last executing test programs: 7.868147827s ago: executing program 4 (id=83): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) 7.69687275s ago: executing program 4 (id=84): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x8) 6.843049989s ago: executing program 4 (id=93): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000372000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.22778678s ago: executing program 4 (id=95): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 5.380173788s ago: executing program 4 (id=101): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r1, 0x5) 4.555978741s ago: executing program 0 (id=110): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x48, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 4.321342707s ago: executing program 0 (id=114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 4.209006939s ago: executing program 4 (id=115): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/17, 0x11}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4.208511799s ago: executing program 3 (id=116): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="040000000000", 0x6) write(r0, &(0x7f0000000140)="05000000010000", 0x7) write(r0, &(0x7f0000000180)="05000000010001", 0x7) 4.115047918s ago: executing program 0 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.833979003s ago: executing program 32 (id=115): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/17, 0x11}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.813116398s ago: executing program 0 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010010}]}) 3.808657549s ago: executing program 3 (id=122): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000200)="0000000000000000000001000000000000000000703100"/164, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) write(0xffffffffffffffff, &(0x7f0000000300)="000000000000000000000000000000000100"/160, 0x98) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1}}) 3.563541277s ago: executing program 0 (id=126): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.064161395s ago: executing program 3 (id=130): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x4000076f, 0x3, 0x8001, 0x7, 0xf, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x8, 0x9, 0xb31, 0xb0c, 0x8, 0x1417d221, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0xd15, 0xfffffffe, 0x3, 0xa, 0x12, 0x8, 0xd2f1, 0x7, 0x7, 0x3, 0x43, 0x3, 0x2, 0x1ff, 0x47f2, 0x80000000, 0xff, 0xfffffffd, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x17ca, 0x5, 0x5, 0x9, 0x7ffd, 0x80000000, 0xcd, 0xfff], [0x80000000, 0x227, 0x1ff, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x4, 0x8001, 0x801, 0x7, 0xa, 0xb, 0x9e, 0xd9, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x403, 0x5, 0x0, 0x1020, 0x6, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xffbffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x3fc, 0x2243ccfc, 0x8455, 0x0, 0xc2, 0xffffffa8, 0xdc9b, 0x0, 0x1513e2a8, 0xff, 0x80000005, 0x1, 0x2004, 0x2, 0xd5c, 0x6, 0x8], [0x1, 0x7fff, 0x1, 0x0, 0x9, 0x3, 0x8, 0x7ffffffc, 0x2, 0x6, 0x6, 0x0, 0x4, 0x440, 0x7, 0x2, 0x7, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x7, 0x401, 0x80004, 0xc7, 0x4, 0x2, 0x1, 0x2, 0x80000001, 0x1, 0x10001, 0x4f68, 0x5, 0x10001, 0x5, 0xc, 0x3, 0x10003, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0xf53e, 0x2, 0x5, 0x7f, 0xf, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x1009, 0x3, 0x7fff, 0x10000, 0x1, 0x406, 0x200, 0x40, 0x5, 0x40000000, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x7, 0x400, 0x4, 0xb, 0x9, 0x1, 0x9, 0x1000000, 0x2, 0x1, 0x7fffffff, 0x6, 0x2, 0x3, 0xfff, 0xe79, 0x2, 0xe0, 0x2, 0x3ff, 0xfffffffa, 0x6, 0xd, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x9, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) 2.73372557s ago: executing program 3 (id=133): r0 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000001100)={@hyper, 0x8001}) 2.536225949s ago: executing program 3 (id=135): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.354633835s ago: executing program 1 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x4}}, 0x24, 0x2) 2.18105921s ago: executing program 1 (id=138): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="16891daabb4f"}]}, 0x3c}}, 0xc840) 2.036433188s ago: executing program 1 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x7, @mcast2, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0) 1.914472943s ago: executing program 1 (id=142): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.805356304s ago: executing program 2 (id=143): syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x80002001}) 1.718920061s ago: executing program 1 (id=144): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000100)="b9ff030f", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300)}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000080)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d63703836342c0099219d6edd07d51375519afee6cc952d4733ae72733580875a5073d73fddcf0f4a9cd7476fc08e60b282b71bb6e1b19df5c9171a20a1aae5858de37ce9cb563fce4d70912ba824f7f1"], 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 1.410945962s ago: executing program 2 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000fffff0000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1.373913579s ago: executing program 1 (id=146): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200c04000000a1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.235504016s ago: executing program 2 (id=147): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x2010805, &(0x7f0000000180)={[{@order_strict}, {@errors_continue}, {@discard}, {@nobarrier}, {@norecovery}, {@nobarrier}, {@order_strict}, {}, {@nobarrier}]}, 0x3, 0xd97, &(0x7f0000000e80)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) 958.125041ms ago: executing program 0 (id=148): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="24010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000521150025ff0904a1010901a1007508950109309102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000480)={0x2, 0x200, 0x9, 0x10, 0x9}) 522.511357ms ago: executing program 2 (id=149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x101) 280.813285ms ago: executing program 2 (id=150): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b22004000000000000002750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$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") socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 148.377131ms ago: executing program 2 (id=151): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0xc}, 0x8) 0s ago: executing program 3 (id=152): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8001, 0x6, 0xe, 0x4, 0x80, 0xfffffffd, 0x4de, 0x2, r2}, &(0x7f0000000040)=0x20) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.414191][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.424291][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. syzkaller login: [ 60.277511][ T4175] cgroup: Unknown subsys name 'net' [ 60.380588][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.918593][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.290981][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.364919][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.429319][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 63.477221][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.484627][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.493716][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.505631][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.524123][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.531593][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.539790][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.605838][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.613080][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.621279][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.633086][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.656388][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.667907][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.677394][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.684600][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.693159][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.737556][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.748380][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.756472][ T4196] device bridge_slave_0 entered promiscuous mode [ 63.785593][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.795016][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.802232][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.810153][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.834545][ T4188] team0: Port device team_slave_0 added [ 63.840588][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.848156][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.856774][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.869595][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.886849][ T4188] team0: Port device team_slave_1 added [ 63.892965][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.900043][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.908617][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.930588][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.974585][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.985427][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.009700][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.021753][ T4187] team0: Port device team_slave_0 added [ 64.034235][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.041565][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.049695][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.057882][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.065008][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.091359][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.110895][ T4187] team0: Port device team_slave_1 added [ 64.130179][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.138264][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.146475][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.154588][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.161617][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.187624][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.201452][ T4198] team0: Port device team_slave_0 added [ 64.221733][ T4196] team0: Port device team_slave_0 added [ 64.243507][ T4198] team0: Port device team_slave_1 added [ 64.271628][ T4196] team0: Port device team_slave_1 added [ 