last executing test programs: 7.989418679s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000040)='./file1\x00', 0x4d343, 0xa0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0xbf5, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 7.987477819s ago: executing program 4 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) close(0x4) socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) listen(r0, 0x0) mkdir(0x0, 0x294) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9482, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)=""/114, 0x72) 7.366360633s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r1 = creat(0x0, 0x8) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100)=0x80000001, 0x4) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) sendmsg$nl_route_sched(r2, 0x0, 0x2400c810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048810) 6.374533666s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0], 0x0) 6.361202776s ago: executing program 1 (id=6): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a180800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 5.202123602s ago: executing program 4 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)}, 0x20) 4.475709819s ago: executing program 2 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100004000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) 4.273166803s ago: executing program 1 (id=10): ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000001140)=[0xfffffffc, 0xfff]) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x80400) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f00000000c0)=""/14) syz_usb_connect_ath9k(0x3, 0xfffffffffffffed5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0xfffffffffffffe6b}}]}}, 0x0) 4.186404025s ago: executing program 2 (id=11): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 4.114171047s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 4.020391239s ago: executing program 4 (id=13): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x1b}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 3.99570456s ago: executing program 2 (id=14): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.288408846s ago: executing program 4 (id=15): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) 3.064172701s ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb1}, {0x28, 0x0, 0x1, 0x2403}, {0xb1, 0x8, 0x28, 0x8001}, {0x6, 0xd4, 0x5, 0x2}]}) 2.970166603s ago: executing program 0 (id=17): syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xff, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x403, 0x5, 0x5, 0xf}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x1, 0x0, "aab364c35b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x40, 0x7, {0x7, 0x25, 0x1, 0x4, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0xa, 0x5}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 2.916447384s ago: executing program 4 (id=18): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x0, 0x1]) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f0000000480)={0x40, 0x9, 0xa0, {0xa0, 0xf, "b59537161d01ed888152c7695f2835e40c15e9c94efce97a7dbb076c691c4af881634d22ae833c500f38a369ce1a4d2c4de185f5a596372a30b0a6837e569d18b8fef96bd72f3608061203bf3a9c99c01663acb82e1994174d0c74d842115a5b2bdcefc12869b28a36fd65fd7c948482098a54b2a3872ad4125442b7c67b7074fbe194c188bc484d1c8cc07ded761a206775d79deae3a82b96289c8ed4ac"}}, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000f40)={0x84, 0x0, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "9118"}, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "5fac"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x8}, 0x0, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x40, 0x10, 0x5, "7c0d668284"}, 0x0, 0x0, 0x0, 0x0}) 2.891950654s ago: executing program 3 (id=19): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000600)={0x4, 0xfd, 0xb, 0x9, "c34b6f296f893ac588c3d9f3fddcbd7935bb80f7b23315b979a072f521a6a8f3"}) 2.878348045s ago: executing program 2 (id=20): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") 2.748533348s ago: executing program 3 (id=21): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a180800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 2.723667239s ago: executing program 3 (id=22): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416e10d44aa84085e068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.176106864s ago: executing program 1 (id=23): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904620000d1d8a3ff72699780f01ae70d"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 666.691085ms ago: executing program 0 (id=24): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f0000001980)=""/215, 0xd7}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f00000006c0)=""/182, 0xb6}], 0x7}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 80.146329ms ago: executing program 4 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x11, 0x0, 0x0}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000000c0)="952bb3e006ae"}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/221) 0s ago: executing program 3 (id=26): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0xa902) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0xffff, 0x2]) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = syz_usb_connect$uac2(0x3, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x5a, 0x80, 0xc, {0x8, 0xb, 0x1, 0x0, 0x1, 0xb, 0x20, 0xf9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x1, 0x20, 0xf}, [@source_unit={0x8, 0x24, 0xa, 0xf, 0x1, 0x7, 0x1, 0x1}, @source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0x7d, 0x6a}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0xd, 0x9c, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xaf, 0xa, {0x8, 0x25, 0x1, 0x81, 0xc, 0x81, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa8, 0xca, 0x38, {0x8, 0x25, 0x1, 0x3, 0x3, 0x12, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0xe9, 0x8a, 0x99, 0x40, 0xc72, 0xc, 0xe3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xc0, 0x4, "", [{{0x9, 0x4, 0x5d, 0xb9, 0x2, 0x97, 0x93, 0xeb, 0xb, [], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x98, 0x4, 0x5e}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xe, 0x5, 0x4}}]}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 61.557532][ T4172] cgroup: Unknown subsys name 'net' [ 61.701032][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.153946][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.641673][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 64.652351][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.688043][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.749239][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.830822][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.838365][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.847325][ T4197] device bridge_slave_0 entered promiscuous mode [ 64.856222][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.882397][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.889532][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.897932][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.905887][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.912971][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.921077][ T4197] device bridge_slave_1 entered promiscuous mode [ 64.933860][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.941153][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.949496][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.963685][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.970977][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.979068][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.004945][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.012051][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.020159][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.065609][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.072790][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.080833][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.091597][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.106199][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.117004][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.140167][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.147597][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.156182][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.165093][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.189849][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.230438][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.255110][ T4197] team0: Port device team_slave_0 added [ 65.263364][ T4186] team0: Port device team_slave_0 added [ 65.277715][ T4186] team0: Port device team_slave_1 added [ 