last executing test programs: 44.507804011s ago: executing program 2 (id=79): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) 42.558664785s ago: executing program 3 (id=86): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") getgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 42.335730632s ago: executing program 2 (id=88): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x5505, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x802084, 0x0, 0x3e, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000280)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 41.292155217s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) 40.525191322s ago: executing program 2 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40804) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x2002) 40.524959702s ago: executing program 0 (id=95): syz_usb_connect(0x3, 0x5e, &(0x7f0000002fc0)=ANY=[@ANYBLOB="12010002d2b03320e2041414ee170102030109024c0001010790080904d867000274d140052406000105200006000d240f0105000000b80201000306241af6822305240600010524006c030d240f"], 0x0) 39.020229151s ago: executing program 3 (id=97): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 38.803668778s ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x31, 0xffffffffffffffff, 0xd363f000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) 37.85004244s ago: executing program 2 (id=101): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r3 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) r4 = syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0xe, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x24, 0x0}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000001200)={0x0, 0xf, 0x3, "7d8dea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000003dc0)={0x14, 0x0, &(0x7f0000003d80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_disconnect(r3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(r0, 0x3, 0x4000, 0x0) syz_usb_disconnect(r0) 37.399746884s ago: executing program 0 (id=103): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") getgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 37.327024466s ago: executing program 0 (id=104): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 36.324434219s ago: executing program 0 (id=105): syz_open_dev$hiddev(0x0, 0x10000, 0x20080) syz_usb_connect(0x5, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xcc, 0xbe, 0x6b, 0x8, 0xbc3, 0x1, 0x792e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x20, 0x0, "", [{{0x9, 0x4, 0xea, 0xd, 0x0, 0xf5, 0xa6, 0x31, 0x7}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 35.08363711s ago: executing program 1 (id=106): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='7', 0x1) write$char_usb(r1, &(0x7f0000000100)="565e1554d8", 0x5) syz_usb_disconnect(r0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="600c01000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4ba17fc3c01010902441001fd00000009040000e40202ffff052406000005240000000d240f0100000000000000000009c881032000000000090582022000000000090503020800a8"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 34.915075325s ago: executing program 3 (id=108): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="40100a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 33.743316334s ago: executing program 0 (id=110): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) 33.436971524s ago: executing program 2 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x31, 0xffffffffffffffff, 0xd363f000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) 32.499731755s ago: executing program 0 (id=112): syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) fanotify_init(0x2, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 32.067098649s ago: executing program 1 (id=113): syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) r0 = syz_usb_connect$hid(0x1, 0x6c, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x40, 0x2, 0x8e, {0x8e, 0x9, "f930d41e2ba90100c3c235651555768cfc2e688829b246e5d4f5d817cc227962c399410ca1f87e6f240a3bcca7c8dd37ee026ca5075f2f644f779bfa3abb5f7ec80e69bc979b9b3b0fc13690f78a883564e3cdf84ac8fd3680949eb22862d1acaf34832395bab698d1c9187ac52d9357616d7fcaad449d3019bfa60f7c7f90282f465fcaed85f237353ac79a"}}, &(0x7f0000000100)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "b7c93e8d9bc62127fb640760f93f25ed1b6e05e3703db8b9d16a51932b6acae0cd81848a8517a25ce2031f7f76c62aaca5f7ad9ccd1033c3ddfb835c526bc708e2f9009dbed1fefe8daaa2bae6db8add9055fa14c302d27724c1e3fb3ebedb57bcc09279281e93c558f38be67df17331301b93453523368195952ae524eae35e05099c26faf5fe8bf2d3fc190d0eb7f0c3d77bd32a40a53f2f7564671e16373117fd225d45454b5d34d79e0d0e927a456dca85ef05795ccb97098c3210d353376509900de86e7a4ed275a3f9abbcfff6da0f03fa83bba4f92212b1ba3a92476a0f0227a06b"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x8, 0xef, "574ebf2da5db637aa8f1592a23400cf1136eec27a60c26711c303608b441c49b7ae238e0ba26764377e02c0036f915ae19fd06103c8bafa5b4a7b791adf020c396d2eb563ccd739f2e598ff70a5104de85de6e2fae03a232145d9ca2388210763fc26f48be6e97908643e601afdfc62e7b19fec467b4b2ba416cf5821a94db72f8078a42601e1278f8d62f9229c32b94464aa8f22050a110371594b36599d31683d10159b6ca6cdfb26235798fe9d7a6a32ec6eccd3b0ff95e6a9a1e02f7192fd071f2c8f4d760c3e82374c62b2cfed0877f1fda978874980a50f54538688cdb968c3b50f7a300185a77ee83d4cb18"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "ec39"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "69a80e"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "05"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "5d29e93c"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "b28fbb"}}) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.894916775s ago: executing program 3 (id=114): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") getgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 31.691987841s ago: executing program 3 (id=115): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 30.107939423s ago: executing program 1 (id=116): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0xb8b, 0x1, "5e8f880400d8e08878d20646ba7220a400"}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) 29.59423991s ago: executing program 1 (id=117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000a80)=""/188, 0xba) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x800, 0x20100) syz_usb_disconnect(r2) r6 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f001"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d670009051157"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="40133700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.451822313s ago: executing program 4 (id=119): syz_usb_connect(0x3, 0x5e, &(0x7f0000002fc0)={{0x12, 0x1, 0x200, 0xd2, 0xb0, 0x33, 0x20, 0x4e2, 0x1414, 0x17ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x7, 0x90, 0x8, "", [{{0x9, 0x4, 0xd8, 0x67, 0x0, 0x2, 0x74, 0xd1, 0x40, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2b8, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x82f6, 0x23}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x36c}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x716f, 0xd8c, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x29}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b12, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) 25.478455125s ago: executing program 1 (id=120): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 23.453841861s ago: executing program 4 (id=121): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) 22.536066011s ago: executing program 4 (id=122): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) 22.359772777s ago: executing program 1 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201000913a939db338f6bfb9f3c10ad88f765eac165ffae71c61f8c805a"], 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x42081) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x2, 0x0, 0x3}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x60, 0x10, "", [{{0x9, 0x4, 0x0, 0x3a, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0xd7, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a53"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000140)=""/241) 21.622659501s ago: executing program 4 (id=124): syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x60, 0x24, 0x64, 0x8, 0x3fd, 0xebbe, 0x2ca5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x96, 0x3, 0x0, 0xe3, 0x90, 0xbc}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0xaf, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 18.58830413s ago: executing program 4 (id=125): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500200000040532b2400400001020301090269000e8868c906080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 18.018610499s ago: executing program 32 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x31, 0xffffffffffffffff, 0xd363f000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) 17.514462635s ago: executing program 33 (id=112): syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) fanotify_init(0x2, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) 16.526803848s ago: executing program 34 (id=115): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3M9vFNcdAPDvrtc2LlC79Be/WralVa1Wxdj8PPQAqJW4VKrUqqLHrW0QxUCFXQksq5iqAqmHVvwF/XGrlL8gp+QSJVEOiXIF5RpFQpEvkByiiWZ3ZrPr3bXXZu2V8ecjzfJm5s3M+87Mw2/e29kAdq1y+lGI2BcRTyJitDbbnKFc++fFytL0ZytL04VIkt9+Wqjme76yNJ1nzbfbm82MFyOKfy/EkdbDDs/fW7xRmZubvZMtmFgoZqmblWuz12ZvTZ0/f/rUyLmzU2d6EmdapueH/3r76KHLf3j86+krj//4zmtpeZNsfWMcNWPVz6GujzDQsqQc5eZz2eDH3Rd9R9jfkC6U0s9i/wpD19K7tpTV3ScxGgPVuZrR+NXf+lo4YEslSZIMtyyt/y1bThoVCrUNkuRBArwCCtHvEgD9kf+hf76SPgEsTbc+B7/anl2M6hNQGveLbKqtKVWfYMtjEYNRm7bCtyLiyvLn/06naNsPAQDQW29cjHh0qdbuyKfammJ8pyHf17OxobGI+EZEHIiIb2btl29HVPN+NyIONmyzv4tRgPKq+db2zwcjWaKxudozafvvF9nYVnP7r17ysYFsbn81/sHC1etzsyezczIeg8Pp/GTrruvdam/+8sN/dTp+uaH9l07p8fO2YFaOT0qrOuhmKguVl4079+xB9cTeb42/EKVCnoo4FBGHN7H/9Jxd/+n/j3Za3xR/GmdL/P/svPPSJgq0SvLfiJ/Urv9yVOPP+z5rwQ9lqYmFm3+emL+3+PPrjeOTk+fOTp2Z2BNzsycn8rui1bvvP/xNlmx5jGi+/knScP3zqrGlA2np9f9a2/u/PnI5lqbq47XzGz/Gw6ePOj7TbPb+Hyr8rprOx2fvVhYW7kxGDBWWW5dPfbXt3cpIU/40/vHj7ev/gYgv/pNtdyQi0pv4exHx/Yg4lpX9BxHxw4g4vkb8b1/60Z86PUKuH//WSuOf2dD1v7c4ElmiviRNXHgvonlJnhi48dbrLQf+R7kl/sHodP1PV1Pj2ZKZysKe9eJqU8C2iZc+gQAAALADHIuIfVEonsg6mvZFsXjiRMTeeg/K/MLPrt7+y62Z2jsCYzFYzHu6Rhv6QyezvuF0Pt1qqmE+XX+q2m+cJEkyks6nz+9zB/sbOux6ezvU/9THra+0AK+aDY2jdXqjDdiRVtf/p11v2fsvZADbqwffowF2KPUfdq+u6/9WvQUH9E27+n8/4kUfigJss3b1//ctSy5sS1mA7dWu/hv7h91h8/1/vgwAO53+f9iVunpJfhOJA5fXyFModbefUtev8a+XKMbavwIwFvXfNMjbNGvv8KNiRG/O2EBPz/xI0zUtts2zJ3pxrCium6e0gR9i2N5EsTI3l7/g0vfyDEfEOndv/Wa7nycWt7pg1XPzv/79zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAbXwYAAP//363OhA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 15.531095661s ago: executing program 4 (id=129): r0 = syz_open_dev$evdev(&(0x7f0000001580), 0x1, 0x200) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 6.496322597s ago: executing program 35 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201000913a939db338f6bfb9f3c10ad88f765eac165ffae71c61f8c805a"], 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x42081) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000040)={0x2, 0x0, 0x3}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x60, 0x10, "", [{{0x9, 0x4, 0x0, 0x3a, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0xd7, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a53"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000140)=""/241) 0s ago: executing program 36 (id=129): r0 = syz_open_dev$evdev(&(0x7f0000001580), 0x1, 0x200) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 47.525843][ T4176] cgroup: Unknown subsys name 'net' [ 47.657337][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.929806][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.222158][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 50.278246][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.313478][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.341119][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.402074][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.452916][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.460008][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.468617][ T4194] device bridge_slave_0 entered promiscuous mode [ 50.492031][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.499157][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.507412][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.525391][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.532648][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.540277][ T4194] device bridge_slave_1 entered promiscuous mode [ 50.560334][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.567481][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.575832][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.587534][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.594708][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.602656][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.635797][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.643100][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.650740][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.657972][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.665211][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.673105][ T4190] device bridge_slave_0 entered promiscuous mode [ 50.681927][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.698591][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.709129][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.721781][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.738032][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.745205][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.753589][ T4190] device bridge_slave_1 entered promiscuous mode [ 50.803348][ T4191] team0: Port device team_slave_0 added [ 50.816001][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.823347][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.831310][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.839747][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.847194][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.854963][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.863580][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.874331][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.885118][ T4191] team0: Port device team_slave_1 added [ 50.892330][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.910594][ T4194] team0: Port device team_slave_0 added [ 50.923639][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.945576][ T4194] team0: Port device team_slave_1 added [ 50.953512][ T4190] team0: Port device team_slave_0 added [ 50.972633][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.991995][ T4190] team0: Port device team_slave_1 added [ 50.999656][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.014665][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.021811][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.047886][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.072952][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.079901][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.106418][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.125789][ T4189] team0: Port device team_slave_0 added [ 51.137073][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.144291][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.170618][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.191637][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.198776][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.225235][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.237964][ T4189] team0: Port device team_slave_1 added [ 51.245873][ T4188] team0: Port device team_slave_0 added [ 51.258609][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.266121][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.292419][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.304736][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.311684][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.337951][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.359245][ T4188] team0: Port device team_slave_1 added [ 51.394826][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.401789][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.428166][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.446640][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.453939][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.479964][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.491803][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.498813][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.524817][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.548513][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.556435][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.582772][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.610813][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.618056][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.642179][ T4194] device hsr_slave_0 entered promiscuous mode [ 51.649289][ T4194] device hsr_slave_1 entered promiscuous mode [ 51.656712][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.664665][ T4194] Cannot create hsr debugfs directory [ 51.709322][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.716595][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.723558][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.731234][ T4190] Cannot create hsr debugfs directory [ 51.744935][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.755080][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.761643][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.769290][ T4189] Cannot create hsr debugfs directory [ 51.789989][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.797094][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.804009][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.811571][ T4188] Cannot create hsr debugfs directory [ 51.934085][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 51.940938][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 52.012440][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 52.022991][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 52.029040][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 52.108447][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.120101][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.133580][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.146762][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.172673][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.181957][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.191340][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.210670][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.288099][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.298910][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.318628][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.327982][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.357518][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.379254][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.388271][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.412806][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.446080][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.465958][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.475430][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.485110][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.495087][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.505509][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.515489][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.526636][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.545738][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.554818][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.564791][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.572184][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.580853][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.605901][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.615484][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.624257][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.631493][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.670526][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.684485][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.695354][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.714685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.724978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.756871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.767036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.776627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.791254][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.804265][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.814499][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.825829][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.835163][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.851645][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.863542][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.887842][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.898057][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.907124][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.923293][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.932173][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.941056][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.948269][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.956442][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.965205][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.973582][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.982102][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.990890][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.997988][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.007464][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.015298][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.028781][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.059259][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.067093][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.075673][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.085577][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.094600][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.102688][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.110550][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.121974][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.130936][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.139812][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.146932][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.156488][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.165388][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.174267][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.181373][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.189095][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.198145][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.208879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.218519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.241409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.249474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.260944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.272058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.283766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.293070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.301453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.310671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.320498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.333171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.343330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.351651][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.358756][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.367048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.380975][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.390221][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.412094][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.433270][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.445763][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.457980][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.472060][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.481921][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.491328][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.498473][ T703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.507386][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.515400][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.523841][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.532534][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.541071][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.550564][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.559287][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.568640][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.577483][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.586748][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.597688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.607649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.617036][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.626636][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.652693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.661127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.684453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.697099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.706416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.739541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.749388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.766706][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.773823][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.785077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.799300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.808374][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.815782][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.831222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.839816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.849088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.858377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.869092][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.902665][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.911610][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.946306][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.955383][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.966724][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.977714][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.987402][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.013247][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 54.016501][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 54.032371][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.040356][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.052835][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.061266][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.070956][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.090096][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.099090][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 54.110614][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.111895][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 54.118880][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.130086][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 54.131556][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.146836][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.159037][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.174685][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.194837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.206792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.225376][ T4191] device veth0_vlan entered promiscuous mode [ 54.249659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.261584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.276204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.285439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.294540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.303565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.329142][ T4191] device veth1_vlan entered promiscuous mode [ 54.355215][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.367702][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.377968][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.416624][ T4189] device veth0_vlan entered promiscuous mode [ 54.425980][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.434940][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.443583][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.451358][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.459212][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.470421][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.489055][ T4189] device veth1_vlan entered promiscuous mode [ 54.499609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.508939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.517823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.528247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.537068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.545250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.553101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.560923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.572744][ T4191] device veth0_macvtap entered promiscuous mode [ 54.584089][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.594222][ T4194] device veth0_vlan entered promiscuous mode [ 54.619802][ T4191] device veth1_macvtap entered promiscuous mode [ 54.633660][ T4194] device veth1_vlan entered promiscuous mode [ 