64.279268][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.296885][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.314575][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.321809][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.348119][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.370338][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.377437][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.402288][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.409361][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.435463][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.447427][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.454823][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.480771][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.506432][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.515011][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.541700][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.561860][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.568848][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.595266][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.609872][ T4189] team0: Port device team_slave_0 added [ 64.643681][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.650910][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.677409][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.689681][ T4189] team0: Port device team_slave_1 added [ 64.744159][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.751242][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.777381][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.793500][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.801322][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.808530][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.816492][ T4198] Cannot create hsr debugfs directory [ 64.836630][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.843542][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.850163][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.857954][ T4187] Cannot create hsr debugfs directory [ 64.864230][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.871497][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.897629][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.942446][ T4196] device hsr_slave_0 entered promiscuous mode [ 64.953765][ T4196] device hsr_slave_1 entered promiscuous mode [ 64.961191][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.968792][ T4196] Cannot create hsr debugfs directory [ 65.031620][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 65.031620][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.041866][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 65.045353][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 65.050336][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.144768][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.155174][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.161979][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.169542][ T4189] Cannot create hsr debugfs directory [ 65.367245][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.378457][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.392955][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.408966][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.437365][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.446922][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.457471][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.467400][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.540470][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.566442][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.589124][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.616008][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.647728][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.694739][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.704317][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.717962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.727914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.740182][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.752955][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.767773][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.784769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.794082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.804116][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.811513][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.820045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.842092][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.849070][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.864539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.874525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.884826][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.891944][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.900943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.908960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.917316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.958913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.968202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.977747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.988049][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.995200][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.005699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.014702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.023756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.033701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.042871][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.049955][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.058180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.069942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.079126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.088104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.097083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.105165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.119903][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.138715][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.152108][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.166133][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.179982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.189900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.198854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.207906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.218970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.229390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.238738][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.248864][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.263980][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.280128][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.289868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.298540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.306995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.336250][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.353662][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.378281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.391484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.401429][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.408544][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.424261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.437691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.446519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.469333][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.478379][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.488290][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.495460][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.523884][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.533689][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.549049][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.598423][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.606864][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.624944][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.639506][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.650237][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.659204][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.687579][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.723133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.731587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.739069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.755885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.768127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.780567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.789874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.799269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.807322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.816013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.833845][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.844852][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.876762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.893096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.907421][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.914631][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.929057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.938267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.989284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.999226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.010790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.019284][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.026414][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.038074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.047220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.062349][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.076950][ T4188] device veth0_vlan entered promiscuous mode [ 67.091132][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.107297][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.117880][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.122448][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.137209][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.141133][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.154943][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 67.160085][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.171086][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 67.180474][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.189187][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 67.214796][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.231976][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.244975][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.253784][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.262145][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.269603][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.278811][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.287422][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.300676][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.308157][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.325928][ T4188] device veth1_vlan entered promiscuous mode [ 67.344637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.354933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.363462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.372871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.382033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.390953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.402796][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.427875][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.443793][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.456274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.464888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.473646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.482702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.491665][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.498751][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.507966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.531623][ T4188] device veth0_macvtap entered promiscuous mode [ 67.573260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.589166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.600011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.615432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.626040][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633157][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.641539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.650386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.659894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.684393][ T4187] device veth0_vlan entered promiscuous mode [ 67.697211][ T4188] device veth1_macvtap entered promiscuous mode [ 67.707729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.717541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.734090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.746140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.755940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.764998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.773264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.797571][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.808030][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.823907][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.836054][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.847502][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.856987][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.867746][ T4187] device veth1_vlan entered promiscuous mode [ 67.881760][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.893804][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.916014][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.930192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.939787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.949094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.957939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.969960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.996448][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.016532][ T4196] device veth0_vlan entered promiscuous mode [ 68.030089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.040457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.054119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.064068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.078156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.089689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.100354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.110097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.118612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.136347][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.149658][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.159360][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169065][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.178305][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.201172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.209894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.235796][ T4187] device veth0_macvtap entered promiscuous mode [ 68.253276][ T4196] device veth1_vlan entered promiscuous mode [ 68.299938][ T4187] device veth1_macvtap entered promiscuous mode [ 68.392563][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.415684][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.432025][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.453142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.462072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.470433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.489113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.502732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.510265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.518984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.528145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.537536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.547599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.569341][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.591700][ T4196] device veth0_macvtap entered promiscuous mode [ 68.613200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.624452][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.637004][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.647568][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.660306][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.671686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.680397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.688851][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.702283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.713650][ T4196] device veth1_macvtap entered promiscuous mode [ 68.733788][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744163][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.753546][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.763228][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.774268][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.785936][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.827851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.836747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.863751][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.878555][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.888307][ T4198] device veth0_vlan entered promiscuous mode [ 68.899998][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.909007][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.920589][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.931950][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.940290][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.949099][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.958350][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.966863][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.975675][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.989767][ T4189] device veth0_vlan entered promiscuous mode [ 68.998741][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.014224][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.025738][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.036729][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.048965][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.064873][ T4198] device veth1_vlan entered promiscuous mode [ 69.086598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.096161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.105492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.118746][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.131083][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.141951][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.152666][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.168436][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.185551][ T4189] device veth1_vlan entered promiscuous mode [ 69.192430][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 69.203393][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 69.210004][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 69.219192][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 69.221045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.237146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.246332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.255050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.267461][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.277356][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 69.290519][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.299813][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.314289][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.394687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.403417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.413613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.425292][ T4198] device veth0_macvtap entered promiscuous mode [ 69.454136][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.476611][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.494128][ T4198] device veth1_macvtap entered promiscuous mode [ 69.544217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.555186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.566269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.584114][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.594179][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.636737][ T4269] loop2: detected capacity change from 0 to 512 [ 69.658525][ T4189] device veth0_macvtap entered promiscuous mode [ 69.677304][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.686637][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.708758][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.721775][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.731985][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.742892][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.754351][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.765842][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.780082][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.790478][ T4269] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 589847: comm syz.2.6: invalid block [ 69.797501][ T4189] device veth1_macvtap entered promiscuous mode [ 69.814501][ T4269] EXT4-fs (loop2): Remounting filesystem read-only [ 69.829451][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.837253][ T4269] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.6: couldn't read orphan inode 11 (err -117) [ 69.852391][ T4269] EXT4-fs (loop2): Remounting filesystem read-only [ 69.858944][ T4269] EXT4-fs (loop2): 1 truncate cleaned up [ 69.866185][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.872251][ T4269] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 69.877767][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.897285][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.908341][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.919794][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.930991][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.951173][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.962927][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.975042][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.000110][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.018171][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.030495][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.048441][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.059509][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.070529][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.081439][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.092828][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.106957][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.133875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.143571][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.167599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.174566][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.187302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.198467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.211953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.232783][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.259724][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.279807][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.288840][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.309445][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.321041][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.331624][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.342185][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.352632][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.371029][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.382445][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.406194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.418251][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.428482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.438162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.476577][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.488265][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.503073][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.508826][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.530966][ T4275] vcan0: tx address claim with broadcast sa [ 70.541742][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550498][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.581616][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.833256][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.888635][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.926172][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.946689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.952711][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.003642][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.042540][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.050990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.069236][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.083966][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.101743][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.109351][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.128313][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.248527][ T4300] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13'. [ 71.282132][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 71.289880][ T4240] Bluetooth: hci1: command 0x0419 tx timeout [ 71.313083][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 71.336224][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.352295][ T4240] Bluetooth: hci4: command 0x0419 tx timeout [ 71.360021][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.367117][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373876][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.397083][ T4240] Bluetooth: hci0: command 0x0419 tx timeout [ 71.404820][ T4302] Zero length message leads to an empty skb [ 71.640801][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 71.781258][ T1107] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 71.793371][ T1107] usb 2-1: config 0 has no interface number 0 [ 71.838727][ T4318] device batadv_slave_1 entered promiscuous mode [ 71.895276][ T4317] device batadv_slave_1 left promiscuous mode [ 71.971245][ T1107] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 71.987572][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.005541][ T1107] usb 2-1: Product: syz [ 72.024520][ T1107] usb 2-1: Manufacturer: syz [ 72.029206][ T1107] usb 2-1: SerialNumber: syz [ 72.079660][ T1107] usb 2-1: config 0 descriptor?? [ 72.098287][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 72.134738][ T1107] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 72.220445][ T4336] ======================================================= [ 72.220445][ T4336] WARNING: The mand mount option has been deprecated and [ 72.220445][ T4336] and is ignored by this kernel. Remove the mand [ 72.220445][ T4336] option from the mount to silence this warning. [ 72.220445][ T4336] ======================================================= [ 72.347838][ T1107] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 72.378742][ T1107] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 72.540709][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.595372][ T4344] loop3: detected capacity change from 0 to 2048 [ 72.662769][ T4344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.795428][ T4339] loop0: detected capacity change from 0 to 32768 [ 72.810492][ T1107] usb 2-1: USB disconnect, device number 2 [ 72.816456][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 72.857327][ T1107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 72.905410][ T1107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 72.923590][ T1107] quatech2 2-1:0.51: device disconnected [ 72.981048][ T4267] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.018091][ T4267] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.038409][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.046147][ T4267] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 73.062806][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.099364][ T4267] usb 3-1: config 0 descriptor?? [ 73.161682][ T4339] XFS (loop0): Mounting V5 Filesystem [ 73.241492][ T4363] loop3: detected capacity change from 0 to 512 [ 73.266008][ T4339] XFS (loop0): Ending clean mount [ 73.301837][ T26] audit: type=1800 audit(1790651935.823:2): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 73.320485][ T4369] loop4: detected capacity change from 0 to 512 [ 73.441751][ T4189] XFS (loop0): Unmounting Filesystem [ 73.460934][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 73.512836][ T4363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 73.513848][ T4369] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.616291][ T4267] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x6 [ 73.641304][ T4235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.682496][ T4267] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 73.771409][ T4267] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 73.835084][ T4267] usb 3-1: USB disconnect, device number 2 [ 73.865521][ T4382] process 'syz.3.41' launched './file0' with NULL argv: empty string added [ 73.885458][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 74.012993][ T4235] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 74.037107][ T4235] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.042536][ T4383] fido_id[4383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 74.082718][ T4235] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.102965][ T4235] usb 2-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 74.130020][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.159073][ T4235] usb 2-1: config 0 descriptor?? [ 74.223867][ T4387] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 74.400903][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 74.457265][ T4395] loop2: detected capacity change from 0 to 1024 [ 74.510900][ T4267] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.656747][ T4235] input: HID 0518:0002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0518:0002.0002/input/input5 [ 74.807163][ T4267] usb 1-1: Using ep0 maxpacket: 8 [ 74.813982][ T4235] ezkey 0003:0518:0002.0002: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.1-1/input0 [ 74.868356][ T4402] loop4: detected capacity change from 0 to 4096 [ 74.916777][ T1107] usb 2-1: USB disconnect, device number 3 [ 74.931949][ T4267] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 74.994378][ T4413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53'. [ 75.056005][ T4414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.101271][ T4267] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 75.125552][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.147931][ T4267] usb 1-1: Product: syz [ 75.161778][ T4267] usb 1-1: Manufacturer: syz [ 75.199227][ T4267] usb 1-1: SerialNumber: syz [ 75.213500][ T4267] usb 1-1: config 0 descriptor?? [ 75.294265][ T4267] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 75.326351][ T4418] fido_id[4418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 75.710989][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.765706][ T4444] loop1: detected capacity change from 0 to 256 [ 75.794524][ T4444] exfat: Deprecated parameter 'utf8' [ 75.814280][ T4444] exfat: Deprecated parameter 'utf8' [ 75.819734][ T4444] exfat: Deprecated parameter 'utf8' [ 75.849329][ T4444] exfat: Deprecated parameter 'namecase' [ 75.900471][ T4444] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 76.101732][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 76.117583][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 76.128551][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 76.150960][ T4267] gspca_zc3xx: reg_w_i err -71 [ 76.155851][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 76.172845][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 76.193431][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.210553][ T1107] usb 5-1: config 0 descriptor?? [ 76.481799][ T1107] hdpvr 5-1:0.0: firmware version 0x12 dated 継򂧥訠綍D奮jvi0 [ 76.481799][ T1107] 喢洃阷Y [ 76.695001][ T4459] loop2: detected capacity change from 0 to 32768 [ 76.711056][ T1107] hdpvr 5-1:0.0: device init failed [ 76.720894][ T1107] hdpvr: probe of 5-1:0.0 