configuration+0x3493/0x3b70 [ 322.572844][ T9] usb_generic_driver_probe+0xfc/0x290 [ 322.578537][ T9] usb_probe_device+0x38a/0x690 [ 322.583777][ T9] really_probe+0x4d4/0xd90 [ 322.588521][ T9] __driver_probe_device+0x268/0x380 [ 322.599507][ T9] driver_probe_device+0x70/0x8b0 [ 322.606656][ T9] __device_attach_driver+0x4ee/0x950 [ 322.612636][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.617711][ T9] __device_attach+0x3c8/0x5c0 [ 322.622831][ T9] device_initial_probe+0x33/0x40 [ 322.628111][ T9] bus_probe_device+0x3ba/0x5e0 [ 322.633388][ T9] device_add+0x12a9/0x1c10 [ 322.638103][ T9] usb_new_device+0x104b/0x20c0 [ 322.643250][ T9] hub_event+0x5588/0x7580 [ 322.647878][ T9] process_scheduled_works+0xb97/0x1d90 [ 322.653878][ T9] worker_thread+0xedf/0x1590 [ 322.658818][ T9] kthread+0xd59/0xf00 [ 322.663266][ T9] ret_from_fork+0x6e/0x90 [ 322.667986][ T9] ret_from_fork_asm+0x1a/0x30 [ 322.673082][ T9] [ 322.675519][ T9] Uninit was stored to memory at: [ 322.680951][ T9] dev_addr_mod+0xb0/0x550 [ 322.685584][ T9] aqc111_bind+0x35f/0x1150 [ 322.690331][ T9] usbnet_probe+0xbe6/0x4390 [ 322.696615][ T9] usb_probe_interface+0xd04/0x1310 [ 322.707692][ T9] really_probe+0x4d4/0xd90 [ 322.713637][ T9] __driver_probe_device+0x268/0x380 [ 322.719196][ T9] driver_probe_device+0x70/0x8b0 [ 322.724675][ T9] __device_attach_driver+0x4ee/0x950 [ 322.730300][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.735478][ T9] __device_attach+0x3c8/0x5c0 [ 322.740469][ T9] device_initial_probe+0x33/0x40 [ 322.745791][ T9] bus_probe_device+0x3ba/0x5e0 [ 322.750918][ T9] device_add+0x12a9/0x1c10 [ 322.755660][ T9] usb_set_configuration+0x3493/0x3b70 [ 322.761449][ T9] usb_generic_driver_probe+0xfc/0x290 [ 322.767123][ T9] usb_probe_device+0x38a/0x690 [ 322.772299][ T9] really_probe+0x4d4/0xd90 [ 322.777040][ T9] __driver_probe_device+0x268/0x380 [ 322.782908][ T9] driver_probe_device+0x70/0x8b0 [ 322.788192][ T9] __device_attach_driver+0x4ee/0x950 [ 322.793921][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.804545][ T9] __device_attach+0x3c8/0x5c0 [ 322.809551][ T9] device_initial_probe+0x33/0x40 [ 322.816113][ T9] bus_probe_device+0x3ba/0x5e0 [ 322.821314][ T9] device_add+0x12a9/0x1c10 [ 322.826049][ T9] usb_new_device+0x104b/0x20c0 [ 322.831178][ T9] hub_event+0x5588/0x7580 [ 322.835799][ T9] process_scheduled_works+0xb97/0x1d90 [ 322.841835][ T9] worker_thread+0xedf/0x1590 [ 322.846775][ T9] kthread+0xd59/0xf00 [ 322.851245][ T9] ret_from_fork+0x6e/0x90 [ 322.855910][ T9] ret_from_fork_asm+0x1a/0x30 [ 322.861038][ T9] [ 322.863495][ T9] Uninit was stored to memory at: [ 322.868811][ T9] aqc111_bind+0x774/0x1150 [ 322.873656][ T9] usbnet_probe+0xbe6/0x4390 [ 322.878508][ T9] usb_probe_interface+0xd04/0x1310 [ 322.884052][ T9] really_probe+0x4d4/0xd90 [ 322.888793][ T9] __driver_probe_device+0x268/0x380 [ 322.894437][ T9] driver_probe_device+0x70/0x8b0 [ 322.899714][ T9] __device_attach_driver+0x4ee/0x950 [ 322.910943][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.916005][ T9] __device_attach+0x3c8/0x5c0 [ 322.922087][ T9] device_initial_probe+0x33/0x40 [ 322.927352][ T9] bus_probe_device+0x3ba/0x5e0 [ 322.943777][ T9] device_add+0x12a9/0x1c10 [ 322.954546][ T9] usb_set_configuration+0x3493/0x3b70 [ 322.960262][ T9] usb_generic_driver_probe+0xfc/0x290 [ 322.966213][ T9] usb_probe_device+0x38a/0x690 [ 322.971450][ T9] really_probe+0x4d4/0xd90 [ 322.976208][ T9] __driver_probe_device+0x268/0x380 [ 322.981841][ T9] driver_probe_device+0x70/0x8b0 [ 322.987110][ T9] __device_attach_driver+0x4ee/0x950 [ 322.992851][ T9] bus_for_each_drv+0x3e0/0x680 [ 322.997916][ T9] __device_attach+0x3c8/0x5c0 [ 323.003071][ T9] device_initial_probe+0x33/0x40 [ 323.014024][ T9] bus_probe_device+0x3ba/0x5e0 [ 323.019083][ T9] device_add+0x12a9/0x1c10 [ 323.025887][ T9] usb_new_device+0x104b/0x20c0 [ 323.031509][ T9] hub_event+0x5588/0x7580 [ 323.036140][ T9] process_scheduled_works+0xb97/0x1d90 [ 323.042055][ T9] worker_thread+0xedf/0x1590 [ 323.046952][ T9] kthread+0xd59/0xf00 [ 323.051334][ T9] ret_from_fork+0x6e/0x90 [ 323.051567][ T5122] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 323.055927][ T9] ret_from_fork_asm+0x1a/0x30 [ 323.069065][ T9] [ 323.071608][ T9] Local variable buf.i created at: [ 323.076871][ T9] aqc111_bind+0x221/0x1150 [ 323.081699][ T9] usbnet_probe+0xbe6/0x4390 [ 323.086529][ T9] [ 323.089042][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 323.101394][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.117090][ T9] Workqueue: usb_hub_wq hub_event [ 323.123601][ T9] ===================================================== [ 323.130762][ T9] Disabling lock debugging due to kernel taint [ 323.137075][ T9] Kernel panic - not syncing: kmsan.panic set ... [ 323.143670][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 323.157365][ T9] Tainted: [B]=BAD_PAGE [ 323.161634][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.171850][ T9] Workqueue: usb_hub_wq hub_event [ 323.177099][ T9] Call Trace: [ 323.180498][ T9] [ 323.183546][ T9] __dump_stack+0x26/0x30 [ 323.188088][ T9] dump_stack_lvl+0x53/0x270 [ 323.192882][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.198955][ T9] dump_stack+0x1e/0x25 [ 323.203309][ T9] panic+0x4bd/0xd50 [ 323.207459][ T9] kmsan_report+0x29d/0x2a0 [ 323.212201][ T9] ? __netdev_printk+0x677/0xa00 [ 323.217375][ T9] ? __msan_warning+0x96/0x120 [ 323.222344][ T9] ? usbnet_probe+0x2e57/0x4390 [ 323.227401][ T9] ? usb_probe_interface+0xd04/0x1310 [ 323.232983][ T9] ? really_probe+0x4d4/0xd90 [ 323.237866][ T9] ? __driver_probe_device+0x268/0x380 [ 323.243522][ T9] ? driver_probe_device+0x70/0x8b0 [ 323.248936][ T9] ? __device_attach_driver+0x4ee/0x950 [ 323.254688][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 323.259885][ T9] ? __device_attach+0x3c8/0x5c0 [ 323.265019][ T9] ? device_initial_probe+0x33/0x40 [ 323.270413][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 323.275618][ T9] ? device_add+0x12a9/0x1c10 [ 323.280476][ T9] ? usb_set_configuration+0x3493/0x3b70 [ 323.286321][ T9] ? usb_generic_driver_probe+0xfc/0x290 [ 323.292173][ T9] ? usb_probe_device+0x38a/0x690 [ 323.297405][ T9] ? really_probe+0x4d4/0xd90 [ 323.302282][ T9] ? __driver_probe_device+0x268/0x380 [ 323.307946][ T9] ? driver_probe_device+0x70/0x8b0 [ 323.313370][ T9] ? __device_attach_driver+0x4ee/0x950 [ 323.319158][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 323.324339][ T9] ? __device_attach+0x3c8/0x5c0 [ 323.329459][ T9] ? device_initial_probe+0x33/0x40 [ 323.334858][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 323.340050][ T9] ? device_add+0x12a9/0x1c10 [ 323.344908][ T9] ? usb_new_device+0x104b/0x20c0 [ 323.350117][ T9] ? hub_event+0x5588/0x7580 [ 323.354893][ T9] ? process_scheduled_works+0xb97/0x1d90 [ 323.360826][ T9] ? worker_thread+0xedf/0x1590 [ 323.365888][ T9] ? kthread+0xd59/0xf00 [ 323.370347][ T9] ? ret_from_fork+0x6e/0x90 [ 323.375166][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 323.380358][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.385802][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.391234][ T9] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 323.397702][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.403137][ T9] __msan_warning+0x96/0x120 [ 323.407943][ T9] usbnet_probe+0x2e57/0x4390 [ 323.412836][ T9] ? pm_runtime_enable+0x3b2/0x4d0 [ 323.418213][ T9] ? __pfx_usbnet_probe+0x10/0x10 [ 323.423438][ T9] usb_probe_interface+0xd04/0x1310 [ 323.428890][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 323.434745][ T9] really_probe+0x4d4/0xd90 [ 323.439662][ T9] __driver_probe_device+0x268/0x380 [ 323.445196][ T9] driver_probe_device+0x70/0x8b0 [ 323.450451][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.455891][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.461949][ T9] __device_attach_driver+0x4ee/0x950 [ 323.467549][ T9] bus_for_each_drv+0x3e0/0x680 [ 323.472570][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 323.478714][ T9] __device_attach+0x3c8/0x5c0 [ 323.483721][ T9] device_initial_probe+0x33/0x40 [ 323.488978][ T9] bus_probe_device+0x3ba/0x5e0 [ 323.494029][ T9] device_add+0x12a9/0x1c10 [ 323.498765][ T9] usb_set_configuration+0x3493/0x3b70 [ 323.504515][ T9] usb_generic_driver_probe+0xfc/0x290 [ 323.510169][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 323.516454][ T9] usb_probe_device+0x38a/0x690 [ 323.521562][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 323.527147][ T9] really_probe+0x4d4/0xd90 [ 323.531885][ T9] __driver_probe_device+0x268/0x380 [ 323.537390][ T9] driver_probe_device+0x70/0x8b0 [ 323.542642][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.548081][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.554147][ T9] __device_attach_driver+0x4ee/0x950 [ 323.559779][ T9] bus_for_each_drv+0x3e0/0x680 [ 323.564805][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 323.570958][ T9] __device_attach+0x3c8/0x5c0 [ 323.575969][ T9] device_initial_probe+0x33/0x40 [ 323.581206][ T9] bus_probe_device+0x3ba/0x5e0 [ 323.586267][ T9] device_add+0x12a9/0x1c10 [ 323.590998][ T9] usb_new_device+0x104b/0x20c0 [ 323.596058][ T9] hub_event+0x5588/0x7580 [ 323.600713][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 323.606785][ T9] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 323.612660][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 323.618133][ T9] ? __pfx_hub_event+0x10/0x10 [ 323.623116][ T9] process_scheduled_works+0xb97/0x1d90 [ 323.628939][ T9] worker_thread+0xedf/0x1590 [ 323.633884][ T9] kthread+0xd59/0xf00 [ 323.638214][ T9] ? __pfx_worker_thread+0x10/0x10 [ 323.643588][ T9] ? __pfx_kthread+0x10/0x10 [ 323.648427][ T9] ret_from_fork+0x6e/0x90 [ 323.653076][ T9] ? __pfx_kthread+0x10/0x10 [ 323.657903][ T9] ret_from_fork_asm+0x1a/0x30 [ 323.662916][ T9] [ 323.666415][ T9] Kernel Offset: disabled [ 323.670855][ T9] Rebooting in 86400 seconds..