65.286605][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.303811][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.311220][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.319274][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.327628][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.334883][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.342916][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.350878][ T4197] team0: Port device team_slave_1 added [ 65.358459][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.382689][ T4187] team0: Port device team_slave_0 added [ 65.414114][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.421806][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.447835][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.460840][ T4187] team0: Port device team_slave_1 added [ 65.474211][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.491994][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.501757][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.509208][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.535857][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.553804][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.560887][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.586899][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.607848][ T4189] team0: Port device team_slave_0 added [ 65.620792][ T4189] team0: Port device team_slave_1 added [ 65.637690][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.644980][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.670986][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.702809][ T4185] team0: Port device team_slave_0 added [ 65.709184][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.716387][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.746771][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.776287][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.783276][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.809785][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.824173][ T4185] team0: Port device team_slave_1 added [ 65.837575][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.844809][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.870792][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.888897][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.895994][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.922575][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.959006][ T4197] device hsr_slave_0 entered promiscuous mode [ 65.966508][ T4197] device hsr_slave_1 entered promiscuous mode [ 65.974609][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.981586][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.007897][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.037559][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.044671][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.051606][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.059599][ T4186] Cannot create hsr debugfs directory [ 66.080023][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.087127][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.113317][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.160289][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.167377][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.173862][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.181634][ T4189] Cannot create hsr debugfs directory [ 66.192115][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.199019][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.205725][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.213306][ T4187] Cannot create hsr debugfs directory [ 66.295319][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 66.301953][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 66.312845][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.317598][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 66.325909][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 66.332327][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.339031][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.346721][ T4185] Cannot create hsr debugfs directory [ 66.384563][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 66.606675][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.632583][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.642604][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.652692][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.694133][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.711684][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.738672][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.748276][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.789918][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.803347][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.825910][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.835797][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.916295][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.930527][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.961125][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.981785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.992510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.007474][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.019451][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.041471][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.054187][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.069928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.081309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.091723][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.099074][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.108402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.128233][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.138941][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.151337][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.172995][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.182782][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.192705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.202902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.212738][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.219864][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.229755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.238661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.250338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.264282][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.287836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.298111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.307661][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.314765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.324563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.333188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.342801][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.350009][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.358226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.369136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.378400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.387458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.398873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.407771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.438040][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.453058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.462556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.472058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.482577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.491483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.499739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.509287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.518240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.527100][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.538721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.547026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.556109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.583782][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.593610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.603926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.613250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.622000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.631364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.639947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.680533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.711323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.733201