failed with error -12 [ 76.738035][ T1107] usb 5-1: USB disconnect, device number 2 [ 76.808972][ T4267] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 76.827653][ T4267] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 76.852108][ T4459] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.919489][ T4267] usb 1-1: USB disconnect, device number 2 [ 77.064675][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 77.073365][ T4467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.76'. [ 77.098404][ T4469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 77.113981][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 77.130717][ T4469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 77.141189][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.77'. [ 77.888076][ T4472] loop1: detected capacity change from 0 to 32768 [ 77.943334][ T4235] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.957008][ T4501] loop2: detected capacity change from 0 to 8 [ 77.968277][ T4472] XFS (loop1): Mounting V5 Filesystem [ 78.040092][ T4472] XFS (loop1): Ending clean mount [ 78.092406][ T4472] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 78.188609][ T4187] XFS (loop1): Unmounting Filesystem [ 78.321014][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.338404][ T4235] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.361954][ T4235] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 78.520958][ T4235] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 78.536504][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 78.555701][ T4235] usb 1-1: Product: syz [ 78.565868][ T4235] usb 1-1: Manufacturer: syz [ 78.591234][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 78.600831][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.612218][ T4235] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 78.639742][ T4235] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 78.720829][ T21] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 78.740707][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.760858][ T21] usb 4-1: config 0 has no interface number 0 [ 78.781346][ T21] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 78.809948][ T21] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 78.836792][ T21] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.860785][ T21] usb 4-1: config 0 interface 52 has no altsetting 0 [ 78.872458][ T4234] usb 1-1: USB disconnect, device number 3 [ 78.881933][ T4234] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 78.891167][ T4234] iuu_phoenix 1-1:1.0: device disconnected [ 78.942484][ T21] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 78.955200][ T21] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 78.970916][ T21] usb 4-1: Manufacturer: syz [ 78.990349][ T21] usb 4-1: config 0 descriptor?? [ 79.001043][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.036758][ T21] hub 4-1:0.52: bad descriptor, ignoring hub [ 79.045228][ T4233] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 79.055026][ T21] hub: probe of 4-1:0.52 failed with error -5 [ 79.062381][ T4233] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 79.074754][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.252059][ T21] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 79.264678][ T21] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 79.308645][ T4521] loop4: detected capacity change from 0 to 32768 [ 79.344452][ T4521] (syz.4.95,4521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.360238][ T21] usb 3-1: USB disconnect, device number 3 [ 79.366570][ T4521] (syz.4.95,4521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 79.426474][ T4521] JBD2: Ignoring recovery information on journal [ 79.460810][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.590389][ T4530] loop0: detected capacity change from 0 to 256 [ 79.603771][ T4521] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.621095][ T2286] usb 4-1: USB disconnect, device number 2 [ 79.666439][ T4530] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 79.831464][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.877498][ T4233] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.030864][ T4233] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 80.050373][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 80.060508][ T4233] usb 2-1: Product: syz [ 80.075977][ T4233] usb 2-1: Manufacturer: syz [ 80.142329][ T4233] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 80.164427][ T4233] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 80.391290][ T4525] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 7u虧e!W锆i飲j朂/┝)P( is not a unsigned long [ 80.449128][ T21] usb 2-1: USB disconnect, device number 4 [ 80.469396][ T21] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 80.493742][ T21] iuu_phoenix 2-1:1.0: device disconnected [ 80.561697][ T4551] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 80.641770][ T4532] ocfs2: Unmounting device (7,4) on (node local) [ 80.841913][ T4560] loop2: detected capacity change from 0 to 256 [ 80.945208][ T4560] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.000767][ T4560] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 81.057606][ T4560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.179822][ T4569] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 81.230242][ T4571] netlink: 108 bytes leftover after parsing attributes in process `syz.1.117'. [ 81.408303][ T4577] 0x000000000000-0x000000010000 : "" [ 81.530913][ T4577] ftl_cs: FTL header not found. [ 82.000813][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.151827][ T4596] loop1: detected capacity change from 0 to 4096 [ 82.210853][ T4596] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 82.243979][ T4603] input: syz0 as /devices/virtual/input/input8 [ 82.377405][ T4596] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 82.400841][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 82.410542][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 82.494298][ T1107] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 82.528172][ T4597] chnl_net:caif_netlink_parms(): no params data found [ 82.539357][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.610468][ T4596] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 82.633096][ T1107] usb 1-1: probing VID:PID(0424:012C) [ 82.659073][ T4615] ntfs3: loop1: ino=5, "/" directory corrupted [ 82.665288][ T1107] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 82.700656][ T1107] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 82.730669][ T1107] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 82.763572][ T1107] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 82.770106][ T1107] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 82.869056][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.869237][ T4597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.873431][ T4597] device bridge_slave_0 entered promiscuous mode [ 82.973956][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.991695][ T4597] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.016159][ T4597] device bridge_slave_1 entered promiscuous mode [ 83.081088][ T1107] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 83.089526][ T2286] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.119715][ T4597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.148364][ T4597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.199227][ T4597] team0: Port device team_slave_0 added [ 83.233694][ T4597] team0: Port device team_slave_1 added [ 83.291009][ T1107] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 83.305572][ T4597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.340657][ T4597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.396851][ T4597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.426764][ T4597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.434272][ T4597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.466459][ T4597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.515568][ T2286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.529428][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.540531][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.551385][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 83.563929][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 83.574349][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 83.593330][ T4639] loop1: detected capacity change from 0 to 1024 [ 83.599785][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 83.611231][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 83.621539][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 83.631823][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 83.642087][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 83.652310][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 83.665157][ T2286] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.675428][ T2286] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.685334][ T2286] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 83.851956][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.856361][ T2286] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 83.880576][ T2286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.929593][ T2286] usb 4-1: Product: syz [ 83.948376][ T2286] usb 4-1: Manufacturer: syz [ 83.955222][ T2286] usb 4-1: SerialNumber: syz [ 83.989190][ T4597] device hsr_slave_0 entered promiscuous mode [ 84.018222][ T4597] device hsr_slave_1 entered promiscuous mode [ 84.025970][ T4597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.034682][ T4597] Cannot create hsr debugfs directory [ 84.048218][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.061459][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.068554][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.076981][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 84.111678][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.117565][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.142979][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.170816][ T1107] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 84.179671][ T4647] loop2: detected capacity change from 0 to 4096 [ 84.186372][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.187168][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.236402][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.238660][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.243798][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.243881][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.243966][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.244048][ T4618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.286091][ T2286] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 84.300075][ T1107] usb 1-1: USB disconnect, device number 4 [ 84.307662][ T7] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 84.326845][ T4647] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.333446][ T2286] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 84.359423][ T4647] NILFS (loop2): mounting unchecked fs [ 84.376978][ T4647] NILFS (loop2): recovery required for readonly filesystem [ 84.378628][ T2286] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 84.395402][ T2286] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 84.410420][ T4647] NILFS (loop2): write access will be enabled during recovery [ 84.418290][ T2286] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 84.446737][ T1107] USB vub300 remote SDIO host controller[0] now disconnected [ 84.485537][ T4378] udevd[4378]: incorrect nilfs2 checksum on /dev/loop2 [ 84.513923][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.556554][ T4647] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 84.572012][ T7] usb 4-1: USB disconnect, device number 3 [ 84.607854][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 84.625656][ T4647] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 84.639943][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 84.661708][ T7] keyspan 4-1:1.0: device disconnected [ 84.767227][ T4234] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 84.777682][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.797139][ T4234] usb 2-1: Product: syz [ 84.804453][ T4597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.826989][ T4234] usb 2-1: Manufacturer: syz [ 84.840259][ T4234] usb 2-1: SerialNumber: syz [ 84.840994][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.874655][ T4234] usb 2-1: config 0 descriptor?? [ 84.903084][ T4597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.913697][ T4597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.914263][ T4234] ch341 2-1:0.0: ch341-uart converter detected [ 84.932173][ T4653] loop2: detected capacity change from 0 to 2048 [ 84.967140][ T4597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.984907][ T4653] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 84.998752][ T4653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.262873][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.273530][ C0] [ 85.273541][ C0] ================================ [ 85.273547][ C0] WARNING: inconsistent lock state [ 85.273569][ C0] syzkaller #0 Not tainted [ 85.273581][ C0] -------------------------------- [ 85.273587][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 85.273596][ C0] kworker/0:2/1107 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 85.273617][ C0] ffff88807a7e8710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210 [ 85.273670][ C0] {SOFTIRQ-ON-W} state was registered at: [ 85.273677][ C0] lock_acquire+0x19e/0x400 [ 85.273700][ C0] process_one_work+0x7ba/0xff0 [ 85.273718][ C0] worker_thread+0xad7/0x12a0 [ 85.273736][ C0] kthread+0x42e/0x520 [ 85.273751][ C0] ret_from_fork+0x1f/0x30 [ 85.273771][ C0] irq event stamp: 101728 [ 85.273779][ C0] hardirqs last enabled at (101728): [] __cancel_work_timer+0x36a/0x560 [ 85.273804][ C0] hardirqs last disabled at (101727): [] try_to_grab_pending+0xfb/0x820 [ 85.273827][ C0] softirqs last enabled at (101044): [] __irq_exit_rcu+0x13b/0x230 [ 85.273850][ C0] softirqs last disabled at (101663): [] __irq_exit_rcu+0x13b/0x230 [ 85.273873][ C0] [ 85.273873][ C0] other info that might help us debug this: [ 85.273879][ C0] Possible unsafe locking scenario: [ 85.273879][ C0] [ 85.273884][ C0] CPU0 [ 85.273888][ C0] ---- [ 85.273892][ C0] lock((work_completion)(&(&host->detect)->work)); [ 85.273908][ C0] [ 85.273912][ C0] lock((work_completion)(&(&host->detect)->work)); [ 85.273926][ C0] [ 85.273926][ C0] *** DEADLOCK *** [ 85.273926][ C0] [ 85.273930][ C0] 5 locks held by kworker/0:2/1107: [ 85.273942][ C0] #0: ffff888142396938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 85.273992][ C0] #1: ffffc90004b67d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 85.274051][ C0] #2: ffff888023ee4220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 85.274099][ C0] #3: ffffffff8c313aa0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 85.274145][ C0] #4: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 85.274195][ C0] [ 85.274195][ C0] stack backtrace: [ 85.274209][ C0] CPU: 0 PID: 1107 Comm: kworker/0:2 Not tainted syzkaller #0 [ 85.274228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.274240][ C0] Workqueue: usb_hub_wq hub_event [ 85.274268][ C0] Call Trace: [ 85.274275][ C0] [ 85.274282][ C0] dump_stack_lvl+0x188/0x250 [ 85.274304][ C0] ? show_regs_print_info+0x20/0x20 [ 85.274331][ C0] valid_state+0x13b/0x1d0 [ 85.274350][ C0] mark_lock_irq+0xa9/0x900 [ 85.274369][ C0] ? stack_trace_save+0xa6/0xf0 [ 85.274388][ C0] ? save_trace+0xad0/0xad0 [ 85.274410][ C0] ? save_trace+0x5a/0xad0 [ 85.274426][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 85.274451][ C0] mark_lock+0x208/0x320 [ 85.274469][ C0] __lock_acquire+0xc63/0x7b50 [ 85.274492][ C0] ? verify_lock_unused+0x140/0x140 [ 85.274517][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.274541][ C0] ? verify_lock_unused+0x140/0x140 [ 85.274562][ C0] ? __rwlock_init+0x140/0x140 [ 85.274586][ C0] ? debug_object_assert_init+0x1e8/0x2f0 [ 85.274611][ C0] lock_acquire+0x19e/0x400 [ 85.274632][ C0] ? __flush_work+0xfa/0x210 [ 85.274654][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.274676][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.274698][ C0] ? kobject_put+0x25c/0x450 [ 85.274719][ C0] ? call_timer_fn+0x17b/0x540 [ 85.274739][ C0] ? __run_timers+0x56c/0x810 [ 85.274759][ C0] ? run_timer_softirq+0x63/0xf0 [ 85.274784][ C0] __flush_work+0x116/0x210 [ 85.274802][ C0] ? __flush_work+0xfa/0x210 [ 85.274822][ C0] ? flush_work+0x20/0x20 [ 85.274840][ C0] ? __timer_delete+0x6c/0x220 [ 85.274860][ C0] ? mark_lock+0x94/0x320 [ 85.274877][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.274903][ C0] ? lock_chain_count+0x20/0x20 [ 85.274925][ C0] ? kasan_quarantine_put+0x39/0x210 [ 85.274945][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 85.274965][ C0] ? __cancel_work_timer+0x36a/0x560 [ 85.274987][ C0] __cancel_work_timer+0x3f4/0x560 [ 85.275014][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 85.275038][ C0] ? cancel_work_sync+0x20/0x20 [ 85.275056][ C0] ? kobject_put+0x25c/0x450 [ 85.275078][ C0] ? kfree+0xef/0x2a0 [ 85.275098][ C0] ? kobject_put+0x41d/0x450 [ 85.275123][ C0] ? kref_get+0x70/0x70 [ 85.275143][ C0] mmc_free_host+0x15/0x30 [ 85.275164][ C0] call_timer_fn+0x17b/0x540 [ 85.275186][ C0] ? kref_get+0x70/0x70 [ 85.275205][ C0] ? __run_timers+0x810/0x810 [ 85.275230][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.275248][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.275270][ C0] ? kref_get+0x70/0x70 [ 85.275290][ C0] __run_timers+0x56c/0x810 [ 85.275318][ C0] ? detach_timer+0x2b0/0x2b0 [ 85.275339][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.275365][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 85.275386][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.275409][ C0] run_timer_softirq+0x63/0xf0 [ 85.275431][ C0] handle_softirqs+0x336/0x830 [ 85.275452][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 85.275472][ C0] ? do_softirq+0x210/0x210 [ 85.275489][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.275513][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 85.275534][ C0] __irq_exit_rcu+0x13b/0x230 [ 85.275552][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.275574][ C0] irq_exit_rcu+0x5/0x20 [ 85.275591][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.275614][ C0] [ 85.275620][ C0] [ 85.275627][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.275658][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 85.275678][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 85.275696][ C0] RSP: 0018:ffffc90004b66fc0 EFLAGS: 00000246 [ 85.275715][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 85.275730][ C0] RDX: ffffc90014a1b000 RSI: 000000000001896f RDI: 0000000000000000 [ 85.275743][ C0] RBP: ffffc90004b67230 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 85.275758][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 85.275772][ C0] R13: 0000000000000071 R14: 0000000000000000 R15: dffffc0000000000 [ 85.275790][ C0] ? console_unlock+0xc8d/0x10f0 [ 85.275812][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.275839][ C0] ? console_trylock_spinning+0x370/0x370 [ 85.275858][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 85.275879][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 85.275898][ C0] ? vprintk_emit+0xa7/0x150 [ 85.275915][ C0] ? printk_parse_prefix+0x310/0x310 [ 85.275934][ C0] ? vprintk_emit+0xa7/0x150 [ 85.275950][ C0] ? console_trylock+0x70/0x70 [ 85.275969][ C0] ? vsnprintf+0x1b22/0x1c20 [ 85.275994][ C0] ? vprintk_emit+0x150/0x150 [ 85.276017][ C0] ? snprintf+0xe5/0x140 [ 85.276039][ C0] ? vscnprintf+0x80/0x80 [ 85.276058][ C0] ? kasan_set_free_info+0x1f/0x40 [ 85.276082][ C0] ? usb_control_msg+0x2be/0x3e0 [ 85.276103][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.276126][ C0] vprintk_emit+0xc0/0x150 [ 85.276145][ C0] dev_vprintk_emit+0x2c2/0x360 [ 85.276167][ C0] ? _dev_info+0x170/0x170 [ 85.276192][ C0] dev_printk_emit+0xeb/0x140 [ 85.276215][ C0] ? dev_vprintk_emit+0x360/0x360 [ 85.276239][ C0] ? __dev_printk+0x131/0x190 [ 85.276261][ C0] _dev_notice+0x11b/0x170 [ 85.276283][ C0] ? _dev_warn+0x170/0x170 [ 85.276305][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.276331][ C0] usb_get_configuration+0x4c61/0x51f0 [ 85.276358][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1b0 [ 85.276384][ C0] ? rpm_resume+0xb2c/0x1c70 [ 85.276411][ C0] ? usb_destroy_configuration+0x680/0x680 [ 85.276429][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.276455][ C0] ? lock_chain_count+0x20/0x20 [ 85.276474][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.276497][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.276517][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.276540][ C0] usb_new_device+0x121/0x15d0 [ 85.276560][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.276583][ C0] ? mutex_unlock+0x10/0x10 [ 85.276599][ C0] ? lock_chain_count+0x20/0x20 [ 85.276618][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.276636][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 85.276655][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.276674][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.276696][ C0] hub_event+0x2b8d/0x5260 [ 85.276737][ C0] ? hub_post_resume+0x120/0x120 [ 85.276757][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.276779][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.276800][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.276820][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.276841][ C0] process_one_work+0x867/0xff0 [ 85.276870][ C0] ? worker_detach_from_pool+0x240/0x240 [ 85.276890][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 85.276913][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.276932][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.276953][ C0] ? wq_worker_running+0x97/0x170 [ 85.276973][ C0] worker_thread+0xd93/0x12a0 [ 85.277005][ C0] kthread+0x42e/0x520 [ 85.277031][ C0] ? rcu_lock_release+0x20/0x20 [ 85.277050][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.277068][ C0] ret_from_fork+0x1f/0x30 [ 85.277093][ C0] [ 85.277102][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031 [ 85.277115][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1107, name: kworker/0:2 [ 85.277131][ C0] INFO: lockdep is turned off. [ 85.277136][ C0] Preemption disabled at: [ 85.277142][ C0] [] vprintk_emit+0xa2/0x150 [ 85.277165][ C0] CPU: 0 PID: 1107 Comm: kworker/0:2 Not tainted syzkaller #0 [ 85.277184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.277197][ C0] Workqueue: usb_hub_wq hub_event [ 85.277221][ C0] Call Trace: [ 85.277228][ C0] [ 85.277234][ C0] dump_stack_lvl+0x188/0x250 [ 85.277252][ C0] ? verify_lock_unused+0x140/0x140 [ 85.277274][ C0] ? show_regs_print_info+0x20/0x20 [ 85.277293][ C0] ? load_image+0x410/0x410 [ 85.277316][ C0] ___might_sleep+0x493/0x610 [ 85.277338][ C0] ? vprintk_emit+0xa2/0x150 [ 85.277355][ C0] ? __might_sleep+0xf0/0xf0 [ 85.277372][ C0] ? lock_release+0xb5/0x8a0 [ 85.277395][ C0] ? __flush_work+0x11a/0x210 [ 85.277414][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.277434][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 85.277455][ C0] ? kobject_put+0x25c/0x450 [ 85.277477][ C0] start_flush_work+0x2e/0x830 [ 85.277499][ C0] __flush_work+0x148/0x210 [ 85.277519][ C0] ? flush_work+0x20/0x20 [ 85.277541][ C0] ? lock_chain_count+0x20/0x20 [ 85.277563][ C0] ? kasan_quarantine_put+0x39/0x210 [ 85.277580][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 85.277599][ C0] ? __cancel_work_timer+0x36a/0x560 [ 85.277619][ C0] __cancel_work_timer+0x3f4/0x560 [ 85.277638][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 85.277659][ C0] ? cancel_work_sync+0x20/0x20 [ 85.277677][ C0] ? kobject_put+0x25c/0x450 [ 85.277699][ C0] ? kfree+0xef/0x2a0 [ 85.277720][ C0] ? kobject_put+0x41d/0x450 [ 85.277744][ C0] ? kref_get+0x70/0x70 [ 85.277764][ C0] mmc_free_host+0x15/0x30 [ 85.277783][ C0] call_timer_fn+0x17b/0x540 [ 85.277806][ C0] ? kref_get+0x70/0x70 [ 85.277825][ C0] ? __run_timers+0x810/0x810 [ 85.277851][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.277871][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.277891][ C0] ? kref_get+0x70/0x70 [ 85.277911][ C0] __run_timers+0x56c/0x810 [ 85.277961][ C0] ? detach_timer+0x2b0/0x2b0 [ 85.277983][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.278022][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 85.278043][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.278067][ C0] run_timer_softirq+0x63/0xf0 [ 85.278089][ C0] handle_softirqs+0x336/0x830 [ 85.278111][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 85.278131][ C0] ? do_softirq+0x210/0x210 [ 85.278150][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.278173][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 85.278196][ C0] __irq_exit_rcu+0x13b/0x230 [ 85.278215][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.278239][ C0] irq_exit_rcu+0x5/0x20 [ 85.278256][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.278280][ C0] [ 85.278286][ C0] [ 85.278292][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.278315][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 85.278336][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 85.278352][ C0] RSP: 0018:ffffc90004b66fc0 EFLAGS: 00000246 [ 85.278371][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 85.278386][ C0] RDX: ffffc90014a1b000 RSI: 000000000001896f RDI: 0000000000000000 [ 85.278399][ C0] RBP: ffffc90004b67230 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 85.278414][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 85.278428][ C0] R13: 0000000000000071 R14: 0000000000000000 R15: dffffc0000000000 [ 85.278446][ C0] ? console_unlock+0xc8d/0x10f0 [ 85.278467][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.278494][ C0] ? console_trylock_spinning+0x370/0x370 [ 85.278513][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 85.278534][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 85.278553][ C0] ? vprintk_emit+0xa7/0x150 [ 85.278570][ C0] ? printk_parse_prefix+0x310/0x310 [ 85.278588][ C0] ? vprintk_emit+0xa7/0x150 [ 85.278606][ C0] ? console_trylock+0x70/0x70 [ 85.278625][ C0] ? vsnprintf+0x1b22/0x1c20 [ 85.278651][ C0] ? vprintk_emit+0x150/0x150 [ 85.278668][ C0] ? snprintf+0xe5/0x140 [ 85.278691][ C0] ? vscnprintf+0x80/0x80 [ 85.278710][ C0] ? kasan_set_free_info+0x1f/0x40 [ 85.278733][ C0] ? usb_control_msg+0x2be/0x3e0 [ 85.278753][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.278776][ C0] vprintk_emit+0xc0/0x150 [ 85.278796][ C0] dev_vprintk_emit+0x2c2/0x360 [ 85.278817][ C0] ? _dev_info+0x170/0x170 [ 85.278842][ C0] dev_printk_emit+0xeb/0x140 [ 85.278866][ C0] ? dev_vprintk_emit+0x360/0x360 [ 85.278889][ C0] ? __dev_printk+0x131/0x190 [ 85.278911][ C0] _dev_notice+0x11b/0x170 [ 85.278934][ C0] ? _dev_warn+0x170/0x170 [ 85.278957][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.278983][ C0] usb_get_configuration+0x4c61/0x51f0 [ 85.279019][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1b0 [ 85.279044][ C0] ? rpm_resume+0xb2c/0x1c70 [ 85.279072][ C0] ? usb_destroy_configuration+0x680/0x680 [ 85.279091][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.279115][ C0] ? lock_chain_count+0x20/0x20 [ 85.279136][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.279160][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.279185][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.279210][ C0] usb_new_device+0x121/0x15d0 [ 85.279230][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.279251][ C0] ? mutex_unlock+0x10/0x10 [ 85.279268][ C0] ? lock_chain_count+0x20/0x20 [ 85.279287][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.279306][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 85.279325][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.279344][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.279366][ C0] hub_event+0x2b8d/0x5260 [ 85.279403][ C0] ? hub_post_resume+0x120/0x120 [ 85.279421][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.279441][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.279461][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.279481][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.279501][ C0] process_one_work+0x867/0xff0 [ 85.279528][ C0] ? worker_detach_from_pool+0x240/0x240 [ 85.279548][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 85.279571][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.279590][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.279612][ C0] ? wq_worker_running+0x97/0x170 [ 85.279632][ C0] worker_thread+0xd93/0x12a0 [ 85.279665][ C0] kthread+0x42e/0x520 [ 85.279683][ C0] ? rcu_lock_release+0x20/0x20 [ 85.279703][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.279721][ C0] ret_from_fork+0x1f/0x30 [ 85.279747][ C0] [ 85.279764][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc90004b60000, but annotated. [ 85.280203][ C0] ------------[ cut here ]------------ [ 85.280219][ C0] WARNING: CPU: 0 PID: 1107 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 [ 85.280258][ C0] Modules linked in: [ 85.280271][ C0] CPU: 0 PID: 1107 Comm: kworker/0:2 Tainted: G W syzkaller #0 [ 85.280291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.280303][ C0] Workqueue: usb_hub_wq hub_event [ 85.280323][ C0] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 85.280346][ C0] Code: 76 dd 72 12 48 c7 c1 c0 50 7a 8a 48 c7 c7 20 51 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 aa 57 c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d a2 dc 72 12 00 4c 89 6c 24 28 0f 84 23 [ 85.280360][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00010046 [ 85.280377][ C0] RAX: 0000000000000050 RBX: 0000000000000001 RCX: d3bb1ab58fe21c00 [ 85.280391][ C0] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 85.280404][ C0] RBP: ffffc90000007950 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 85.280420][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88807ed4c2b8 [ 85.280435][ C0] R13: ffffc900000079a0 R14: ffff888021200020 R15: ffff88806245b3b8 [ 85.280450][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 85.280468][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.280481][ C0] CR2: 00007f9231d1e7b8 CR3: 0000000066208000 CR4: 00000000003506f0 [ 85.280499][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.280511][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.280524][ C0] Call Trace: [ 85.280531][ C0] [ 85.280541][ C0] ? lockdep_init_map_type+0x98/0x900 [ 85.280566][ C0] ? debug_object_init+0x10/0x10 [ 85.280587][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 85.280612][ C0] ? rcu_is_watching+0x11/0xa0 [ 85.280631][ C0] ? __might_sleep+0xf0/0xf0 [ 85.280648][ C0] ? lock_release+0xb5/0x8a0 [ 85.280674][ C0] ? __init_swait_queue_head+0xa4/0x140 [ 85.280699][ C0] __synchronize_srcu+0x229/0x350 [ 85.280724][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 85.280753][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.280772][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 85.280792][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 85.280816][ C0] wakeup_source_unregister+0x112/0x190 [ 85.280842][ C0] mmc_host_classdev_release+0x43/0xf0 [ 85.280865][ C0] ? mmc_free_host+0x30/0x30 [ 85.280884][ C0] device_release+0x92/0x1c0 [ 85.280905][ C0] kobject_put+0x217/0x450 [ 85.280928][ C0] ? kref_get+0x70/0x70 [ 85.280948][ C0] call_timer_fn+0x17b/0x540 [ 85.280970][ C0] ? kref_get+0x70/0x70 [ 85.280989][ C0] ? __run_timers+0x810/0x810 [ 85.281027][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.281048][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.281070][ C0] ? kref_get+0x70/0x70 [ 85.281089][ C0] __run_timers+0x56c/0x810 [ 85.281117][ C0] ? detach_timer+0x2b0/0x2b0 [ 85.281138][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.281163][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 85.281183][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.281206][ C0] run_timer_softirq+0x63/0xf0 [ 85.281228][ C0] handle_softirqs+0x336/0x830 [ 85.281250][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 85.281270][ C0] ? do_softirq+0x210/0x210 [ 85.281288][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.281311][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 85.281333][ C0] __irq_exit_rcu+0x13b/0x230 [ 85.281352][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.281375][ C0] irq_exit_rcu+0x5/0x20 [ 85.281393][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.281416][ C0] [ 85.281422][ C0] [ 85.281429][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.281451][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 85.281470][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 85.281486][ C0] RSP: 0018:ffffc90004b66fc0 EFLAGS: 00000246 [ 85.281504][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 85.281519][ C0] RDX: ffffc90014a1b000 RSI: 000000000001896f RDI: 0000000000000000 [ 85.281532][ C0] RBP: ffffc90004b67230 