54.664877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.674452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.683779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.691681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.700733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.709734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.718730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.750659][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.770830][ T4189] device veth0_macvtap entered promiscuous mode [ 54.778419][ T4190] device veth0_vlan entered promiscuous mode [ 54.789309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.797519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.806126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.815823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.825736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.834097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.842786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.851442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.860359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.869347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.877997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.886000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.894366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.902066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.920561][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.935000][ T4189] device veth1_macvtap entered promiscuous mode [ 54.942839][ T4188] device veth0_vlan entered promiscuous mode [ 54.950936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.959321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.969128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.982442][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.991345][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.000893][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.010085][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.030846][ T4188] device veth1_vlan entered promiscuous mode [ 55.039400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.047943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.057725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.073229][ T4190] device veth1_vlan entered promiscuous mode [ 55.092721][ T4194] device veth0_macvtap entered promiscuous mode [ 55.119351][ T4194] device veth1_macvtap entered promiscuous mode [ 55.133825][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.149486][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.161521][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.178714][ T4188] device veth0_macvtap entered promiscuous mode [ 55.190352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.199045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.207947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.216991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.226290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.235201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.244358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.253800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.262422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.284797][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.296494][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.312502][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.323423][ T4188] device veth1_macvtap entered promiscuous mode [ 55.339645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.348452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.356713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.366562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.383332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.391925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.406252][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.415227][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.424182][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.433266][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.453485][ T4190] device veth0_macvtap entered promiscuous mode [ 55.483557][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.496322][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.506649][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.517480][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.528821][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.540629][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.551512][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.561573][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.572429][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.584970][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.598324][ T4190] device veth1_macvtap entered promiscuous mode [ 55.614668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.623300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.631548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.640624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.651130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.660062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.675668][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.685311][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.694964][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.704172][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.716001][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.728399][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.738327][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.749164][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.759247][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.770016][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.781223][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.797148][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.808411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.818302][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.828772][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.838670][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.849420][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.860958][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.870912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.887592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.896594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.905600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.916399][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.927317][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.931477][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.937545][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.951804][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.957173][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.973534][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.983982][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.994510][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.004971][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.017028][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.045975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.056595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.065815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.085871][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.096471][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 56.102738][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111433][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.120304][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 56.120670][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.147397][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.158182][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.168705][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.172861][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 56.181248][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.190245][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 56.195286][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.201022][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 56.211600][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.228063][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.238499][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.250004][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.284258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.295822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.306732][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.317039][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.325908][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.336201][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.377435][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.394587][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.398593][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.406350][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.433045][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.440934][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.480063][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.489569][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.523240][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.616472][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.632044][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.670519][ T4271] loop3: detected capacity change from 0 to 512 [ 56.741986][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.754906][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.792259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.800408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.827170][ T4271] ======================================================= [ 56.827170][ T4271] WARNING: The mand mount option has been deprecated and [ 56.827170][ T4271] and is ignored by this kernel. Remove the mand [ 56.827170][ T4271] option from the mount to silence this warning. [ 56.827170][ T4271] ======================================================= [ 56.827242][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.888897][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.611868][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.641742][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.682313][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.701503][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.762736][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.784457][ T4271] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 57.792872][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.808657][ T4271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 57.835169][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.842892][ T4271] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.4: Invalid inode table block 1 in block_group 0 [ 57.870875][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.886093][ T4271] EXT4-fs (loop3): get root inode failed [ 57.903543][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.913744][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.923918][ T4271] EXT4-fs (loop3): mount failed [ 58.038458][ T4281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.143807][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.174133][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 58.191058][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 58.266964][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 58.278003][ T4286] device bond0 entered promiscuous mode [ 58.278765][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 58.290929][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 58.294221][ T4286] device bond_slave_0 entered promiscuous mode [ 58.558785][ T4286] device bond_slave_1 entered promiscuous mode [ 58.792458][ T4276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.133468][ T4276] usb 2-1: Using ep0 maxpacket: 16 [ 59.583362][ T4276] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.272267][ T4276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.278958][ T4276] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 60.322318][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.393151][ T4276] usb 2-1: config 0 descriptor?? [ 60.592218][ C0] sched: RT throttling activated [ 61.146531][ T4308] loop4: detected capacity change from 0 to 512 [ 61.264713][ T4276] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 62.352328][ T4308] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.401825][ T4285] udc-core: couldn't find an available UDC or it's busy [ 62.403812][ T4276] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 62.430798][ T4276] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 62.439794][ T4285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.440351][ T4308] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.460291][ T4308] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.9: Allocating blocks 41-42 which overlap fs metadata [ 62.478475][ T4308] Quota error (device loop4): write_blk: dquota write failed [ 62.486137][ T4308] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 62.495665][ T4308] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.9: Allocating blocks 41-42 which overlap fs metadata [ 62.513121][ T4276] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 62.532280][ T4308] Quota error (device loop4): write_blk: dquota write failed [ 62.539919][ T4308] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 62.549961][ T4308] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.9: Failed to acquire dquot type 1 [ 62.569772][ T4308] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.586012][ T4308] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.9: corrupted inode contents [ 62.604021][ T4308] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.9: mark_inode_dirty error [ 62.616059][ T4308] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.9: corrupted inode contents [ 62.630186][ T4308] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.9: mark_inode_dirty error [ 62.640491][ T4316] loop0: detected capacity change from 0 to 2048 [ 62.653066][ T4308] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.9: corrupted inode contents [ 62.671556][ T4308] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 62.682647][ T4308] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.9: corrupted inode contents [ 62.705729][ T4308] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.9: mark_inode_dirty error [ 62.717223][ T4308] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 62.753142][ T4308] EXT4-fs (loop4): 1 truncate cleaned up [ 62.759394][ T4308] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 62.787532][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.885290][ T4231] usb 2-1: USB disconnect, device number 2 [ 62.942816][ T4317] fido_id[4317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 63.515526][ T4326] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.164217][ T4338] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure [ 65.245168][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 65.265962][ T4357] loop0: detected capacity change from 0 to 256 [ 65.361738][ T4357] exfat: Bad value for 'uid' [ 65.622245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.632259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.642233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 65.652236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 65.672246][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.682231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.692231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.702233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.712229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.722228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.940760][ T4376] loop3: detected capacity change from 0 to 512 [ 67.013749][ T4376] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.064146][ T4376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.074118][ T4376] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.25: Allocating blocks 41-42 which overlap fs metadata [ 67.116497][ T4376] Quota error (device loop3): write_blk: dquota write failed [ 67.124004][ T4376] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 67.133622][ T4376] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.25: Allocating blocks 41-42 which overlap fs metadata [ 67.156912][ T4376] Quota error (device loop3): write_blk: dquota write failed [ 67.164587][ T4376] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 67.174246][ T4381] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 67.174987][ T4376] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.25: Failed to acquire dquot type 1 [ 67.213254][ T4376] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 67.227799][ T4376] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.25: corrupted inode contents [ 67.241902][ T4376] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.25: mark_inode_dirty error [ 67.253629][ T4376] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.25: corrupted inode contents [ 67.265865][ T4376] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.25: mark_inode_dirty error [ 67.278349][ T4376] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.25: corrupted inode contents [ 67.296285][ T4376] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 67.319511][ T4376] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.25: corrupted inode contents [ 67.353930][ T4376] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.25: mark_inode_dirty error [ 67.495580][ T4385] loop4: detected capacity change from 0 to 512 [ 67.654993][ T4376] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 67.696914][ T4376] EXT4-fs (loop3): 1 truncate cleaned up [ 67.704112][ T4376] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 67.732150][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.042650][ T4385] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.059963][ T4385] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.068165][ T4385] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.29: Allocating blocks 41-42 which overlap fs metadata [ 68.105159][ T4385] Quota error (device loop4): write_blk: dquota write failed [ 68.112716][ T4385] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 68.121958][ T4385] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.29: Allocating blocks 41-42 which overlap fs metadata [ 68.136598][ T4385] Quota error (device loop4): write_blk: dquota write failed [ 68.144133][ T4385] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.154184][ T4385] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.29: Failed to acquire dquot type 1 [ 68.166222][ T4385] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.184043][ T4385] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.29: corrupted inode contents [ 68.210053][ T4385] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.29: mark_inode_dirty error [ 68.223500][ T4385] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.29: corrupted inode contents [ 68.237890][ T4385] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.29: mark_inode_dirty error [ 68.258852][ T4385] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.29: corrupted inode contents [ 68.271130][ T4385] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 68.280160][ T4385] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.29: corrupted inode contents [ 68.667921][ T4385] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.29: mark_inode_dirty error [ 68.684569][ T4385] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 68.860649][ T4385] EXT4-fs (loop4): 1 truncate cleaned up [ 68.867095][ T4385] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 68.895211][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.738224][ T4398] binder: BINDER_SET_CONTEXT_MGR already set [ 69.744431][ T4398] binder: 4397:4398 ioctl 4018620d 200000000040 returned -16 [ 71.382505][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402369][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.976756][ T4416] overlayfs: failed to resolve './file0': -2 [ 72.044988][ T4428] loop3: detected capacity change from 0 to 512 [ 72.095667][ T4428] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.119021][ T4428] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.126716][ T4428] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.43: Allocating blocks 41-42 which overlap fs metadata [ 72.141267][ T4428] Quota error (device loop3): write_blk: dquota write failed [ 72.148744][ T4428] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 72.158057][ T4428] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.43: Allocating blocks 41-42 which overlap fs metadata [ 72.193413][ T4428] Quota error (device loop3): write_blk: dquota write failed [ 72.200909][ T4428] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 72.210951][ T4428] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.43: Failed to acquire dquot type 1 [ 72.222685][ T4428] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 72.237293][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.43: corrupted inode contents [ 72.250048][ T4428] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.43: mark_inode_dirty error [ 72.262008][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.43: corrupted inode contents [ 72.274911][ T4428] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.43: mark_inode_dirty error [ 72.286933][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.43: corrupted inode contents [ 72.300065][ T4428] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 72.311368][ T4428] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.43: corrupted inode contents [ 72.324540][ T4428] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.43: mark_inode_dirty error [ 72.406101][ T4428] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 72.421529][ T4428] EXT4-fs (loop3): 1 truncate cleaned up [ 72.427506][ T4428] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 72.528457][ T4406] loop4: detected capacity change from 0 to 32768 [ 72.610003][ T4406] (syz.4.37,4406,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 72.710171][ T4406] (syz.4.37,4406,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 72.781842][ T4437] loop0: detected capacity change from 0 to 256 [ 72.821800][ T4438] netlink: 112 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.834353][ T4437] exfat: Bad value for 'uid' [ 75.108234][ T4458] binder: BINDER_SET_CONTEXT_MGR already set [ 75.114510][ T4458] binder: 4441:4458 ioctl 4018620d 200000000040 returned -16 [ 75.861332][ T4463] loop2: detected capacity change from 0 to 512 [ 76.047366][ T4463] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.263558][ T4463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.273583][ T4463] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.56: Allocating blocks 41-42 which overlap fs metadata [ 76.303545][ T4463] Quota error (device loop2): write_blk: dquota write failed [ 76.310964][ T4463] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 76.320254][ T4463] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.56: Allocating blocks 41-42 which overlap fs metadata [ 76.341145][ T4477] netlink: 112 bytes leftover after parsing attributes in process `syz.1.59'. [ 76.378711][ T4463] Quota error (device loop2): write_blk: dquota write failed [ 76.386275][ T4463] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.396745][ T4463] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.56: Failed to acquire dquot type 1 [ 76.412460][ T4463] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.427041][ T4463] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.56: corrupted inode contents [ 76.442728][ T4463] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.56: mark_inode_dirty error [ 76.454638][ T4463] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.56: corrupted inode contents [ 76.467069][ T4463] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.56: mark_inode_dirty error [ 76.478775][ T4463] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.56: corrupted inode contents [ 76.500131][ T4463] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 76.503941][ T13] cfg80211: failed to load regulatory.db [ 76.512499][ T4463] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.56: corrupted inode contents [ 76.526548][ T4463] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.56: mark_inode_dirty error [ 76.537988][ T4463] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 76.547636][ T4463] EXT4-fs (loop2): 1 truncate cleaned up [ 76.553567][ T4463] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 76.819151][ T4483] loop2: detected capacity change from 0 to 256 [ 76.912964][ T4483] exfat: Bad value for 'uid' [ 78.550335][ T4507] IPVS: nq: FWM 3 0x00000003 - no destination available [ 78.740328][ T4511] loop1: detected capacity change from 0 to 512 [ 78.805893][ T4513] 9pnet: Insufficient options for proto=fd [ 78.876052][ T4511] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.618487][ T4511] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.657236][ T4521] loop2: detected capacity change from 0 to 128 [ 79.671082][ T4520] loop0: detected capacity change from 0 to 256 [ 79.683104][ T4511] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.72: Allocating blocks 41-42 which overlap fs metadata [ 79.993729][ T4511] Quota error (device loop1): write_blk: dquota write failed [ 80.001195][ T4511] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 80.012314][ T4511] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.72: Allocating blocks 41-42 which overlap fs metadata [ 80.025274][ T4520] exfat: Bad value for 'uid' [ 80.264049][ T4511] Quota error (device loop1): write_blk: dquota write failed [ 80.271612][ T4511] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.282039][ T4511] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.72: Failed to acquire dquot type 1 [ 80.294777][ T4511] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 80.309370][ T4511] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.72: corrupted inode contents [ 80.321842][ T4511] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.72: mark_inode_dirty error [ 80.334460][ T4511] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.72: corrupted inode contents [ 80.349453][ T4511] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.72: mark_inode_dirty error [ 80.390471][ T4329] attempt to access beyond end of device [ 80.390471][ T4329] loop2: rw=1, want=529, limit=128 [ 80.505607][ T4511] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.72: corrupted inode contents [ 80.518136][ T4511] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 80.527257][ T4511] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.72: corrupted inode contents [ 80.529248][ T4531] loop3: detected capacity change from 0 to 512 [ 80.551984][ T4511] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.72: mark_inode_dirty error [ 80.601232][ T4511] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 80.611711][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 80.617693][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 80.723139][ T4531] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 80.794468][ T4533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.76'. [ 81.105556][ T4541] binder: BINDER_SET_CONTEXT_MGR already set [ 81.111657][ T4541] binder: 4537:4541 ioctl 4018620d 200000000040 returned -16 [ 81.755167][ T4546] IPVS: nq: FWM 3 0x00000003 - no destination available [ 82.572619][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 82.582545][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 82.590110][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.600176][ T4197] Workqueue: hci1 hci_rx_work [ 82.604886][ T4197] Call Trace: [ 82.608169][ T4197] [ 82.611103][ T4197] dump_stack_lvl+0x188/0x250 [ 82.615795][ T4197] ? show_regs_print_info+0x20/0x20 [ 82.621005][ T4197] ? load_image+0x400/0x400 [ 82.625528][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 82.630661][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 82.635337][ T4197] ? process_one_work+0x85f/0x1010 [ 82.640459][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 82.645673][ T4197] kobject_add_internal+0x6e0/0xd90 [ 82.650891][ T4197] kobject_add+0x160/0x230 [ 82.655302][ T4197] ? kobject_init+0x1d0/0x1d0 [ 82.659969][ T4197] ? klist_children_get+0x50/0x50 [ 82.664983][ T4197] ? get_device_parent+0x121/0x3f0 [ 82.670085][ T4197] device_add+0x483/0xfb0 [ 82.674410][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 82.679425][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 82.684704][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 82.689808][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 82.695359][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 82.700202][ T4197] ? hci_event_packet+0x37b/0x1370 [ 82.705310][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 82.710348][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 82.716423][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 82.722056][ T4197] ? mark_lock+0x94/0x320 [ 82.726369][ T4197] ? mutex_unlock+0x10/0x10 [ 82.730857][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 82.736833][ T4197] ? lock_chain_count+0x20/0x20 [ 82.741683][ T4197] ? __rwlock_init+0x140/0x140 [ 82.746440][ T4197] hci_event_packet+0xe48/0x1370 [ 82.751392][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 82.756610][ T4197] ? rcu_lock_release+0x20/0x20 [ 82.761457][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 82.766647][ T4197] hci_rx_work+0x255/0xa10 [ 82.771065][ T4197] process_one_work+0x85f/0x1010 [ 82.776002][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 82.781623][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 82.786913][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 82.791925][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 82.797459][ T4197] ? wq_worker_running+0x97/0x170 [ 82.802477][ T4197] worker_thread+0xaa6/0x1290 [ 82.807164][ T4197] kthread+0x436/0x520 [ 82.811220][ T4197] ? rcu_lock_release+0x20/0x20 [ 82.816062][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 82.820664][ T4197] ret_from_fork+0x1f/0x30 [ 82.825076][ T4197] [ 82.838448][ T4197] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.852747][ T4197] Bluetooth: hci1: failed to register connection device [ 83.480925][ T4561] loop3: detected capacity change from 0 to 256 [ 83.536355][ T4276] Process accounting resumed [ 83.684739][ T4568] autofs4:pid:4568:autofs_fill_super: called with bogus options [ 83.901813][ T4563] loop2: detected capacity change from 0 to 40427 [ 83.936971][ T4561] exfat: Bad value for 'uid' [ 83.949402][ T4563] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x1ffff [ 86.334043][ T4578] binder: BINDER_SET_CONTEXT_MGR already set [ 86.340045][ T4578] binder: 4577:4578 ioctl 4018620d 200000000040 returned -16 [ 86.532272][ T4276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.602299][ T4276] usb 1-1: Using ep0 maxpacket: 32 [ 87.722447][ T4276] usb 1-1: config 1 has an invalid interface number: 216 but max is 0 [ 87.730653][ T4276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.762542][ T4276] usb 1-1: config 1 has no interface number 0 [ 87.768755][ T4276] usb 1-1: config 1 interface 216 has no altsetting 0 [ 87.942394][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.943519][ T4276] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 87.959079][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.967506][ T4276] usb 1-1: Product: syz [ 87.971771][ T4276] usb 1-1: Manufacturer: syz [ 87.977967][ T4276] usb 1-1: SerialNumber: syz [ 87.997729][ T4306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.014499][ T4613] loop0: detected capacity change from 0 to 256 [ 88.020854][ T4276] usb 1-1: can't set config #1, error -71 [ 88.040786][ T4276] usb 1-1: USB disconnect, device number 2 [ 88.048116][ T4613] exfat: Bad value for 'uid' [ 88.072292][ T1324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.172984][ T4615] loop0: detected capacity change from 0 to 512 [ 88.192460][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.222527][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 88.236302][ T4615] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 88.247566][ T4615] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 88.258493][ T4615] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.104: Invalid inode table block 1 in block_group 0 [ 88.275045][ T4615] EXT4-fs (loop0): get root inode failed [ 88.280937][ T4615] EXT4-fs (loop0): mount failed [ 88.342785][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 88.370466][ T13] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.387980][ T13] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.398325][ T4306] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.427862][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.502401][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 88.523635][ T4306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.547260][ T4306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.557111][ T1324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.612912][ T4306] usb 3-1: SerialNumber: syz [ 88.624356][ T13] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 88.649909][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.673176][ T1324] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 88.812529][ T13] usb 5-1: Product: syz [ 88.837368][ T13] usb 5-1: Manufacturer: syz [ 88.864580][ T13] usb 5-1: SerialNumber: syz [ 88.983316][ T1324] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 89.018901][ T13] usb 5-1: config 0 descriptor?? [ 89.028221][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.042595][ T1324] usb 4-1: Product: syz [ 89.046799][ T1324] usb 4-1: Manufacturer: syz [ 89.051703][ T1324] usb 4-1: SerialNumber: syz [ 89.212497][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.292708][ T4230] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 89.300836][ T4230] usb 2-1: config 8 has no interface number 0 [ 89.307194][ T4230] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 89.318542][ T4230] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 89.329895][ T4230] usb 2-1: config 8 interface 24 has no altsetting 0 [ 89.336391][ T1324] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 89.346361][ T1324] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 89.392377][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.459147][ T4306] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 89.492547][ T4230] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 89.502739][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.510766][ T4230] usb 2-1: Product: syz [ 89.515950][ T4230] usb 2-1: Manufacturer: syz [ 89.520597][ T4230] usb 2-1: SerialNumber: syz [ 89.554242][ T4611] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 89.632423][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 89.660159][ T4606] udc-core: couldn't find an available UDC or it's busy [ 89.667434][ T4606] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.752896][ T4231] usb 1-1: config 5 has an invalid interface number: 234 but max is 0 [ 89.767073][ T4231] usb 1-1: config 5 has no interface number 0 [ 89.779044][ T4231] usb 1-1: config 5 interface 234 has no altsetting 0 [ 89.933039][ T4230] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 90.025512][ T4231] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 90.042421][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.053232][ T4230] usb 2-1: USB disconnect, device number 3 [ 90.072367][ T4231] usb 1-1: Product: syz [ 90.080532][ T4231] usb 1-1: Manufacturer: syz [ 90.098379][ T4231] usb 1-1: SerialNumber: syz [ 90.420854][ T4230] usb 5-1: USB disconnect, device number 2 [ 90.433459][ T4231] ipw 1-1:5.234: IPWireless converter converter detected [ 90.478482][ T4231] usb 1-1: USB disconnect, device number 3 [ 90.520166][ T4231] ipw 1-1:5.234: device disconnected [ 90.552163][ T1108] usb 3-1: USB disconnect, device number 2 [ 91.401370][ T4659] binder: BINDER_SET_CONTEXT_MGR already set [ 91.407393][ T4659] binder: 4657:4659 ioctl 4018620d 200000000040 returned -16 [ 91.464101][ T1108] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 91.652411][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.952599][ T4234] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 92.052626][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.065937][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.089809][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.182482][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.205150][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.235450][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.363188][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.388531][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.447514][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.563105][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.864783][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.897988][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.102409][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.121849][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.148823][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.232356][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.246255][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.275899][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.412368][ T4234] usb 2-1: unable to read config index 6 descriptor/all [ 93.426190][ T4234] usb 2-1: can't read configurations, error -71 [ 93.577541][ T4700] loop3: detected capacity change from 0 to 256 [ 93.632992][ T4700] exfat: Bad value for 'uid' [ 93.812273][ T4234] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 93.818138][ T4706] loop3: detected capacity change from 0 to 512 [ 93.877002][ T4706] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 93.930412][ T4706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 94.001930][ T4706] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.115: Invalid inode table block 1 in block_group 0 [ 94.053008][ T4706] EXT4-fs (loop3): get root inode failed [ 94.073372][ T4706] EXT4-fs (loop3): mount failed [ 94.174151][ T4234] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 94.186451][ T4234] usb 2-1: config 1 has no interface number 0 [ 94.202351][ T4234] usb 2-1: config 1 interface 82 has no altsetting 0 [ 94.375148][ T4234] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 94.404952][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.415719][ T4234] usb 2-1: Product: syz [ 94.419940][ T4234] usb 2-1: Manufacturer: syz [ 94.432315][ T4234] usb 2-1: SerialNumber: syz [ 94.685563][ T4696] udc-core: couldn't find an available UDC or it's busy [ 94.717662][ T4696] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.789292][ T4234] hub 2-1:1.82: bad descriptor, ignoring hub [ 94.805481][ T4234] hub: probe of 2-1:1.82 failed with error -5 [ 94.828254][ T4234] sierra 2-1:1.82: Sierra USB modem converter detected [ 94.876840][ T4234] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 94.936871][ T4234] usb 2-1: USB disconnect, device number 5 [ 94.962635][ T4234] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 94.971924][ T4234] sierra 2-1:1.82: device disconnected [ 96.132364][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.382395][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 96.502413][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.518914][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.529356][ T4234] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.544159][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.569416][ T4234] usb 2-1: config 0 descriptor?? [ 96.613421][ T4234] hub 2-1:0.0: USB hub found [ 96.832458][ T4234] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 97.264963][ T4234] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 97.286135][ T4234] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 97.924606][ T4754] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 98.718370][ T4234] usb 2-1: USB disconnect, device number 6 [ 99.312349][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.562346][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 99.682393][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.699067][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.709400][ T4234] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.724451][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.747627][ T4234] usb 2-1: config 0 descriptor?? [ 99.794626][ T4234] hub 2-1:0.0: USB hub found [ 100.002460][ T4234] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 100.112446][ T4234] usbhid 2-1:0.0: can't add hid device: -71 [ 100.118556][ T4234] usbhid: probe of 2-1:0.0 failed with error -71 [ 100.356270][ T4234] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 100.642467][ T4234] usb 2-1: device firmware changed [ 100.657700][ T4234] usb 2-1: USB disconnect, device number 7 [ 101.022373][ T4234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.262311][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 101.382429][ T4234] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 101.397052][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.421313][ T4234] usb 2-1: config 0 descriptor?? [ 101.467137][ T4234] gspca_main: sq930x-2.14.0 probing 041e:403c [ 101.673417][ T4234] gspca_sq930x: reg_r 001f failed -71 [ 101.678874][ T4234] sq930x: probe of 2-1:0.0 failed with error -71 [ 101.706192][ T4234] usb 2-1: USB disconnect, device number 8 [ 102.272348][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.512257][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 102.632490][ T4234] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 102.648652][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.681086][ T4234] usb 2-1: config 0 descriptor?? [ 102.735405][ T4234] gspca_main: sq930x-2.14.0 probing 041e:403c [ 103.064662][ T4234] gspca_sq930x: reg_r 001f failed -71 [ 103.070151][ T4234] sq930x: probe of 2-1:0.0 failed with error -71 [ 103.088921][ T4234] usb 2-1: USB disconnect, device number 9 [ 103.492291][ T4234] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 103.852723][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.869478][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.879716][ T4234] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 103.894342][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.917570][ T4234] usb 2-1: config 0 descriptor?? [ 104.404205][ T4234] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 104.418527][ T4234] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 104.428179][ T4234] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input5 [ 104.467649][ T4234] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 104.641461][ T4770] udc-core: couldn't find an available UDC or it's busy [ 104.655455][ T4770] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.670338][ T4770] udc-core: couldn't find an available UDC or it's busy [ 104.684862][ T4770] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.698727][ T4770] udc-core: couldn't find an available UDC or it's busy [ 104.708145][ T4770] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.692357][ T4230] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 107.770851][ T4777] chnl_net:caif_netlink_parms(): no params data found [ 107.847936][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.855960][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.865861][ T4777] device bridge_slave_0 entered promiscuous mode [ 107.875762][ T4777] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.883348][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.926401][ T4777] device bridge_slave_1 entered promiscuous mode [ 107.982889][ T4777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.008088][ T4777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.049377][ T4777] team0: Port device team_slave_0 added [ 108.089216][ T4777] team0: Port device team_slave_1 added [ 108.153879][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.164862][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.191039][ T4777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.216256][ T4777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.223822][ T4777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.250460][ T4777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.612309][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 110.092310][ T1108] Bluetooth: hci6: command 0x0409 tx timeout [ 110.892425][ T4230] usb 2-1: device descriptor read/64, error -110 [ 111.132532][ T1108] Bluetooth: hci7: command 0x0409 tx timeout [ 111.162366][ T4230] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 111.342308][ T4230] usb 2-1: device descriptor read/64, error -32 [ 111.614874][ T4230] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 111.692692][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 111.702516][ T4230] usb 2-1: device descriptor read/8, error -32 [ 111.972363][ T4230] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 112.042418][ T4230] usb 2-1: device descriptor read/8, error -32 [ 112.166917][ T4234] usb 2-1: USB disconnect, device number 10 [ 112.181696][ T4230] Bluetooth: hci6: command 0x041b tx timeout [ 113.212590][ T4230] Bluetooth: hci7: command 0x041b tx timeout [ 113.772330][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 114.253237][ T1108] Bluetooth: hci6: command 0x040f tx timeout [ 115.292495][ T1108] Bluetooth: hci7: command 0x040f tx timeout [ 115.852350][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 116.332301][ T4230] Bluetooth: hci6: command 0x0419 tx timeout [ 117.372503][ T4276] Bluetooth: hci7: command 0x0419 tx timeout [ 121.132327][ T4276] Bluetooth: hci8: command 0x0409 tx timeout [ 123.212706][ T4276] Bluetooth: hci8: command 0x041b tx timeout [ 125.292371][ T4276] Bluetooth: hci8: command 0x040f tx timeout [ 127.372298][ T4230] Bluetooth: hci8: command 0x0419 tx timeout [ 127.612320][ T4230] Bluetooth: hci9: command 0x0409 tx timeout [ 129.692314][ T4230] Bluetooth: hci9: command 0x041b tx timeout [ 131.772310][ T4276] Bluetooth: hci9: command 0x040f tx timeout [ 132.814037][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821407][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.852320][ T4230] Bluetooth: hci9: command 0x0419 tx timeout [ 149.683568][ T3561] udevd[3561]: worker [4182] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 164.742532][ T3561] udevd[3561]: worker [4180] /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input5/event4 is taking a long time [ 169.692520][ T4230] Bluetooth: hci10: command 0x0409 tx timeout [ 170.732266][ T4276] Bluetooth: hci11: command 0x0409 tx timeout [ 171.772296][ T4230] Bluetooth: hci12: command 0x0409 tx timeout [ 171.779456][ T4230] Bluetooth: hci10: command 0x041b tx timeout [ 172.812327][ T4276] Bluetooth: hci11: command 0x041b tx timeout [ 173.852356][ T4276] Bluetooth: hci10: command 0x040f tx timeout [ 173.862505][ T4276] Bluetooth: hci12: command 0x041b tx timeout [ 174.892250][ T4276] Bluetooth: hci11: command 0x040f tx timeout [ 175.852425][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.858528][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 175.872285][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 175.879116][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 175.890855][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 175.933291][ T4230] Bluetooth: hci12: command 0x040f tx timeout [ 175.940189][ T4230] Bluetooth: hci10: command 0x0419 tx timeout [ 176.972308][ T4230] Bluetooth: hci11: command 0x0419 tx timeout [ 178.012307][ T4230] Bluetooth: hci12: command 0x0419 tx timeout [ 181.692266][ T4276] Bluetooth: hci13: command 0x0409 tx timeout [ 194.256058][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262566][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.772323][ T4276] Bluetooth: hci15: command 0x0409 tx timeout [ 230.812350][ T1108] Bluetooth: hci16: command 0x0409 tx timeout [ 231.772522][ T1108] Bluetooth: hci17: command 0x0409 tx timeout [ 231.852363][ T1108] Bluetooth: hci15: command 0x041b tx timeout [ 232.172295][ T1108] Bluetooth: hci6: command 0x0406 tx timeout [ 232.892397][ T1108] Bluetooth: hci16: command 0x041b tx timeout [ 233.852525][ T1108] Bluetooth: hci17: command 0x041b tx timeout [ 233.932293][ T1108] Bluetooth: hci15: command 0x040f tx timeout [ 234.972300][ T1108] Bluetooth: hci16: command 0x040f tx timeout [ 235.932499][ T1108] Bluetooth: hci17: command 0x040f tx timeout [ 236.012262][ T1108] Bluetooth: hci15: command 0x0419 tx timeout [ 237.052291][ T1108] Bluetooth: hci16: command 0x0419 tx timeout [ 238.012512][ T1108] Bluetooth: hci17: command 0x0419 tx timeout [ 242.252305][ T1108] Bluetooth: hci18: command 0x0409 tx timeout [ 242.412277][ T1108] Bluetooth: hci8: command 0x0406 tx timeout [ 244.332283][ T1108] Bluetooth: hci18: command 0x041b tx timeout [ 246.412339][ T1108] Bluetooth: hci18: command 0x040f tx timeout [ 248.492243][ T1108] Bluetooth: hci18: command 0x0419 tx timeout [ 248.812252][ T1108] Bluetooth: hci19: command 0x0409 tx timeout [ 250.892207][ T4230] Bluetooth: hci19: command 0x041b tx timeout [ 251.853934][ T27] INFO: task udevd:4180 blocked for more than 143 seconds. [ 251.861183][ T27] Not tainted syzkaller #0 [ 251.875491][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.887257][ T27] task:udevd state:D stack:23120 pid: 4180 ppid: 3561 flags:0x00004002 [ 251.900993][ T27] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.922176][ T27] [ 251.925164][ T27] __schedule+0x11ef/0x43c0 [ 251.930070][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 251.956161][ T27] ? __rwlock_init+0x140/0x140 [ 251.968666][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 251.978142][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 251.989933][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 251.996706][ T27] ? release_firmware_map_entry+0x190/0x190 [ 252.010768][ T27] ? __might_sleep+0xf0/0xf0 [ 252.021220][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 252.033022][ T27] schedule+0x11b/0x1e0 [ 252.037220][ T27] synchronize_rcu_expedited+0x680/0x750 [ 252.048473][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 252.054779][ T27] ? init_wait_entry+0xd0/0xd0 [ 252.059573][ T27] ? verify_lock_unused+0x140/0x140 [ 252.070478][ T27] ? evdev_release+0xfa/0x800 [ 252.076558][ T27] synchronize_rcu+0x119/0x1e0 [ 252.081338][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 252.095826][ T27] ? evdev_release+0x1ee/0x800 [ 252.100638][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 252.114883][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 252.119954][ T27] ? __rwlock_init+0x140/0x140 [ 252.128526][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 252.137251][ T27] evdev_release+0x1f3/0x800 [ 252.141861][ T27] ? evdev_open+0x5b0/0x5b0 [ 252.149985][ T27] __fput+0x234/0x930 [ 252.157441][ T27] task_work_run+0x125/0x1a0 [ 252.165811][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 252.171207][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 252.180288][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 252.189188][ T27] do_syscall_64+0x58/0xa0 [ 252.197205][ T27] ? clear_bhb_loop+0x30/0x80 [ 252.201900][ T27] ? clear_bhb_loop+0x30/0x80 [ 252.216715][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.224125][ T27] RIP: 0033:0x7fe3f0dbd407 [ 252.228554][ T27] RSP: 002b:00007ffe7bcef150 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 252.243558][ T27] RAX: 0000000000000000 RBX: 00007fe3f0ccf880 RCX: 00007fe3f0dbd407 [ 252.251743][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 252.266718][ T27] RBP: 00007fe3f0ccf6e8 R08: 0000000000000000 R09: 0000000000000000 [ 252.276359][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000016 [ 252.289815][ T27] R13: 00007ffe7bcef260 R14: 0000000000000000 R15: 0000000000000000 [ 252.299249][ T27] [ 252.307736][ T27] INFO: task udevd:4182 blocked for more than 143 seconds. [ 252.318754][ T27] Not tainted syzkaller #0 [ 252.330682][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.340695][ T27] task:udevd state:D stack:26192 pid: 4182 ppid: 3561 flags:0x00004002 [ 252.356717][ T27] Call Trace: [ 252.360039][ T27] [ 252.364340][ T27] __schedule+0x11ef/0x43c0 [ 252.368889][ T27] ? rcu_lock_acquire+0x30/0x30 [ 252.379215][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 252.385958][ T27] ? release_firmware_map_entry+0x190/0x190 [ 252.391865][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 252.403584][ T27] ? __mutex_trylock_common+0x86/0x260 [ 252.409076][ T27] ? rcu_lock_release+0x20/0x20 [ 252.418688][ T27] schedule+0x11b/0x1e0 [ 252.427097][ T27] schedule_preempt_disabled+0xf/0x20 [ 252.437033][ T27] __mutex_lock_common+0xcfc/0x2400 [ 252.444576][ T27] ? uevent_show+0x17a/0x330 [ 252.449185][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 252.458827][ T27] mutex_lock_nested+0x17/0x20 [ 252.465955][ T27] uevent_show+0x17a/0x330 [ 252.470393][ T27] dev_attr_show+0x50/0xb0 [ 252.479355][ T27] ? device_get_ownership+0xa0/0xa0 [ 252.487513][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 252.496851][ T27] seq_read_iter+0x49b/0xd50 [ 252.501494][ T27] vfs_read+0x759/0xd60 [ 252.508112][ T27] ? kernel_read+0x1e0/0x1e0 [ 252.517714][ T27] ? __context_tracking_exit+0x4c/0x80 [ 252.523501][ T27] ? __fdget_pos+0x2c6/0x370 [ 252.528127][ T27] ksys_read+0x152/0x260 [ 252.534629][ T27] ? vfs_write+0xd60/0xd60 [ 252.539085][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 252.545483][ T27] do_syscall_64+0x4c/0xa0 [ 252.549921][ T27] ? clear_bhb_loop+0x30/0x80 [ 252.554864][ T27] ? clear_bhb_loop+0x30/0x80 [ 252.559552][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.565735][ T27] RIP: 0033:0x7fe3f0dbd407 [ 252.570156][ T27] RSP: 002b:00007ffe7bceba40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 252.579263][ T27] RAX: ffffffffffffffda RBX: 00007fe3f0ccf880 RCX: 00007fe3f0dbd407 [ 252.587532][ T27] RDX: 0000000000001000 RSI: 000055ae80aa4a00 RDI: 0000000000000008 [ 252.595786][ T27] RBP: 00007fe3f0f05ff0 R08: 0000000000000000 R09: 0000000000000000 [ 252.604041][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 252.612527][ T27] R13: 00007fe3f0f05ea0 R14: 0000000000000000 R15: 000055ae80ab25d0 [ 252.621105][ T27] [ 252.624637][ T27] INFO: task kworker/1:4:4231 blocked for more than 144 seconds. [ 252.635072][ T27] Not tainted syzkaller #0 [ 252.640110][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.654330][ T4230] Bluetooth: hci9: command 0x0406 tx timeout [ 252.667214][ T27] task:kworker/1:4 state:D stack:23376 pid: 4231 ppid: 2 flags:0x00004000 [ 252.678007][ T27] Workqueue: events pwq_unbound_release_workfn [ 252.689780][ T27] Call Trace: [ 252.694405][ T27] [ 252.697342][ T27] __schedule+0x11ef/0x43c0 [ 252.701875][ T27] ? release_firmware_map_entry+0x190/0x190 [ 252.714618][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 252.719669][ T27] ? __mutex_trylock_common+0x86/0x260 [ 252.729384][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.740555][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 252.749194][ T27] schedule+0x11b/0x1e0 [ 252.756850][ T27] schedule_preempt_disabled+0xf/0x20 [ 252.768449][ T27] __mutex_lock_common+0xcfc/0x2400 [ 252.777719][ T27] ? synchronize_rcu_expedited+0x3a5/0x750 [ 252.787000][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 252.795698][ T27] ? __rwlock_init+0x140/0x140 [ 252.800480][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 252.809152][ T27] mutex_lock_nested+0x17/0x20 [ 252.822372][ T27] synchronize_rcu_expedited+0x3a5/0x750 [ 252.828405][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 252.839761][ T27] ? mark_lock+0x94/0x320 [ 252.844500][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 252.850496][ T27] ? lock_chain_count+0x20/0x20 [ 252.861979][ T27] ? cpu_online+0x30/0x30 [ 252.866581][ T27] synchronize_rcu+0x119/0x1e0 [ 252.871348][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 252.884906][ T27] ? rcu_force_quiescent_state+0x230/0x230 [ 252.890757][ T27] lockdep_unregister_key+0x47c/0x520 [ 252.907674][ T27] ? lockdep_reset_lock+0x300/0x300 [ 252.913190][ T27] ? read_lock_is_recursive+0x10/0x10 [ 252.918570][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.926567][ T27] ? _raw_spin_unlock+0x40/0x40 [ 252.931474][ T27] pwq_unbound_release_workfn+0x262/0x2b0 [ 252.937566][ T27] process_one_work+0x85f/0x1010 [ 252.942841][ T27] ? worker_detach_from_pool+0x240/0x240 [ 252.948486][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 252.954089][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 252.959128][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 252.965221][ T27] ? wq_worker_running+0x97/0x170 [ 252.970264][ T27] worker_thread+0xaa6/0x1290 [ 252.975244][ T4230] Bluetooth: hci19: command 0x040f tx timeout [ 252.981510][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 252.987069][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.994979][ T27] kthread+0x436/0x520 [ 252.999064][ T27] ? rcu_lock_release+0x20/0x20 [ 253.004228][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.008830][ T27] ret_from_fork+0x1f/0x30 [ 253.013615][ T27] [ 253.016667][ T27] INFO: task kworker/u4:5:4245 blocked for more than 144 seconds. [ 253.025904][ T27] Not tainted syzkaller #0 [ 253.031385][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.046772][ T27] task:kworker/u4:5 state:D stack:26000 pid: 4245 ppid: 2 flags:0x00004000 [ 253.068165][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 253.075466][ T27] Call Trace: [ 253.078746][ T27] [ 253.081676][ T27] __schedule+0x11ef/0x43c0 [ 253.092959][ T27] ? mark_lock+0x94/0x320 [ 253.097322][ T27] ? release_firmware_map_entry+0x190/0x190 [ 253.110599][ T27] ? verify_lock_unused+0x140/0x140 [ 253.117107][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.128549][ T27] ? kthread_data+0x4b/0xc0 [ 253.133715][ T27] schedule+0x11b/0x1e0 [ 253.138694][ T27] schedule_timeout+0xbd/0x2d0 [ 253.143917][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.149831][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.156183][ T27] ? lock_chain_count+0x20/0x20 [ 253.161048][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.166576][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 253.171789][ T27] do_wait_for_common+0x2a2/0x450 [ 253.177185][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.183379][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 253.189979][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.195323][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.200883][ T27] wait_for_completion+0x48/0x60 [ 253.206201][ T27] __synchronize_srcu+0x2bb/0x350 [ 253.211242][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 253.219321][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 253.225179][ T27] ? __rwlock_init+0x140/0x140 [ 253.230135][ T27] ? synchronize_srcu+0x192/0x1b0 [ 253.235919][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 253.241841][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 253.248550][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 253.253731][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.258940][ T27] process_one_work+0x85f/0x1010 [ 253.264250][ T27] ? worker_detach_from_pool+0x240/0x240 [ 253.269890][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 253.275495][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.280526][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.286511][ T27] ? wq_worker_running+0x97/0x170 [ 253.291555][ T27] worker_thread+0xaa6/0x1290 [ 253.296578][ T27] kthread+0x436/0x520 [ 253.300654][ T27] ? rcu_lock_release+0x20/0x20 [ 253.305840][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.310433][ T27] ret_from_fork+0x1f/0x30 [ 253.315169][ T27] [ 253.318254][ T27] INFO: task kworker/u4:9:4331 blocked for more than 144 seconds. [ 253.328257][ T27] Not tainted syzkaller #0 [ 253.334478][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.343763][ T27] task:kworker/u4:9 state:D stack:21464 pid: 4331 ppid: 2 flags:0x00004000 [ 253.353251][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 253.360724][ T27] Call Trace: [ 253.364314][ T27] [ 253.367247][ T27] __schedule+0x11ef/0x43c0 [ 253.371782][ T27] ? release_firmware_map_entry+0x190/0x190 [ 253.378182][ T27] ? verify_lock_unused+0x140/0x140 [ 253.383608][ T27] ? kthread_data+0x4b/0xc0 [ 253.388210][ T27] schedule+0x11b/0x1e0 [ 253.392648][ T27] schedule_timeout+0xbd/0x2d0 [ 253.397414][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.403633][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.409628][ T27] ? lock_chain_count+0x20/0x20 [ 253.414820][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.420020][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 253.425524][ T27] do_wait_for_common+0x2a2/0x450 [ 253.430563][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.438851][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 253.445715][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.450746][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.456629][ T27] wait_for_completion+0x48/0x60 [ 253.461575][ T27] __synchronize_srcu+0x2bb/0x350 [ 253.466940][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 253.472866][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 253.478423][ T27] ? __rwlock_init+0x140/0x140 [ 253.483481][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.489385][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 253.495247][ T27] ? synchronize_srcu+0x192/0x1b0 [ 253.500280][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 253.506735][ T27] process_one_work+0x85f/0x1010 [ 253.511697][ T27] ? worker_detach_from_pool+0x240/0x240 [ 253.517626][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 253.523240][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.528272][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.534143][ T27] ? wq_worker_running+0x97/0x170 [ 253.539187][ T27] worker_thread+0xaa6/0x1290 [ 253.546384][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.553296][ T27] kthread+0x436/0x520 [ 253.557389][ T27] ? rcu_lock_release+0x20/0x20 [ 253.562565][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.567289][ T27] ret_from_fork+0x1f/0x30 [ 253.571853][ T27] [ 253.575448][ T27] INFO: task syz.2.111:4672 blocked for more than 145 seconds. [ 253.583259][ T27] Not tainted syzkaller #0 [ 253.588200][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.597180][ T27] task:syz.2.111 state:D stack:27472 pid: 4672 ppid: 4194 flags:0x00004004 [ 253.606628][ T27] Call Trace: [ 253.609921][ T27] [ 253.613130][ T27] __schedule+0x11ef/0x43c0 [ 253.617670][ T27] ? release_firmware_map_entry+0x190/0x190 [ 253.623899][ T27] ? verify_lock_unused+0x140/0x140 [ 253.629115][ T27] schedule+0x11b/0x1e0 [ 253.633557][ T27] schedule_timeout+0xbd/0x2d0 [ 253.638327][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.644877][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.650892][ T27] ? lock_chain_count+0x20/0x20 [ 253.657979][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.663471][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 253.668680][ T27] do_wait_for_common+0x2a2/0x450 [ 253.674023][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.679931][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 253.686974][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.692010][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.698002][ T27] ? start_flush_work+0x776/0x820 [ 253.703283][ T27] wait_for_completion+0x48/0x60 [ 253.708239][ T27] __flush_work+0x15a/0x210 [ 253.713039][ T27] ? flush_work+0x20/0x20 [ 253.717550][ T27] ? start_flush_work+0x820/0x820 [ 253.722904][ T27] ? lock_chain_count+0x20/0x20 [ 253.727771][ T27] ? flush_delayed_work+0x122/0x180 [ 253.733259][ T27] flush_delayed_work+0x12d/0x180 [ 253.738289][ T27] ? __cancel_work_timer+0x560/0x560 [ 253.743988][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 253.749534][ T27] fsnotify_destroy_group+0x235/0x350 [ 253.755248][ T27] ? fsnotify_group_stop_queueing+0x60/0x60 [ 253.761233][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 253.768414][ T27] ? __rwlock_init+0x140/0x140 [ 253.774493][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 253.779815][ T27] fanotify_release+0x4c5/0x4f0 [ 253.785182][ T27] ? ima_file_free+0xe5/0x3e0 [ 253.789876][ T27] ? fanotify_ioctl+0xe0/0xe0 [ 253.794897][ T27] __fput+0x234/0x930 [ 253.798941][ T27] task_work_run+0x125/0x1a0 [ 253.803899][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 253.809281][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 253.815190][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 253.820756][ T27] do_syscall_64+0x58/0xa0 [ 253.825561][ T27] ? clear_bhb_loop+0x30/0x80 [ 253.830247][ T27] ? clear_bhb_loop+0x30/0x80 [ 253.835224][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.841126][ T27] RIP: 0033:0x7fdc9e683e59 [ 253.845902][ T27] RSP: 002b:00007ffcf551bf88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 253.855009][ T27] RAX: 0000000000000000 RBX: 00007fdc9e8feda0 RCX: 00007fdc9e683e59 [ 253.863292][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 253.871271][ T27] RBP: 00007fdc9e8feda0 R08: 0000000000000006 R09: 0000000000000000 [ 253.881285][ T27] R10: 00007fdc9e8fecb0 R11: 0000000000000246 R12: 0000000000016a90 [ 253.889774][ T27] R13: 00007fdc9e8fd18c R14: 00000000000168a9 R15: 00007fdc9e8fd180 [ 253.898041][ T27] [ 253.901114][ T27] INFO: task syz.0.112:4681 blocked for more than 145 seconds. [ 253.908999][ T27] Not tainted syzkaller #0 [ 253.914166][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.923082][ T27] task:syz.0.112 state:D stack:27472 pid: 4681 ppid: 4190 flags:0x00004004 [ 253.932651][ T27] Call Trace: [ 253.935942][ T27] [ 253.938960][ T27] __schedule+0x11ef/0x43c0 [ 253.943871][ T27] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 253.950241][ T27] ? release_firmware_map_entry+0x190/0x190 [ 253.956479][ T27] ? swake_up_one+0x6d/0x130 [ 253.961087][ T27] ? verify_lock_unused+0x140/0x140 [ 253.966612][ T27] ? rcu_preempt_deferred_qs_irqrestore+0x9dd/0xc30 [ 253.973513][ T27] schedule+0x11b/0x1e0 [ 253.977684][ T27] schedule_timeout+0xbd/0x2d0 [ 253.984776][ T27] ? console_conditional_schedule+0x40/0x40 [ 253.990693][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.997661][ T27] ? lock_chain_count+0x20/0x20 [ 254.002794][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 254.008008][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 254.013626][ T27] do_wait_for_common+0x2a2/0x450 [ 254.018895][ T27] ? console_conditional_schedule+0x40/0x40 [ 254.025255][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 254.031865][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 254.037218][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 254.043091][ T27] ? start_flush_work+0x776/0x820 [ 254.048151][ T27] wait_for_completion+0x48/0x60 [ 254.053755][ T27] __flush_work+0x15a/0x210 [ 254.058287][ T27] ? flush_work+0x20/0x20 [ 254.063009][ T27] ? start_flush_work+0x820/0x820 [ 254.068055][ T27] ? lock_chain_count+0x20/0x20 [ 254.073261][ T27] ? flush_delayed_work+0x122/0x180 [ 254.078480][ T27] flush_delayed_work+0x12d/0x180 [ 254.083897][ T27] ? __cancel_work_timer+0x560/0x560 [ 254.089189][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 254.096731][ T27] fsnotify_destroy_group+0x235/0x350 [ 254.102453][ T27] ? fsnotify_group_stop_queueing+0x60/0x60 [ 254.108367][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 254.113774][ T27] ? __rwlock_init+0x140/0x140 [ 254.118647][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 254.124198][ T27] fanotify_release+0x4c5/0x4f0 [ 254.129065][ T27] ? ima_file_free+0xe5/0x3e0 [ 254.134062][ T27] ? fanotify_ioctl+0xe0/0xe0 [ 254.138761][ T27] __fput+0x234/0x930 [ 254.143102][ T27] task_work_run+0x125/0x1a0 [ 254.147710][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 254.153376][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 254.159438][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 254.165381][ T27] do_syscall_64+0x58/0xa0 [ 254.169810][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.174797][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.179491][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.185795][ T27] RIP: 0033:0x7fcc83ce4e59 [ 254.190218][ T27] RSP: 002b:00007ffe653c2868 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.199528][ T27] RAX: 0000000000000000 RBX: 00007fcc83f5fda0 RCX: 00007fcc83ce4e59 [ 254.209594][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 254.217843][ T27] RBP: 00007fcc83f5fda0 R08: 0000000000000006 R09: 0000000000000000 [ 254.226177][ T27] R10: 00007fcc83f5fcb0 R11: 0000000000000246 R12: 0000000000016e0e [ 254.234421][ T27] R13: 00007fcc83f5e18c R14: 0000000000016c14 R15: 00007fcc83f5e180 [ 254.242659][ T27] [ 254.245695][ T27] INFO: task dhcpcd:4691 blocked for more than 145 seconds. [ 254.253515][ T27] Not tainted syzkaller #0 [ 254.258803][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.268517][ T27] task:dhcpcd state:D stack:28368 pid: 4691 ppid: 3854 flags:0x00004002 [ 254.277983][ T27] Call Trace: [ 254.281273][ T27] [ 254.284514][ T27] __schedule+0x11ef/0x43c0 [ 254.289032][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.295324][ T27] ? __rwlock_init+0x140/0x140 [ 254.300110][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 254.306329][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 254.311548][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 254.319573][ T27] ? release_firmware_map_entry+0x190/0x190 [ 254.326547][ T27] ? queue_work_on+0x196/0x1f0 [ 254.331328][ T27] ? __might_sleep+0xf0/0xf0 [ 254.336242][ T27] ? wq_worker_last_func+0x40/0x40 [ 254.341369][ T27] ? mark_lock+0x94/0x320 [ 254.346130][ T27] schedule+0x11b/0x1e0 [ 254.350305][ T27] synchronize_rcu_expedited+0x5c1/0x750 [ 254.356268][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 254.361551][ T27] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 254.367558][ T27] ? __mutex_trylock_common+0x155/0x260 [ 254.373434][ T27] ? init_wait_entry+0xd0/0xd0 [ 254.378220][ T27] synchronize_rcu+0x119/0x1e0 [ 254.383405][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 254.388352][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 254.394310][ T27] ? __might_sleep+0xf0/0xf0 [ 254.398906][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 254.404673][ T27] ? mutex_unlock+0x10/0x10 [ 254.409204][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 254.415204][ T27] ? _local_bh_enable+0xa0/0xa0 [ 254.420088][ T27] packet_release+0x976/0xc30 [ 254.426874][ T27] sock_close+0xd5/0x240 [ 254.431145][ T27] ? sock_mmap+0x90/0x90 [ 254.435795][ T27] __fput+0x234/0x930 [ 254.439803][ T27] task_work_run+0x125/0x1a0 [ 254.444787][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 254.450168][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 254.456012][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 254.461476][ T27] do_syscall_64+0x58/0xa0 [ 254.466578][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.471286][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.476312][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.482453][ T27] RIP: 0033:0x7fb85b280407 [ 254.486872][ T27] RSP: 002b:00007ffc7216b020 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 254.495675][ T27] RAX: 0000000000000000 RBX: 00007fb85b1f6740 RCX: 00007fb85b280407 [ 254.503992][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.511967][ T27] RBP: 00005646d38dd4b0 R08: 0000000000000000 R09: 0000000000000000 [ 254.520249][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 254.528517][ T27] R13: 00005646d6934ee0 R14: 0000000000000000 R15: 00005646d38f2ac0 [ 254.538850][ T27] [ 254.543061][ T27] INFO: task syz.3.115:4706 blocked for more than 146 seconds. [ 254.550621][ T27] Not tainted syzkaller #0 [ 254.555962][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.565232][ T27] task:syz.3.115 state:D stack:25648 pid: 4706 ppid: 4189 flags:0x00004004 [ 254.574729][ T27] Call Trace: [ 254.578014][ T27] [ 254.580950][ T27] __schedule+0x11ef/0x43c0 [ 254.585862][ T27] ? release_firmware_map_entry+0x190/0x190 [ 254.591764][ T27] ? verify_lock_unused+0x140/0x140 [ 254.597798][ T27] ? verify_lock_unused+0x140/0x140 [ 254.603486][ T27] schedule+0x11b/0x1e0 [ 254.607662][ T27] schedule_timeout+0xbd/0x2d0 [ 254.612735][ T27] ? console_conditional_schedule+0x40/0x40 [ 254.618722][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.625077][ T27] ? lock_chain_count+0x20/0x20 [ 254.629956][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 254.635443][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 254.640655][ T27] do_wait_for_common+0x2a2/0x450 [ 254.647714][ T27] ? console_conditional_schedule+0x40/0x40 [ 254.654316][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 254.660918][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 254.666270][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 254.672458][ T27] ? start_flush_work+0x776/0x820 [ 254.677510][ T27] wait_for_completion+0x48/0x60 [ 254.682814][ T27] __flush_work+0x15a/0x210 [ 254.687339][ T27] ? lock_chain_count+0x20/0x20 [ 254.692584][ T27] ? flush_work+0x20/0x20 [ 254.696922][ T27] ? start_flush_work+0x820/0x820 [ 254.701957][ T27] ? wq_worker_last_func+0x40/0x40 [ 254.707468][ T27] ? smp_call_function_many+0x30/0x30 [ 254.713071][ T27] __lru_add_drain_all+0x9ce/0xac0 [ 254.718196][ T27] invalidate_bdev+0x8f/0xb0 [ 254.723099][ T27] ext4_fill_super+0x1943/0x94f0 [ 254.728047][ T27] ? format_decode+0x898/0x1300 [ 254.733313][ T27] ? ext4_mount+0x40/0x40 [ 254.737654][ T27] ? set_blocksize+0x1f3/0x370 [ 254.742743][ T27] ? sb_set_blocksize+0xa5/0xe0 [ 254.747598][ T27] mount_bdev+0x287/0x3c0 [ 254.751934][ T27] ? ext4_mount+0x40/0x40 [ 254.758505][ T27] legacy_get_tree+0xe6/0x180 [ 254.764267][ T27] ? ext4_errno_to_code+0x160/0x160 [ 254.769777][ T27] vfs_get_tree+0x88/0x270 [ 254.774734][ T27] do_new_mount+0x24a/0xa40 [ 254.779264][ T27] __se_sys_mount+0x2e3/0x3d0 [ 254.784361][ T27] ? __x64_sys_mount+0xc0/0xc0 [ 254.789141][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 254.794661][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 254.799451][ T27] do_syscall_64+0x4c/0xa0 [ 254.804203][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.808886][ T27] ? clear_bhb_loop+0x30/0x80 [ 254.813934][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.819835][ T27] RIP: 0033:0x7f31009940ca [ 254.824684][ T27] RSP: 002b:00007f30febebe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.833446][ T27] RAX: ffffffffffffffda RBX: 00007f30febebee0 RCX: 00007f31009940ca [ 254.841436][ T27] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 00007f30febebea0 [ 254.849782][ T27] RBP: 0000200000000280 R08: 00007f30febebee0 R09: 0000000002000759 [ 254.857984][ T27] R10: 0000000002000759 R11: 0000000000000246 R12: 0000200000000080 [ 254.867947][ T27] R13: 00007f30febebea0 R14: 000000000000051b R15: 000000000000002c [ 254.876698][ T27] [ 254.879740][ T27] INFO: task syz.1.123:4768 blocked for more than 146 seconds. [ 254.890842][ T27] Not tainted syzkaller #0 [ 254.899107][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.916111][ T27] task:syz.1.123 state:D stack:27600 pid: 4768 ppid: 4188 flags:0x00004004 [ 254.927573][ T27] Call Trace: [ 254.930870][ T27] [ 254.938029][ T27] __schedule+0x11ef/0x43c0 [ 254.944810][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.950811][ T27] ? __rwlock_init+0x140/0x140 [ 254.959820][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 