][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.740382][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.757219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.769631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.780925][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.788065][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.807386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.832159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.841615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.898010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.926752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.944186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.976404][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.987264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.997511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.006492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.016220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.031127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.039617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.050833][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.074004][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.081950][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.090614][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.100097][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.108737][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.117052][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.130210][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.143088][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.157740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.166935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.175983][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.183055][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.191219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.206332][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.229279][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.246024][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.253854][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.279814][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.294935][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.303508][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.310633][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.342457][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.361402][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.373187][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.383525][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.385643][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 68.399912][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 68.405324][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.412307][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 68.420217][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 68.426581][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.462202][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.465334][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 68.479170][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.487976][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.505049][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.513537][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.520666][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.529633][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.539752][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.548711][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.557822][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.566700][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.573802][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.586583][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.650754][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.665965][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.674463][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.682873][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.693127][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.702154][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.712645][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.722895][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.731737][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.741899][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.751638][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.760248][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.769221][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.778036][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.789294][ T4186] device veth0_vlan entered promiscuous mode [ 68.801490][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.813119][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.826652][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.835441][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.845546][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.858845][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.880798][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.889727][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.909246][ T4186] device veth1_vlan entered promiscuous mode [ 69.015655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.023173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.033282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.045955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.058294][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.072560][ T4186] device veth0_macvtap entered promiscuous mode [ 69.090259][ T4187] device veth0_vlan entered promiscuous mode [ 69.098703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.109243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.119774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.128682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.138334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.148134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.156876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.196302][ T4186] device veth1_macvtap entered promiscuous mode [ 69.208773][ T4187] device veth1_vlan entered promiscuous mode [ 69.242931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.252326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.267670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.282432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.310176][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.320877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.330096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.338372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.347523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.361169][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.379443][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.391593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.400138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.408837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.416871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.427466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.436719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.445231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.469375][ T4197] device veth0_vlan entered promiscuous mode [ 69.478003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.486852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.494782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.504034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.514229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.524014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.536931][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.546556][ T4187] device veth0_macvtap entered promiscuous mode [ 69.554906][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.563768][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.572586][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.582238][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.610123][ T4197] device veth1_vlan entered promiscuous mode [ 69.620362][ T4187] device veth1_macvtap entered promiscuous mode [ 69.636422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.646065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.654206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.664071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.672409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.681164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.690306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.700558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.728246][ T4189] device veth0_vlan entered promiscuous mode [ 69.748389][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.759822][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.772987][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.784423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.793119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.802616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.812392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.842905][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.852037][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.863198][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.875182][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.887443][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.912375][ T4185] device veth0_vlan entered promiscuous mode [ 69.925424][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.933193][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.941389][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.951603][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.964202][ T4189] device veth1_vlan entered promiscuous mode [ 69.975330][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.984065][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.994882][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.003616][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.032484][ T4185] device veth1_vlan entered promiscuous mode [ 70.059468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.068504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.081572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.104505][ T4197] device veth0_macvtap entered promiscuous mode [ 70.179125][ T4185] device veth0_macvtap entered promiscuous mode [ 70.188564][ T4197] device veth1_macvtap entered promiscuous mode [ 70.201255][ T4189] device veth0_macvtap entered promiscuous mode [ 70.209390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.218488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.226808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.235132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.243670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.252644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.262472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.271608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.280301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.304009][ T4185] device veth1_macvtap entered promiscuous mode [ 70.317869][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.328695][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.339764][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.350584][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.361931][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.372506][ T4189] device veth1_macvtap entered promiscuous mode [ 70.396556][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.412037][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.423290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.432040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.440491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.451522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.460125][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 70.461778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.466673][ T4174] Bluetooth: hci4: command 0x040f tx timeout [ 70.480076][ T4174] Bluetooth: hci1: command 0x040f tx timeout [ 70.486215][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 70.493752][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.507061][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.517036][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.527772][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.538651][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 70.547406][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.557393][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.569813][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.581165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.589902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.599783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.611574][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.621286][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.630522][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.639557][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.652615][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.663886][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.676590][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.687268][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.698273][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.709188][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.720662][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.750586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.759787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.769704][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.780965][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.793328][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.804138][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.814188][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.825229][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.836732][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.865960][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.877749][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.889404][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.900239][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.910134][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.920767][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.930846][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.947420][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.959099][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.967800][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.977217][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.986188][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.995678][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.008441][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.019460][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.037492][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.049279][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.052896][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.061427][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.077972][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.088995][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.101127][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.112067][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.122087][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.135064][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.147659][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.156477][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.165603][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.175783][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.184630][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.195959][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.203926][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.212074][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.221406][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.242466][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.253793][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.263755][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.273427][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.339646][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346281][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439168][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.472875][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.482677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.521783][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.550182][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.592143][ T4269] loop1: detected capacity change from 0 to 512 [ 71.598819][ T4267] loop4: detected capacity change from 0 to 512 [ 71.621606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.634781][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.647398][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.700348][ T4267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.709545][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.719815][ T4267] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.742429][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.750703][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.761755][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.771409][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.780623][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.783283][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.803427][ T4269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.818012][ T4269] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.840169][ T26] audit: type=1800 audit(1786777366.617:2): pid=4269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 71.866623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.909826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.976638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.966820][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 73.024067][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 73.084807][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 73.098783][ T4286] loop2: detected capacity change from 0 to 512 [ 73.125004][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 73.155824][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 73.354030][ T4286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.371347][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.424573][ T4286] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.884332][ C0] sched: RT throttling activated [ 74.250237][ T4298] xt_TCPMSS: Only works on TCP SYN packets [ 75.074836][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.394583][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 75.535098][ T4264] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 75.543763][ T4264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.628412][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.730636][ T4264] usb 1-1: config 0 has no interface number 0 [ 76.094706][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 76.378011][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.388279][ T21] usb 2-1: config 0 has no interface number 0 [ 76.431456][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.444722][ T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.454241][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.466646][ T21] usb 2-1: config 0 descriptor?? [ 76.511737][ T21] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.648903][ T4264] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.665008][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.691356][ T4264] usb 1-1: config 0 descriptor?? [ 76.715878][ T4264] usb 1-1: can't set config #0, error -71 [ 76.729744][ T4264] usb 1-1: USB disconnect, device number 2 [ 76.844548][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.878783][ T4344] udc-core: couldn't find an available UDC or it's busy [ 76.885959][ T4344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.895433][ T4344] udc-core: couldn't find an available UDC or it's busy [ 76.902467][ T4344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.954503][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.124480][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 77.134589][ T4264] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.214505][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 77.266630][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.284438][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.294225][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.303766][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.315871][ T21] usb 5-1: config 0 descriptor?? [ 77.325243][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.344679][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.358207][ T21] hub 5-1:0.0: USB hub found [ 77.370630][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 77.382966][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 77.396557][ T4233] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 77.405875][ T4264] usb 1-1: Using ep0 maxpacket: 8 [ 77.411360][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.430951][ T4233] usb 3-1: config 0 descriptor?? [ 77.565470][ T21] hub 5-1:0.0: 1 port detected [ 77.586869][ T4264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.674791][ T4264] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 77.724623][ T4234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 77.740519][ T4234] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 77.753976][ T4234] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 77.768150][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.819864][ T4234] usb 4-1: probing VID:PID(0424:012C) [ 77.839698][ T4234] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 77.862275][ T4234] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 77.874425][ T4264] usb 1-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 77.887093][ T4188] usb 2-1: USB disconnect, device number 2 [ 77.894812][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.902923][ T4234] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 77.922259][ T4234] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 77.938170][ T4264] usb 1-1: Product: syz [ 77.942380][ T4264] usb 1-1: Manufacturer: syz [ 77.957010][ T4233] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 77.969912][ T4234] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 77.977617][ T4264] usb 1-1: SerialNumber: syz [ 78.229605][ T21] hub 5-1:0.0: activate --> -90 [ 78.264548][ T4234] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 78.364714][ T4264] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 78.394848][ T4264] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 78.435383][ T4264] usb 1-1: USB disconnect, device number 3 [ 78.474677][ T4234] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 78.614595][ T4236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.748767][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.854871][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 78.865635][ T13] usb 5-1: USB disconnect, device number 2 [ 78.875114][ T21] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 78.882589][ T21] usb 5-1-port1: connect-debounce failed [ 78.974601][ T4236] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 78.982894][ T4236] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 78.991637][ T4236] usb 2-1: config 0 has no interface number 0 [ 78.998316][ T4236] usb 2-1: config 0 has no interface number 1 [ 79.165429][ T4236] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 79.177921][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.186202][ T4236] usb 2-1: Product: syz [ 79.190402][ T4236] usb 2-1: Manufacturer: syz [ 79.198394][ T4236] usb 2-1: SerialNumber: syz [ 79.205886][ T4236] usb 2-1: config 0 descriptor?? [ 79.344641][ T4234] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 79.370389][ T4234] usb 4-1: USB disconnect, device number 2 [ 79.382872][ T4234] USB vub300 remote SDIO host controller[0] now disconnected [ 79.384542][ T4236] viperboard 2-1:0.61: version 0.00 found at bus 002 address 003 [ 79.454826][ T4347] udc-core: couldn't find an available UDC or it's busy [ 79.464521][ T4236] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 79.478572][ T4347] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.495289][ T4236] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 79.504786][ C1] [ 79.507154][ C1] ================================ [ 79.512274][ C1] WARNING: inconsistent lock state [ 79.517413][ C1] syzkaller #0 Not tainted [ 79.521851][ C1] -------------------------------- [ 79.526973][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 79.533838][ C1] kworker/u4:7/4276 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 79.540361][ C1] ffff88807a468710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210 [ 79.551533][ C1] {SOFTIRQ-ON-W} state was registered at: [ 79.557258][ C1] lock_acquire+0x19e/0x400 [ 79.561878][ C1] __flush_work+0x116/0x210 [ 79.566519][ C1] __cancel_work_timer+0x3f4/0x560 [ 79.571737][ C1] mmc_stop_host+0xd5/0x460 [ 79.576365][ C1] mmc_remove_host+0x11/0x60 [ 79.581058][ C1] vub300_disconnect+0x14b/0x2e0 [ 79.586100][ C1] usb_unbind_interface+0x203/0x870 [ 79.591399][ C1] device_release_driver_internal+0x487/0x710 [ 79.597565][ C1] bus_remove_device+0x2dd/0x400 [ 79.602609][ C1] device_del+0x63f/0xa80 [ 79.607055][ C1] usb_disable_device+0x3e7/0x8a0 [ 79.612192][ C1] usb_disconnect+0x33c/0x8a0 [ 79.616967][ C1] hub_event+0x1d64/0x5260 [ 79.621497][ C1] process_one_work+0x867/0xff0 [ 79.626445][ C1] worker_thread+0xd93/0x12a0 [ 79.631221][ C1] kthread+0x42e/0x520 [ 79.635382][ C1] ret_from_fork+0x1f/0x30 [ 79.639918][ C1] irq event stamp: 343098 [ 79.644248][ C1] hardirqs last enabled at (343098): [] __cancel_work_timer+0x36a/0x560 [ 79.654257][ C1] hardirqs last disabled at (343097): [] try_to_grab_pending+0xfb/0x820 [ 79.664171][ C1] softirqs last enabled at (343024): [] batadv_forw_packet_steal+0x14a/0x160 [ 79.674603][ C1] softirqs last disabled at (343033): [] __irq_exit_rcu+0x13b/0x230 [ 79.684155][ C1] [ 79.684155][ C1] other info that might help us debug this: [ 79.692223][ C1] Possible unsafe locking scenario: [ 79.692223][ C1] [ 79.699688][ C1] CPU0 [ 79.702986][ C1] ---- [ 79.706300][ C1] lock((work_completion)(&(&host->detect)->work)); [ 79.712997][ C1] [ 79.716459][ C1] lock((work_completion)(&(&host->detect)->work)); [ 79.723320][ C1] [ 79.723320][ C1] *** DEADLOCK *** [ 79.723320][ C1] [ 79.731474][ C1] 3 locks held by kworker/u4:7/4276: [ 79.736773][ C1] #0: ffff88814ca71138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 79.747427][ C1] #1: ffffc9000332fd00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 79.761015][ C1] #2: ffffc90000dd0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 79.771479][ C1] [ 79.771479][ C1] stack backtrace: [ 79.777391][ C1] CPU: 1 PID: 4276 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 79.784948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.795018][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 79.802854][ C1] Call Trace: [ 79.806255][ C1] [ 79.809121][ C1] dump_stack_lvl+0x188/0x250 [ 79.813833][ C1] ? show_regs_print_info+0x20/0x20 [ 79.819065][ C1] valid_state+0x13b/0x1d0 [ 79.823497][ C1] mark_lock_irq+0xa9/0x900 [ 79.828016][ C1] ? stack_trace_save+0xa6/0xf0 [ 79.832884][ C1] ? save_trace+0xad0/0xad0 [ 79.837405][ C1] ? save_trace+0x5a/0xad0 [ 79.841838][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 79.846880][ C1] mark_lock+0x208/0x320 [ 79.851159][ C1] __lock_acquire+0xc63/0x7b50 [ 79.855937][ C1] ? verify_lock_unused+0x140/0x140 [ 79.861165][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.867165][ C1] ? verify_lock_unused+0x140/0x140 [ 79.872379][ C1] ? __rwlock_init+0x140/0x140 [ 79.877163][ C1] ? debug_object_assert_init+0x1e8/0x2f0 [ 79.882896][ C1] lock_acquire+0x19e/0x400 [ 79.887426][ C1] ? __flush_work+0xfa/0x210 [ 79.892027][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.897932][ C1] ? read_lock_is_recursive+0x10/0x10 [ 79.903332][ C1] ? kobject_put+0x25c/0x450 [ 79.907931][ C1] ? call_timer_fn+0x17b/0x540 [ 79.912707][ C1] ? __run_timers+0x56c/0x810 [ 79.917394][ C1] ? run_timer_softirq+0x63/0xf0 [ 79.922347][ C1] __flush_work+0x116/0x210 [ 79.926859][ C1] ? __flush_work+0xfa/0x210 [ 79.931466][ C1] ? flush_work+0x20/0x20 [ 79.935808][ C1] ? __timer_delete+0x6c/0x220 [ 79.940581][ C1] ? mark_lock+0x94/0x320 [ 79.944932][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.950941][ C1] ? lock_chain_count+0x20/0x20 [ 79.955802][ C1] ? kasan_quarantine_put+0x39/0x210 [ 79.961121][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 79.966424][ C1] ? __cancel_work_timer+0x36a/0x560 [ 79.971719][ C1] __cancel_work_timer+0x3f4/0x560 [ 79.976838][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 79.982402][ C1] ? cancel_work_sync+0x20/0x20 [ 79.987268][ C1] ? kobject_put+0x25c/0x450 [ 79.991868][ C1] ? kfree+0xef/0x2a0 [ 79.995867][ C1] ? kobject_put+0x41d/0x450 [ 80.000476][ C1] ? kref_get+0x70/0x70 [ 80.004643][ C1] mmc_free_host+0x15/0x30 [ 80.009075][ C1] call_timer_fn+0x17b/0x540 [ 80.013679][ C1] ? kref_get+0x70/0x70 [ 80.017850][ C1] ? __run_timers+0x810/0x810 [ 80.022541][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 80.027747][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.032953][ C1] ? kref_get+0x70/0x70 [ 80.037121][ C1] __run_timers+0x56c/0x810 [ 80.041648][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.046333][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.052329][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 80.057192][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 80.063457][ C1] run_timer_softirq+0x63/0xf0 [ 80.068236][ C1] handle_softirqs+0x336/0x830 [ 80.073015][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 80.077882][ C1] ? do_softirq+0x210/0x210 [ 80.082394][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 80.087523][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 80.092737][ C1] __irq_exit_rcu+0x13b/0x230 [ 80.097422][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.101945][ C1] irq_exit_rcu+0x5/0x20 [ 80.106201][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.111847][ C1] [ 80.114791][ C1] [ 80.117729][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.123733][ C1] RIP: 0010:unwind_next_frame+0x1038/0x1cf0 [ 80.129643][ C1] Code: 01 89 00 48 8b 74 24 20 48 8b 14 24 eb b0 4d 8d 7c 24 02 49 83 c4 03 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 16 0b 00 00 <4c> 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 27 0b 00 00 49 0f bf [ 80.149258][ C1] RSP: 0018:ffffc9000332f710 EFLAGS: 00000246 [ 80.155334][ C1] RAX: 0000000000000000 RBX: ffffc9000332f7a8 RCX: 0000000000000000 [ 80.163336][ C1] RDX: 0000000000000010 RSI: 0000000000000001 RDI: ffffc9000332f808 [ 80.171327][ C1] RBP: dffffc0000000000 R08: ffffc9000332fba8 R09: ffffc9000332f7f8 [ 80.179314][ C1] R10: dffffc0000000000 R11: fffff52000665f01 R12: ffffffff8e0f9c7d [ 80.187301][ C1] R13: 1ffffffff1c1f38f R14: ffffc9000332f7dd R15: ffffffff8e0f9c7c [ 80.195295][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.200855][ C1] ? stack_trace_save+0xf0/0xf0 [ 80.205720][ C1] arch_stack_walk+0x10c/0x140 [ 80.210495][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.215374][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.220233][ C1] stack_trace_save+0xa6/0xf0 [ 80.224922][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 80.230047][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.235606][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 80.241184][ C1] ? process_one_work+0x867/0xff0 [ 80.246235][ C1] ? worker_thread+0xad7/0x12a0 [ 80.251094][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.255956][ C1] kasan_set_track+0x4b/0x70 [ 80.260559][ C1] ? kasan_set_track+0x4b/0x70 [ 80.265331][ C1] ? kasan_set_free_info+0x1f/0x40 [ 80.270454][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 80.275662][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.281253][ C1] kasan_set_free_info+0x1f/0x40 [ 80.286223][ C1] ____kasan_slab_free+0xd5/0x110 [ 80.291260][ C1] slab_free_freelist_hook+0xec/0x170 [ 80.296668][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 80.302220][ C1] kmem_cache_free+0x8f/0x210 [ 80.306926][ C1] ? skb_release_head_state+0x1e7/0x240 [ 80.312486][ C1] batadv_forw_packet_free+0x5c/0x1e0 [ 80.317872][ C1] process_one_work+0x867/0xff0 [ 80.322736][ C1] ? worker_detach_from_pool+0x240/0x240 [ 80.328377][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 80.333673][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.338706][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.344261][ C1] ? wq_worker_running+0x97/0x170 [ 80.349296][ C1] worker_thread+0xad7/0x12a0 [ 80.353992][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.359917][ C1] kthread+0x42e/0x520 [ 80.363997][ C1] ? rcu_lock_release+0x20/0x20 [ 80.368862][ C1] ? kthread_blkcg+0xd0/0xd0 [ 80.373495][ C1] ret_from_fork+0x1f/0x30 [ 80.377921][ C1] [ 80.381022][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031 [ 80.390092][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4276, name: kworker/u4:7 [ 80.399338][ C1] INFO: lockdep is turned off. [ 80.404119][ C1] Preemption disabled at: [ 80.404140][ C1] [] unwind_next_frame+0x97/0x1cf0 [ 80.415276][ C1] CPU: 1 PID: 4276 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 80.422846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.432946][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 80.440796][ C1] Call Trace: [ 80.444124][ C1] [ 80.446997][ C1] dump_stack_lvl+0x188/0x250 [ 80.451839][ C1] ? lock_chain_count+0x20/0x20 [ 80.456728][ C1] ? show_regs_print_info+0x20/0x20 [ 80.461963][ C1] ? load_image+0x410/0x410 [ 80.466507][ C1] ? asm_common_interrupt+0x22/0x40 [ 80.471735][ C1] ___might_sleep+0x493/0x610 [ 80.474559][ T4236] viperboard 2-1:0.98: version 0.00 found at bus 002 address 003 [ 80.476442][ C1] ? unwind_next_frame+0x97/0x1cf0 [ 80.489306][ C1] ? __might_sleep+0xf0/0xf0 [ 80.493923][ C1] ? lock_release+0xb5/0x8a0 [ 80.498542][ C1] ? __flush_work+0x11a/0x210 [ 80.503250][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.509172][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 80.514228][ C1] ? kobject_put+0x25c/0x450 [ 80.518851][ C1] start_flush_work+0x2e/0x830 [ 80.523656][ C1] __flush_work+0x148/0x210 [ 80.528190][ C1] ? flush_work+0x20/0x20 [ 80.532552][ C1] ? lock_chain_count+0x20/0x20 [ 80.534689][ T4236] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 80.537427][ C1] ? kasan_quarantine_put+0x39/0x210 [ 