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 85.281547][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 85.281562][ C0] R13: 0000000000000071 R14: 0000000000000000 R15: dffffc0000000000 [ 85.281578][ C0] ? console_unlock+0xc8d/0x10f0 [ 85.281600][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.281626][ C0] ? console_trylock_spinning+0x370/0x370 [ 85.281645][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 85.281666][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 85.281685][ C0] ? vprintk_emit+0xa7/0x150 [ 85.281702][ C0] ? printk_parse_prefix+0x310/0x310 [ 85.281720][ C0] ? vprintk_emit+0xa7/0x150 [ 85.281737][ C0] ? console_trylock+0x70/0x70 [ 85.281756][ C0] ? vsnprintf+0x1b22/0x1c20 [ 85.281781][ C0] ? vprintk_emit+0x150/0x150 [ 85.281798][ C0] ? snprintf+0xe5/0x140 [ 85.281821][ C0] ? vscnprintf+0x80/0x80 [ 85.281840][ C0] ? kasan_set_free_info+0x1f/0x40 [ 85.281863][ C0] ? usb_control_msg+0x2be/0x3e0 [ 85.281885][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.281908][ C0] vprintk_emit+0xc0/0x150 [ 85.281927][ C0] dev_vprintk_emit+0x2c2/0x360 [ 85.281949][ C0] ? _dev_info+0x170/0x170 [ 85.281975][ C0] dev_printk_emit+0xeb/0x140 [ 85.281999][ C0] ? dev_vprintk_emit+0x360/0x360 [ 85.282029][ C0] ? __dev_printk+0x131/0x190 [ 85.282049][ C0] _dev_notice+0x11b/0x170 [ 85.282072][ C0] ? _dev_warn+0x170/0x170 [ 85.282094][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.282118][ C0] usb_get_configuration+0x4c61/0x51f0 [ 85.282146][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1b0 [ 85.282169][ C0] ? rpm_resume+0xb2c/0x1c70 [ 85.282197][ C0] ? usb_destroy_configuration+0x680/0x680 [ 85.282216][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.282240][ C0] ? lock_chain_count+0x20/0x20 [ 85.282261][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.282284][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.282303][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.282326][ C0] usb_new_device+0x121/0x15d0 [ 85.282345][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.282369][ C0] ? mutex_unlock+0x10/0x10 [ 85.282386][ C0] ? lock_chain_count+0x20/0x20 [ 85.282407][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.282426][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 85.282447][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.282467][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.282490][ C0] hub_event+0x2b8d/0x5260 [ 85.282530][ C0] ? hub_post_resume+0x120/0x120 [ 85.282551][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.282573][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.282594][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.282614][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.282635][ C0] process_one_work+0x867/0xff0 [ 85.282663][ C0] ? worker_detach_from_pool+0x240/0x240 [ 85.282684][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 85.282707][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.282726][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.282747][ C0] ? wq_worker_running+0x97/0x170 [ 85.282767][ C0] worker_thread+0xd93/0x12a0 [ 85.282800][ C0] kthread+0x42e/0x520 [ 85.282818][ C0] ? rcu_lock_release+0x20/0x20 [ 85.282837][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.282856][ C0] ret_from_fork+0x1f/0x30 [ 85.282883][ C0] [ 85.282902][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.282913][ C0] CPU: 0 PID: 1107 Comm: kworker/0:2 Tainted: G W syzkaller #0 [ 85.282933][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.282945][ C0] Workqueue: usb_hub_wq hub_event [ 85.282965][ C0] Call Trace: [ 85.282971][ C0] [ 85.282977][ C0] dump_stack_lvl+0x188/0x250 [ 85.282998][ C0] ? show_regs_print_info+0x20/0x20 [ 85.283022][ C0] ? load_image+0x410/0x410 [ 85.283046][ C0] panic+0x2f8/0x850 [ 85.283070][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 85.283096][ C0] ? ret_from_fork+0x1f/0x30 [ 85.283117][ C0] ? __debug_object_init+0x4c0/0xc80 [ 85.283139][ C0] __warn+0x248/0x2b0 [ 85.283160][ C0] ? __debug_object_init+0x4c0/0xc80 [ 85.283182][ C0] report_bug+0x1b9/0x2e0 [ 85.283205][ C0] handle_bug+0x3a/0x70 [ 85.283224][ C0] exc_invalid_op+0x16/0x40 [ 85.283244][ C0] asm_exc_invalid_op+0x16/0x20 [ 85.283264][ C0] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 85.283286][ C0] Code: 76 dd 72 12 48 c7 c1 c0 50 7a 8a 48 c7 c7 20 51 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 aa 57 c9 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d a2 dc 72 12 00 4c 89 6c 24 28 0f 84 23 [ 85.283302][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00010046 [ 85.283319][ C0] RAX: 0000000000000050 RBX: 0000000000000001 RCX: d3bb1ab58fe21c00 [ 85.283333][ C0] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 85.283346][ C0] RBP: ffffc90000007950 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 85.283361][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88807ed4c2b8 [ 85.283376][ C0] R13: ffffc900000079a0 R14: ffff888021200020 R15: ffff88806245b3b8 [ 85.283402][ C0] ? lockdep_init_map_type+0x98/0x900 [ 85.283424][ C0] ? debug_object_init+0x10/0x10 [ 85.283445][ C0] ? lockdep_softirqs_off+0x430/0x430 [ 85.283467][ C0] ? rcu_is_watching+0x11/0xa0 [ 85.283485][ C0] ? __might_sleep+0xf0/0xf0 [ 85.283502][ C0] ? lock_release+0xb5/0x8a0 [ 85.283529][ C0] ? __init_swait_queue_head+0xa4/0x140 [ 85.283555][ C0] __synchronize_srcu+0x229/0x350 [ 85.283581][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 85.283609][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.283628][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 85.283648][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 85.283672][ C0] wakeup_source_unregister+0x112/0x190 [ 85.283697][ C0] mmc_host_classdev_release+0x43/0xf0 [ 85.283719][ C0] ? mmc_free_host+0x30/0x30 [ 85.283738][ C0] device_release+0x92/0x1c0 [ 85.283758][ C0] kobject_put+0x217/0x450 [ 85.283781][ C0] ? kref_get+0x70/0x70 [ 85.283801][ C0] call_timer_fn+0x17b/0x540 [ 85.283822][ C0] ? kref_get+0x70/0x70 [ 85.283841][ C0] ? __run_timers+0x810/0x810 [ 85.283866][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.283885][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.283906][ C0] ? kref_get+0x70/0x70 [ 85.283925][ C0] __run_timers+0x56c/0x810 [ 85.283953][ C0] ? detach_timer+0x2b0/0x2b0 [ 85.283973][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.283999][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 85.284025][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.284048][ C0] run_timer_softirq+0x63/0xf0 [ 85.284070][ C0] handle_softirqs+0x336/0x830 [ 85.284091][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 85.284111][ C0] ? do_softirq+0x210/0x210 [ 85.284129][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.284153][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 85.284175][ C0] __irq_exit_rcu+0x13b/0x230 [ 85.284194][ C0] ? irq_exit_rcu+0x20/0x20 [ 85.284217][ C0] irq_exit_rcu+0x5/0x20 [ 85.284233][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.284256][ C0] [ 85.284262][ C0] [ 85.284268][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.284290][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 85.284309][ C0] Code: 75 11 e8 33 e5 18 00 4d 85 e4 75 16 e8 29 e5 18 00 eb 15 e8 22 e5 18 00 e8 6d 05 61 08 4d 85 e4 74 ea e8 13 e5 18 00 fb 31 ff <89> de e8 69 e8 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 f7 [ 85.284325][ C0] RSP: 0018:ffffc90004b66fc0 EFLAGS: 00000246 [ 85.284342][ C0] RAX: ffffffff81602f8d RBX: 0000000000000000 RCX: 0000000000100000 [ 85.284355][ C0] RDX: ffffc90014a1b000 RSI: 000000000001896f RDI: 0000000000000000 [ 85.284368][ C0] RBP: ffffc90004b67230 R08: ffffffff901f10c7 R09: 1ffffffff203e218 [ 85.284383][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: 0000000000000200 [ 85.284397][ C0] R13: 0000000000000071 R14: 0000000000000000 R15: dffffc0000000000 [ 85.284414][ C0] ? console_unlock+0xc8d/0x10f0 [ 85.284435][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.284462][ C0] ? console_trylock_spinning+0x370/0x370 [ 85.284480][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 85.284501][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 85.284521][ C0] ? vprintk_emit+0xa7/0x150 [ 85.284538][ C0] ? printk_parse_prefix+0x310/0x310 [ 85.284556][ C0] ? vprintk_emit+0xa7/0x150 [ 85.284573][ C0] ? console_trylock+0x70/0x70 [ 85.284592][ C0] ? vsnprintf+0x1b22/0x1c20 [ 85.284617][ C0] ? vprintk_emit+0x150/0x150 [ 85.284635][ C0] ? snprintf+0xe5/0x140 [ 85.284658][ C0] ? vscnprintf+0x80/0x80 [ 85.284677][ C0] ? kasan_set_free_info+0x1f/0x40 [ 85.284700][ C0] ? usb_control_msg+0x2be/0x3e0 [ 85.284721][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.284744][ C0] vprintk_emit+0xc0/0x150 [ 85.284763][ C0] dev_vprintk_emit+0x2c2/0x360 [ 85.284784][ C0] ? _dev_info+0x170/0x170 [ 85.284811][ C0] dev_printk_emit+0xeb/0x140 [ 85.284835][ C0] ? dev_vprintk_emit+0x360/0x360 [ 85.284859][ C0] ? __dev_printk+0x131/0x190 [ 85.284879][ C0] _dev_notice+0x11b/0x170 [ 85.284902][ C0] ? _dev_warn+0x170/0x170 [ 85.284924][ C0] ? usb_get_descriptor+0xad/0x3d0 [ 85.284949][ C0] usb_get_configuration+0x4c61/0x51f0 [ 85.284976][ C0] ? trace_rpm_return_int_rcuidle+0x1e/0x1b0 [ 85.284999][ C0] ? rpm_resume+0xb2c/0x1c70 [ 85.285033][ C0] ? usb_destroy_configuration+0x680/0x680 [ 85.285053][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.285077][ C0] ? lock_chain_count+0x20/0x20 [ 85.285098][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.285121][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.285140][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.285163][ C0] usb_new_device+0x121/0x15d0 [ 85.285182][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 85.285206][ C0] ? mutex_unlock+0x10/0x10 [ 85.285223][ C0] ? lock_chain_count+0x20/0x20 [ 85.285244][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.285263][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 85.285283][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.285303][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 85.285325][ C0] hub_event+0x2b8d/0x5260 [ 85.285364][ C0] ? hub_post_resume+0x120/0x120 [ 85.285385][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.285407][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.285427][ C0] ? _raw_spin_unlock+0x40/0x40 [ 85.285448][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 85.285469][ C0] process_one_work+0x867/0xff0 [ 85.285496][ C0] ? worker_detach_from_pool+0x240/0x240 [ 85.285517][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 85.285541][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.285560][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.285582][ C0] ? wq_worker_running+0x97/0x170 [ 85.285602][ C0] worker_thread+0xd93/0x12a0 [ 85.285635][ C0] kthread+0x42e/0x520 [ 85.285652][ C0] ? rcu_lock_release+0x20/0x20 [ 85.285672][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.285691][ C0] ret_from_fork+0x1f/0x30 [ 85.285718][ C0] [ 85.286012][ C0] Kernel Offset: disabled [ 88.384719][ C0] Rebooting in 86400 seconds..