254.967958][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 254.979582][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 254.987823][ T27] ? release_firmware_map_entry+0x190/0x190 [ 254.998047][ T27] ? __might_sleep+0xf0/0xf0 [ 255.005091][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 255.010172][ T27] schedule+0x11b/0x1e0 [ 255.018837][ T27] synchronize_rcu_expedited+0x680/0x750 [ 255.026872][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 255.031859][ T27] ? init_wait_entry+0xd0/0xd0 [ 255.041232][ T27] ? verify_lock_unused+0x140/0x140 [ 255.048733][ T27] ? evdev_release+0xfa/0x800 [ 255.054051][ T4230] Bluetooth: hci19: command 0x0419 tx timeout [ 255.060210][ T27] synchronize_rcu+0x119/0x1e0 [ 255.065156][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 255.070111][ T27] ? evdev_release+0x1ee/0x800 [ 255.074966][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 255.080863][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 255.091994][ T27] ? __rwlock_init+0x140/0x140 [ 255.098895][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 255.108508][ T27] evdev_release+0x1f3/0x800 [ 255.115300][ T27] ? evdev_open+0x5b0/0x5b0 [ 255.119910][ T27] __fput+0x234/0x930 [ 255.128343][ T27] task_work_run+0x125/0x1a0 [ 255.135373][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 255.140772][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 255.157982][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 255.163586][ T27] do_syscall_64+0x58/0xa0 [ 255.168011][ T27] ? clear_bhb_loop+0x30/0x80 [ 255.180034][ T27] ? clear_bhb_loop+0x30/0x80 [ 255.184830][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.190731][ T27] RIP: 0033:0x7f21b7ed9e59 [ 255.197213][ T27] RSP: 002b:00007ffc5406dbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 255.205763][ T27] RAX: 0000000000000000 RBX: 00007ffc5406dcd0 RCX: 00007f21b7ed9e59 [ 255.213841][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 255.221821][ T27] RBP: 000000000001929a R08: 0000000000000001 R09: 0000000000000000 [ 255.229994][ T27] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007ffc5406dd10 [ 255.238117][ T27] R13: 00007f21b8152fac R14: 0000000000019923 R15: 00007f21b8152fa0 [ 255.246400][ T27] [ 255.249660][ T27] [ 255.249660][ T27] Showing all locks held in the system: [ 255.257865][ T27] 1 lock held by khungtaskd/27: [ 255.263041][ T27] #0: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 255.272849][ T27] 3 locks held by kworker/u4:3/703: [ 255.278052][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.290103][ T27] #1: ffffc9000366fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.308823][ T27] #2: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 255.318906][ T27] 6 locks held by kworker/0:2/1324: [ 255.329433][ T27] 2 locks held by getty/3946: [ 255.335329][ T27] #0: ffff88814d081098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 255.350506][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 255.367449][ T27] 4 locks held by udevd/4182: [ 255.372221][ T27] #0: ffff88802a410668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 255.381023][ T27] #1: ffff8880605a3488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 255.391339][ T27] #2: ffff888019d9bda0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 255.400941][ T27] #3: ffff88806115c220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 255.409980][ T27] 3 locks held by kworker/1:4/4231: [ 255.417204][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.427883][ T27] #1: ffffc9000319fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.440717][ T27] #2: ffffffff8c323da8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 255.452066][ T27] 7 locks held by kworker/1:7/4234: [ 255.457569][ T27] #0: ffff888142dacd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.468560][ T27] #1: ffffc900031cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.480088][ T27] #2: ffff888147ce7220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 255.489636][ T27] #3: ffff888062bbe220 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 255.499171][ T27] #4: ffff8880620c91a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb0/0x750 [ 255.510020][ T27] #5: ffff88805c059ab0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb0/0x750 [ 255.520977][ T27] #6: ffffffff8cf46de8 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x10e/0x320 [ 255.533354][ T27] 2 locks held by kworker/u4:5/4245: [ 255.538697][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.550872][ T27] #1: ffffc9000323fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.561453][ T27] 3 locks held by kworker/1:10/4276: [ 255.567071][ T27] #0: ffff88802b89b538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.578432][ T27] #1: ffffc900032afd00 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.589509][ T27] #2: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 255.599290][ T27] 2 locks held by kworker/u4:9/4331: [ 255.604916][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 255.616307][ T27] #1: ffffc90003617d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 255.627000][ T27] 2 locks held by dhcpcd/4691: [ 255.631774][ T27] #0: ffff88806246e810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 255.644414][ T27] #1: ffffffff8c323da8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 255.655691][ T27] 2 locks held by syz.3.115/4706: [ 255.660724][ T27] #0: ffff8880760fc0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 255.671201][ T27] #1: ffffffff8c3b4cc8 (lock#4){+.+.}-{3:3}, at: __lru_add_drain_all+0x68/0xac0 [ 255.680651][ T27] 1 lock held by syz-executor/4777: [ 255.686110][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.697941][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698062][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.706136][ T27] 1 lock held by syz-executor/4785: [ 255.716086][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xa8f/0x1a50 [ 255.725457][ T27] 1 lock held by syz-executor/4790: [ 255.730656][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.741606][ T27] 1 lock held by syz-executor/4795: [ 255.747104][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.765148][ T27] 1 lock held by syz-executor/4798: [ 255.778130][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.789107][ T27] 1 lock held by dhcpcd/4800: [ 255.800587][ T27] #0: ffff88805be4c120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 255.811780][ T27] 1 lock held by dhcpcd/4801: [ 255.822014][ T27] #0: ffff8880202cc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 255.832275][ T27] 1 lock held by dhcpcd/4802: [ 255.836951][ T27] #0: ffff8880185e2120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 255.855247][ T27] 1 lock held by dhcpcd/4803: [ 255.859952][ T27] #0: ffff888075d3e120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 255.878307][ T27] 1 lock held by dhcpcd/4804: [ 255.885186][ T27] #0: ffff888023056120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 255.900414][ T27] 1 lock held by syz-executor/4806: [ 255.907946][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.921576][ T27] 1 lock held by syz-executor/4809: [ 255.928988][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.946765][ T27] 1 lock held by syz-executor/4812: [ 255.952002][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.968135][ T27] 1 lock held by syz-executor/4815: [ 255.973457][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 255.991388][ T27] 1 lock held by syz-executor/4818: [ 255.996653][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.013239][ T27] 1 lock held by syz-executor/4821: [ 256.018550][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.034555][ T27] 1 lock held by syz-executor/4824: [ 256.039784][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.055684][ T27] 1 lock held by syz-executor/4827: [ 256.061087][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.077121][ T27] 1 lock held by syz-executor/4830: [ 256.083502][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.101524][ T27] 1 lock held by syz-executor/4833: [ 256.106973][ T27] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 256.116618][ T27] [ 256.118952][ T27] ============================================= [ 256.118952][ T27] [ 256.127659][ T27] NMI backtrace for cpu 1 [ 256.132000][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 256.139195][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.149332][ T27] Call Trace: [ 256.152611][ T27] [ 256.155546][ T27] dump_stack_lvl+0x188/0x250 [ 256.160231][ T27] ? show_regs_print_info+0x20/0x20 [ 256.165426][ T27] ? load_image+0x400/0x400 [ 256.169935][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 256.175062][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 256.180006][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 256.186167][ T27] ? _printk+0xda/0x130 [ 256.190332][ T27] ? load_image+0x400/0x400 [ 256.194839][ T27] ? load_image+0x400/0x400 [ 256.199340][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 256.205407][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 256.211403][ T27] watchdog+0xe0f/0xe50 [ 256.215574][ T27] kthread+0x436/0x520 [ 256.219640][ T27] ? hungtask_pm_notify+0x40/0x40 [ 256.224662][ T27] ? kthread_blkcg+0xd0/0xd0 [ 256.229255][ T27] ret_from_fork+0x1f/0x30 [ 256.233682][ T27] [ 256.237396][ T27] Sending NMI from CPU 1 to CPUs 0: [ 256.242867][ C0] NMI backtrace for cpu 0 [ 256.242878][ C0] CPU: 0 PID: 1324 Comm: kworker/0:2 Not tainted syzkaller #0 [ 256.242895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.242905][ C0] Workqueue: usb_hub_wq hub_event [ 256.242926][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x4/0x80 [ 256.242945][ C0] Code: 77 1e 4a c7 44 02 08 06 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 0f 1f 44 00 00 48 8b 04 24 <65> 48 8b 0d 44 37 89 7e 65 8b 15 45 37 89 7e 81 e2 00 01 ff 00 74 [ 256.242957][ C0] RSP: 0018:ffffc900053f6b38 EFLAGS: 00000246 [ 256.242969][ C0] RAX: ffffffff87cfdccb RBX: ffff88802394010d RCX: ffff88802332d940 [ 256.242981][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000020 [ 256.242991][ C0] RBP: ffffc900053f6d40 R08: ffff88802332d940 R09: 0000000000000020 [ 256.243002][ C0] R10: 00000000000000bc R11: 0000000000000002 R12: dffffc0000000000 [ 256.243012][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000006f5 [ 256.243022][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 256.243036][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.243048][ C0] CR2: 000055f1dd4ad000 CR3: 000000002b4b7000 CR4: 00000000003506f0 [ 256.243062][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.243071][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.243081][ C0] Call Trace: [ 256.243086][ C0] [ 256.243090][ C0] __snd_usb_parse_audio_interface+0x33bb/0x4b00 [ 256.243122][ C0] ? proc_audio_usbbus_read+0x170/0x170 [ 256.243142][ C0] ? snd_usb_parse_audio_interface+0xb0/0xb0 [ 256.243158][ C0] ? snd_usb_audio_create+0xdd1/0x13d0 [ 256.243178][ C0] snd_usb_parse_audio_interface+0x36/0xb0 [ 256.243196][ C0] snd_usb_create_stream+0x3ec/0x610 [ 256.243215][ C0] usb_audio_probe+0x130b/0x1d90 [ 256.243236][ C0] ? snd_usb_autosuspend+0x1b0/0x1b0 [ 256.243250][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 256.243266][ C0] ? pm_runtime_enable+0x1b8/0x300 [ 256.243285][ C0] usb_probe_interface+0x5c5/0xb20 [ 256.243305][ C0] ? usb_register_driver+0x3d0/0x3d0 [ 256.243318][ C0] really_probe+0x284/0xc80 [ 256.243336][ C0] __driver_probe_device+0x18c/0x330 [ 256.243351][ C0] driver_probe_device+0x4f/0x420 [ 256.243366][ C0] __device_attach_driver+0x2b0/0x500 [ 256.243381][ C0] ? deferred_probe_work_func+0x230/0x230 [ 256.243396][ C0] bus_for_each_drv+0x184/0x210 [ 256.243413][ C0] ? deferred_probe_work_func+0x230/0x230 [ 256.243427][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 256.243449][ C0] __device_attach+0x2a8/0x480 [ 256.243468][ C0] ? kobject_uevent_env+0x371/0x890 [ 256.243485][ C0] ? device_attach+0x20/0x20 [ 256.243500][ C0] ? kobject_uevent_env+0x371/0x890 [ 256.243516][ C0] bus_probe_device+0xbc/0x1e0 [ 256.243531][ C0] ? device_add+0x97c/0xfb0 [ 256.243547][ C0] device_add+0xa00/0xfb0 [ 256.243566][ C0] usb_set_configuration+0x1991/0x1fd0 [ 256.243592][ C0] usb_generic_driver_probe+0x89/0x150 [ 256.243608][ C0] usb_probe_device+0x139/0x270 [ 256.243628][ C0] ? usb_register_device_driver+0x230/0x230 [ 256.243642][ C0] really_probe+0x284/0xc80 [ 256.243658][ C0] __driver_probe_device+0x18c/0x330 [ 256.243674][ C0] driver_probe_device+0x4f/0x420 [ 256.243689][ C0] __device_attach_driver+0x2b0/0x500 [ 256.243702][ C0] ? deferred_probe_work_func+0x230/0x230 [ 256.243717][ C0] bus_for_each_drv+0x184/0x210 [ 256.243733][ C0] ? deferred_probe_work_func+0x230/0x230 [ 256.243748][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 256.243763][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 256.243785][ C0] __device_attach+0x2a8/0x480 [ 256.243800][ C0] ? device_attach+0x20/0x20 [ 256.243816][ C0] ? kobject_uevent_env+0x371/0x890 [ 256.243833][ C0] bus_probe_device+0xbc/0x1e0 [ 256.243847][ C0] ? device_add+0x97c/0xfb0 [ 256.243863][ C0] device_add+0xa00/0xfb0 [ 256.243882][ C0] usb_new_device+0xd65/0x1660 [ 256.243904][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 256.243919][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 256.243939][ C0] hub_event+0x2e4a/0x55e0 [ 256.243976][ C0] ? hub_post_resume+0x120/0x120 [ 256.243992][ C0] ? read_lock_is_recursive+0x10/0x10 [ 256.244008][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 256.244024][ C0] ? _raw_spin_unlock+0x40/0x40 [ 256.244039][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 256.244055][ C0] process_one_work+0x85f/0x1010 [ 256.244079][ C0] ? worker_detach_from_pool+0x240/0x240 [ 256.244093][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 256.244110][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 256.244124][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 256.244140][ C0] ? wq_worker_running+0x97/0x170 [ 256.244155][ C0] worker_thread+0xaa6/0x1290 [ 256.244182][ C0] kthread+0x436/0x520 [ 256.244195][ C0] ? rcu_lock_release+0x20/0x20 [ 256.244209][ C0] ? kthread_blkcg+0xd0/0xd0 [ 256.244223][ C0] ret_from_fork+0x1f/0x30 [ 256.244244][ C0] [ 256.251683][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 256.744861][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 256.752066][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.762207][ T27] Call Trace: [ 256.765497][ T27] [ 256.768529][ T27] dump_stack_lvl+0x188/0x250 [ 256.773222][ T27] ? show_regs_print_info+0x20/0x20 [ 256.778610][ T27] ? load_image+0x400/0x400 [ 256.783144][ T27] panic+0x2e5/0x810 [ 256.787059][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 256.792781][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 256.797280][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 256.802835][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 256.809008][ T27] watchdog+0xe4e/0xe50 [ 256.813177][ T27] kthread+0x436/0x520 [ 256.817245][ T27] ? hungtask_pm_notify+0x40/0x40 [ 256.822274][ T27] ? kthread_blkcg+0xd0/0xd0 [ 256.826878][ T27] ret_from_fork+0x1f/0x30 [ 256.831306][ T27] [ 256.834697][ T27] Kernel Offset: disabled [ 256.839029][ T27] Rebooting in 86400 seconds..