80.537450][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 80.537470][ C1] ? __cancel_work_timer+0x36a/0x560 [ 80.556737][ T4236] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 80.562010][ C1] __cancel_work_timer+0x3f4/0x560 [ 80.575299][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.580873][ C1] ? cancel_work_sync+0x20/0x20 [ 80.585753][ C1] ? kobject_put+0x25c/0x450 [ 80.590377][ C1] ? kfree+0xef/0x2a0 [ 80.594392][ C1] ? kobject_put+0x41d/0x450 [ 80.599017][ C1] ? kref_get+0x70/0x70 [ 80.603210][ C1] mmc_free_host+0x15/0x30 [ 80.607659][ C1] call_timer_fn+0x17b/0x540 [ 80.612313][ C1] ? kref_get+0x70/0x70 [ 80.616496][ C1] ? __run_timers+0x810/0x810 [ 80.621221][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 80.626448][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.631677][ C1] ? kref_get+0x70/0x70 [ 80.635867][ C1] __run_timers+0x56c/0x810 [ 80.640440][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.645149][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.646993][ T4236] usb 2-1: USB disconnect, device number 3 [ 80.651180][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 80.651203][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 80.651224][ C1] run_timer_softirq+0x63/0xf0 [ 80.651245][ C1] handle_softirqs+0x336/0x830 [ 80.651266][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 80.651285][ C1] ? do_softirq+0x210/0x210 [ 80.651321][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 80.651344][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 80.651366][ C1] __irq_exit_rcu+0x13b/0x230 [ 80.651384][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.651406][ C1] irq_exit_rcu+0x5/0x20 [ 80.651423][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.651446][ C1] [ 80.651452][ C1] [ 80.651459][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.651480][ C1] RIP: 0010:unwind_next_frame+0x1038/0x1cf0 [ 80.651504][ C1] Code: 01 89 00 48 8b 74 24 20 48 8b 14 24 eb b0 4d 8d 7c 24 02 49 83 c4 03 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 16 0b 00 00 <4c> 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 27 0b 00 00 49 0f bf [ 80.651520][ C1] RSP: 0018:ffffc9000332f710 EFLAGS: 00000246 [ 80.651539][ C1] RAX: 0000000000000000 RBX: ffffc9000332f7a8 RCX: 0000000000000000 [ 80.651552][ C1] RDX: 0000000000000010 RSI: 0000000000000001 RDI: ffffc9000332f808 [ 80.651565][ C1] RBP: dffffc0000000000 R08: ffffc9000332fba8 R09: ffffc9000332f7f8 [ 80.651580][ C1] R10: dffffc0000000000 R11: fffff52000665f01 R12: ffffffff8e0f9c7d [ 80.651594][ C1] R13: 1ffffffff1c1f38f R14: ffffc9000332f7dd R15: ffffffff8e0f9c7c [ 80.651618][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.651641][ C1] ? stack_trace_save+0xf0/0xf0 [ 80.651657][ C1] arch_stack_walk+0x10c/0x140 [ 80.651680][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.651699][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.651716][ C1] stack_trace_save+0xa6/0xf0 [ 80.651734][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 80.768884][ T13] usb 3-1: USB disconnect, device number 2 [ 80.776534][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.776566][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 80.776601][ C1] ? process_one_work+0x867/0xff0 [ 80.857333][ C1] ? worker_thread+0xad7/0x12a0 [ 80.862219][ C1] ? kmem_cache_free+0x8f/0x210 [ 80.867107][ C1] kasan_set_track+0x4b/0x70 [ 80.871728][ C1] ? kasan_set_track+0x4b/0x70 [ 80.876520][ C1] ? kasan_set_free_info+0x1f/0x40 [ 80.881691][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 80.886943][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 80.892539][ C1] kasan_set_free_info+0x1f/0x40 [ 80.897514][ C1] ____kasan_slab_free+0xd5/0x110 [ 80.902581][ C1] slab_free_freelist_hook+0xec/0x170 [ 80.907982][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 80.913570][ C1] kmem_cache_free+0x8f/0x210 [ 80.918293][ C1] ? skb_release_head_state+0x1e7/0x240 [ 80.923877][ C1] batadv_forw_packet_free+0x5c/0x1e0 [ 80.929284][ C1] process_one_work+0x867/0xff0 [ 80.934189][ C1] ? worker_detach_from_pool+0x240/0x240 [ 80.939865][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 80.945184][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.950235][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.955816][ C1] ? wq_worker_running+0x97/0x170 [ 80.960879][ C1] worker_thread+0xad7/0x12a0 [ 80.965596][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.971526][ C1] kthread+0x42e/0x520 [ 80.975629][ C1] ? rcu_lock_release+0x20/0x20 [ 80.980508][ C1] ? kthread_blkcg+0xd0/0xd0 [ 80.985126][ C1] ret_from_fork+0x1f/0x30 [ 80.989577][ C1] [ 80.992671][ C1] ODEBUG: object ffffc90000dd09a0 is NOT on stack ffffc90003328000, but annotated. [ 81.002417][ C1] ------------[ cut here ]------------ [ 81.007906][ C1] WARNING: CPU: 1 PID: 4276 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 [ 81.017501][ C1] Modules linked in: [ 81.021420][ C1] CPU: 1 PID: 4276 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 81.030383][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.040463][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 81.048303][ C1] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 81.054238][ C1] Code: d6 2d 73 12 48 c7 c1 00 4a 7a 8a 48 c7 c7 60 4a 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ea b7 c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 02 2d 73 12 00 4c 89 6c 24 28 0f 84 23 [ 81.073875][ C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046 [ 81.079969][ C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 7ae06fb71787ba00 [ 81.087966][ C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 81.096010][ C1] RBP: ffffc90000dd0950 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 81.104016][ C1] R10: dffffc0000000000 R11: ffffed10172267b0 R12: f8f8f8f8f8f8f8f8 [ 81.112028][ C1] R13: ffffc90000dd09a0 R14: ffff88807a318020 R15: ffff88805efc6118 [ 81.120031][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 81.128985][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.135602][ C1] CR2: 00007f08777826c8 CR3: 000000000c08e000 CR4: 00000000003506e0 [ 81.143617][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.151620][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.159710][ C1] Call Trace: [ 81.163009][ C1] [ 81.165879][ C1] ? lockdep_init_map_type+0x98/0x900 [ 81.171284][ C1] ? debug_object_init+0x10/0x10 [ 81.176260][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 81.181676][ C1] ? rcu_is_watching+0x11/0xa0 [ 81.186466][ C1] ? __might_sleep+0xf0/0xf0 [ 81.191082][ C1] ? lock_release+0xb5/0x8a0 [ 81.195700][ C1] ? __init_swait_queue_head+0xa4/0x140 [ 81.201309][ C1] __synchronize_srcu+0x229/0x350 [ 81.206372][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 81.212132][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.217009][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 81.222580][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 81.227633][ C1] wakeup_source_unregister+0x112/0x190 [ 81.233238][ C1] mmc_host_classdev_release+0x43/0xf0 [ 81.238739][ C1] ? mmc_free_host+0x30/0x30 [ 81.243355][ C1] device_release+0x92/0x1c0 [ 81.247973][ C1] kobject_put+0x217/0x450 [ 81.252422][ C1] ? kref_get+0x70/0x70 [ 81.256610][ C1] call_timer_fn+0x17b/0x540 [ 81.261229][ C1] ? kref_get+0x70/0x70 [ 81.265409][ C1] ? __run_timers+0x810/0x810 [ 81.270114][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.275343][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 81.280582][ C1] ? kref_get+0x70/0x70 [ 81.284768][ C1] __run_timers+0x56c/0x810 [ 81.289313][ C1] ? detach_timer+0x2b0/0x2b0 [ 81.294031][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.300048][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 81.304936][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 81.311202][ C1] run_timer_softirq+0x63/0xf0 [ 81.315994][ C1] handle_softirqs+0x336/0x830 [ 81.320770][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 81.325635][ C1] ? do_softirq+0x210/0x210 [ 81.330144][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 81.335276][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 81.340600][ C1] __irq_exit_rcu+0x13b/0x230 [ 81.345405][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.349935][ C1] irq_exit_rcu+0x5/0x20 [ 81.354188][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 81.359838][ C1] [ 81.362784][ C1] [ 81.365731][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 81.371727][ C1] RIP: 0010:unwind_next_frame+0x1038/0x1cf0 [ 81.377645][ C1] Code: 01 89 00 48 8b 74 24 20 48 8b 14 24 eb b0 4d 8d 7c 24 02 49 83 c4 03 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 16 0b 00 00 <4c> 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 27 0b 00 00 49 0f bf [ 81.397271][ C1] RSP: 0018:ffffc9000332f710 EFLAGS: 00000246 [ 81.403365][ C1] RAX: 0000000000000000 RBX: ffffc9000332f7a8 RCX: 0000000000000000 [ 81.411353][ C1] RDX: 0000000000000010 RSI: 0000000000000001 RDI: ffffc9000332f808 [ 81.419341][ C1] RBP: dffffc0000000000 R08: ffffc9000332fba8 R09: ffffc9000332f7f8 [ 81.427323][ C1] R10: dffffc0000000000 R11: fffff52000665f01 R12: ffffffff8e0f9c7d [ 81.435309][ C1] R13: 1ffffffff1c1f38f R14: ffffc9000332f7dd R15: ffffffff8e0f9c7c [ 81.443301][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 81.448866][ C1] ? stack_trace_save+0xf0/0xf0 [ 81.453763][ C1] arch_stack_walk+0x10c/0x140 [ 81.458541][ C1] ? kmem_cache_free+0x8f/0x210 [ 81.463401][ C1] ? kmem_cache_free+0x8f/0x210 [ 81.468257][ C1] stack_trace_save+0xa6/0xf0 [ 81.472940][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 81.478059][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 81.483612][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 81.489173][ C1] ? process_one_work+0x867/0xff0 [ 81.494204][ C1] ? worker_thread+0xad7/0x12a0 [ 81.499067][ C1] ? kmem_cache_free+0x8f/0x210 [ 81.503934][ C1] kasan_set_track+0x4b/0x70 [ 81.508535][ C1] ? kasan_set_track+0x4b/0x70 [ 81.513301][ C1] ? kasan_set_free_info+0x1f/0x40 [ 81.518423][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 81.523634][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 81.529202][ C1] kasan_set_free_info+0x1f/0x40 [ 81.534152][ C1] ____kasan_slab_free+0xd5/0x110 [ 81.539195][ C1] slab_free_freelist_hook+0xec/0x170 [ 81.544589][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 81.550150][ C1] kmem_cache_free+0x8f/0x210 [ 81.554854][ C1] ? skb_release_head_state+0x1e7/0x240 [ 81.560411][ C1] batadv_forw_packet_free+0x5c/0x1e0 [ 81.565796][ C1] process_one_work+0x867/0xff0 [ 81.570659][ C1] ? worker_detach_from_pool+0x240/0x240 [ 81.576295][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 81.581589][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.586627][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.592186][ C1] ? wq_worker_running+0x97/0x170 [ 81.597220][ C1] worker_thread+0xad7/0x12a0 [ 81.601910][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.607815][ C1] kthread+0x42e/0x520 [ 81.611901][ C1] ? rcu_lock_release+0x20/0x20 [ 81.616779][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.621376][ C1] ret_from_fork+0x1f/0x30 [ 81.625836][ C1] [ 81.628877][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.636233][ C1] CPU: 1 PID: 4276 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 81.645183][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.655258][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 81.663078][ C1] Call Trace: [ 81.666475][ C1] [ 81.669348][ C1] dump_stack_lvl+0x188/0x250 [ 81.674046][ C1] ? show_regs_print_info+0x20/0x20 [ 81.679269][ C1] ? load_image+0x410/0x410 [ 81.683797][ C1] panic+0x2f8/0x850 [ 81.687714][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 81.692240][ C1] ? ret_from_fork+0x1f/0x30 [ 81.696846][ C1] ? __debug_object_init+0x4c0/0xc80 [ 81.702156][ C1] __warn+0x248/0x2b0 [ 81.706180][ C1] ? __debug_object_init+0x4c0/0xc80 [ 81.711484][ C1] report_bug+0x1b9/0x2e0 [ 81.715845][ C1] handle_bug+0x3a/0x70 [ 81.720016][ C1] exc_invalid_op+0x16/0x40 [ 81.724537][ C1] asm_exc_invalid_op+0x16/0x20 [ 81.729408][ C1] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 81.735325][ C1] Code: d6 2d 73 12 48 c7 c1 00 4a 7a 8a 48 c7 c7 60 4a 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ea b7 c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 02 2d 73 12 00 4c 89 6c 24 28 0f 84 23 [ 81.754945][ C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046 [ 81.761035][ C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: 7ae06fb71787ba00 [ 81.769038][ C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 81.777063][ C1] RBP: ffffc90000dd0950 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 81.785057][ C1] R10: dffffc0000000000 R11: ffffed10172267b0 R12: f8f8f8f8f8f8f8f8 [ 81.793040][ C1] R13: ffffc90000dd09a0 R14: ffff88807a318020 R15: ffff88805efc6118 [ 81.801039][ C1] ? lockdep_init_map_type+0x98/0x900 [ 81.806455][ C1] ? debug_object_init+0x10/0x10 [ 81.811432][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 81.816816][ C1] ? rcu_is_watching+0x11/0xa0 [ 81.821593][ C1] ? __might_sleep+0xf0/0xf0 [ 81.826191][ C1] ? lock_release+0xb5/0x8a0 [ 81.830804][ C1] ? __init_swait_queue_head+0xa4/0x140 [ 81.836363][ C1] __synchronize_srcu+0x229/0x350 [ 81.841402][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 81.847135][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.851998][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 81.857560][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 81.862595][ C1] wakeup_source_unregister+0x112/0x190 [ 81.868157][ C1] mmc_host_classdev_release+0x43/0xf0 [ 81.873628][ C1] ? mmc_free_host+0x30/0x30 [ 81.878241][ C1] device_release+0x92/0x1c0 [ 81.882865][ C1] kobject_put+0x217/0x450 [ 81.887297][ C1] ? kref_get+0x70/0x70 [ 81.891502][ C1] call_timer_fn+0x17b/0x540 [ 81.896109][ C1] ? kref_get+0x70/0x70 [ 81.900276][ C1] ? __run_timers+0x810/0x810 [ 81.904967][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.910182][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 81.915387][ C1] ? kref_get+0x70/0x70 [ 81.919547][ C1] __run_timers+0x56c/0x810 [ 81.924061][ C1] ? detach_timer+0x2b0/0x2b0 [ 81.928766][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.934763][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 81.939623][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 81.945880][ C1] run_timer_softirq+0x63/0xf0 [ 81.950655][ C1] handle_softirqs+0x336/0x830 [ 81.955446][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 81.960310][ C1] ? do_softirq+0x210/0x210 [ 81.964852][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 81.969982][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 81.975196][ C1] __irq_exit_rcu+0x13b/0x230 [ 81.979882][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.984398][ C1] irq_exit_rcu+0x5/0x20 [ 81.988653][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 81.994315][ C1] [ 81.997283][ C1] [ 82.000242][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 82.006236][ C1] RIP: 0010:unwind_next_frame+0x1038/0x1cf0 [ 82.012148][ C1] Code: 01 89 00 48 8b 74 24 20 48 8b 14 24 eb b0 4d 8d 7c 24 02 49 83 c4 03 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 16 0b 00 00 <4c> 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 27 0b 00 00 49 0f bf [ 82.031775][ C1] RSP: 0018:ffffc9000332f710 EFLAGS: 00000246 [ 82.037855][ C1] RAX: 0000000000000000 RBX: ffffc9000332f7a8 RCX: 0000000000000000 [ 82.045846][ C1] RDX: 0000000000000010 RSI: 0000000000000001 RDI: ffffc9000332f808 [ 82.053833][ C1] RBP: dffffc0000000000 R08: ffffc9000332fba8 R09: ffffc9000332f7f8 [ 82.061814][ C1] R10: dffffc0000000000 R11: fffff52000665f01 R12: ffffffff8e0f9c7d [ 82.069798][ C1] R13: 1ffffffff1c1f38f R14: ffffc9000332f7dd R15: ffffffff8e0f9c7c [ 82.077794][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 82.083356][ C1] ? stack_trace_save+0xf0/0xf0 [ 82.088229][ C1] arch_stack_walk+0x10c/0x140 [ 82.093014][ C1] ? kmem_cache_free+0x8f/0x210 [ 82.097877][ C1] ? kmem_cache_free+0x8f/0x210 [ 82.102737][ C1] stack_trace_save+0xa6/0xf0 [ 82.107426][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 82.112548][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 82.118100][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 82.123660][ C1] ? process_one_work+0x867/0xff0 [ 82.128697][ C1] ? worker_thread+0xad7/0x12a0 [ 82.133574][ C1] ? kmem_cache_free+0x8f/0x210 [ 82.138451][ C1] kasan_set_track+0x4b/0x70 [ 82.143059][ C1] ? kasan_set_track+0x4b/0x70 [ 82.147836][ C1] ? kasan_set_free_info+0x1f/0x40 [ 82.152961][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 82.158175][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 82.163752][ C1] kasan_set_free_info+0x1f/0x40 [ 82.168701][ C1] ____kasan_slab_free+0xd5/0x110 [ 82.173742][ C1] slab_free_freelist_hook+0xec/0x170 [ 82.179129][ C1] ? batadv_forw_packet_free+0x5c/0x1e0 [ 82.184694][ C1] kmem_cache_free+0x8f/0x210 [ 82.189376][ C1] ? skb_release_head_state+0x1e7/0x240 [ 82.194947][ C1] batadv_forw_packet_free+0x5c/0x1e0 [ 82.200333][ C1] process_one_work+0x867/0xff0 [ 82.205202][ C1] ? worker_detach_from_pool+0x240/0x240 [ 82.210850][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 82.216150][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 82.221184][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 82.226748][ C1] ? wq_worker_running+0x97/0x170 [ 82.231788][ C1] worker_thread+0xad7/0x12a0 [ 82.236507][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.242434][ C1] kthread+0x42e/0x520 [ 82.246511][ C1] ? rcu_lock_release+0x20/0x20 [ 82.251371][ C1] ? kthread_blkcg+0xd0/0xd0 [ 82.255975][ C1] ret_from_fork+0x1f/0x30 [ 82.260411][ C1] [ 82.263648][ C1] Kernel Offset: disabled [ 82.267989][ C1] Rebooting in 86400 seconds..