last executing test programs:

1.747654954s ago: executing program 0 (id=104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080)

1.586500124s ago: executing program 2 (id=108):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000009"], 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r1)

1.397928908s ago: executing program 2 (id=110):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x457)

1.347426902s ago: executing program 0 (id=111):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.346016347s ago: executing program 0 (id=113):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x6, 0x3, 0x201, 0x2, 0x0, 0x1, 0xffffffff, 0x7}, &(0x7f0000000140)=0x20)

1.190321927s ago: executing program 2 (id=116):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0xf8, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0xfc, @time, {}, {}, @time}], 0x70)

1.190184153s ago: executing program 0 (id=117):
io_setup(0x4, &(0x7f00000001c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200)='8', 0x1, 0x10000000005971, 0x300}])

1.137456658s ago: executing program 2 (id=119):
r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x21, 0x2, 0x8, "a669b780181a7c9695b5f60000000000400000000000000000000600050600", 0x42303159})

1.136962882s ago: executing program 0 (id=121):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0)

1.136684918s ago: executing program 2 (id=122):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)

1.136521873s ago: executing program 2 (id=123):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f1e07d695f26853bd852798b2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.080432123s ago: executing program 0 (id=124):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904"], 0x0)

127.29463ms ago: executing program 1 (id=135):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}}, 0x24008044)

54.771803ms ago: executing program 1 (id=136):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x900}, 0x4000000)

54.456459ms ago: executing program 1 (id=137):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2})

377.66µs ago: executing program 1 (id=138):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5})

148.394µs ago: executing program 1 (id=139):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x3ffffffe}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0x70bd28, 0x70bd2d}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0)

0s ago: executing program 1 (id=140):
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0xe, "eb87eddb94c3a9e35597e1307b091a89", "1073f3512a2a8ad64dc8412ed7ec85f6"}}}}, 0x27)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7604' (ED25519) to the list of known hosts.
syzkaller login: [   41.237208][ T5521] cgroup: Unknown subsys name 'net'
[   41.317678][ T5521] cgroup: Unknown subsys name 'cpuset'
[   41.324705][ T5521] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.613810][ T5521] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.360432][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.364746][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.367830][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.372015][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.376300][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.379474][ T4985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.382950][ T4985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.386353][ T4985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.394092][ T4985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.399986][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.402647][ T4985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.404403][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.408860][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.411654][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.414219][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.838944][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.842153][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.844703][ T5599] bridge_slave_0: entered allmulticast mode
[   46.848109][ T5599] bridge_slave_0: entered promiscuous mode
[   46.874250][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.876842][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.879548][ T5599] bridge_slave_1: entered allmulticast mode
[   46.882374][ T5599] bridge_slave_1: entered promiscuous mode
[   46.917117][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.938350][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.982659][ T5599] team0: Port device team_slave_0 added
[   46.985346][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.987844][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.990350][ T5595] bridge_slave_0: entered allmulticast mode
[   46.993108][ T5595] bridge_slave_0: entered promiscuous mode
[   47.004214][ T5599] team0: Port device team_slave_1 added
[   47.006755][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.009353][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.011838][ T5595] bridge_slave_1: entered allmulticast mode
[   47.014696][ T5595] bridge_slave_1: entered promiscuous mode
[   47.091788][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.094744][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.105228][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.111414][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.136424][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.138456][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.146213][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.161278][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.170077][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.172592][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.175224][ T5603] bridge_slave_0: entered allmulticast mode
[   47.178258][ T5603] bridge_slave_0: entered promiscuous mode
[   47.182005][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.184331][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.186773][ T5603] bridge_slave_1: entered allmulticast mode
[   47.189329][ T5603] bridge_slave_1: entered promiscuous mode
[   47.212591][ T5595] team0: Port device team_slave_0 added
[   47.235987][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.242364][ T5599] hsr_slave_0: entered promiscuous mode
[   47.244855][ T5599] hsr_slave_1: entered promiscuous mode
[   47.248255][ T5595] team0: Port device team_slave_1 added
[   47.251862][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.296711][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.299004][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.306874][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.312036][ T5603] team0: Port device team_slave_0 added
[   47.320623][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.323094][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.331301][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.340581][ T5603] team0: Port device team_slave_1 added
[   47.392664][ T5595] hsr_slave_0: entered promiscuous mode
[   47.395714][ T5595] hsr_slave_1: entered promiscuous mode
[   47.398112][ T5595] debugfs: 'hsr0' already exists in 'hsr'
[   47.400076][ T5595] Cannot create hsr debugfs directory
[   47.406408][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.409015][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.418602][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.423616][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.426377][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.435861][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.553071][ T5603] hsr_slave_0: entered promiscuous mode
[   47.556017][ T5603] hsr_slave_1: entered promiscuous mode
[   47.558650][ T5603] debugfs: 'hsr0' already exists in 'hsr'
[   47.560717][ T5603] Cannot create hsr debugfs directory
[   47.666423][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.673266][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.680433][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.687558][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.710621][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.715509][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.718296][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.722853][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.780288][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.788478][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.791918][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.799023][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.807443][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.813713][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.817783][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.823784][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.883802][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.889806][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.897694][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.903204][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.910725][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.914570][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.920511][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.924850][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.929899][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.958803][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[   47.978581][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.981113][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.986867][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.989090][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.033634][ T5599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.041017][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.063070][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   48.089049][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.091887][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.104127][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.110234][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.112618][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.133754][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   48.144118][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.146417][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.161276][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.163557][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.319931][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.391209][ T5599] veth0_vlan: entered promiscuous mode
[   48.403262][ T5599] veth1_vlan: entered promiscuous mode
[   48.407977][ T5601] Bluetooth: hci0: command tx timeout
[   48.427497][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.449627][ T5599] veth0_macvtap: entered promiscuous mode
[   48.460034][ T5599] veth1_macvtap: entered promiscuous mode
[   48.477541][ T5603] veth0_vlan: entered promiscuous mode
[   48.484763][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.487410][ T5601] Bluetooth: hci2: command tx timeout
[   48.487440][ T5597] Bluetooth: hci1: command tx timeout
[   48.491743][ T5603] veth1_vlan: entered promiscuous mode
[   48.496292][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.506879][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.512819][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.520679][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.523771][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.530051][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.581797][ T5603] veth0_macvtap: entered promiscuous mode
[   48.593795][ T5603] veth1_macvtap: entered promiscuous mode
[   48.634423][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.644225][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.654178][ T5595] veth0_vlan: entered promiscuous mode
[   48.668420][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.679465][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.688905][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.692551][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.698065][ T5595] veth1_vlan: entered promiscuous mode
[   48.701686][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.707311][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.711459][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.724211][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.754335][ T5599] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.768382][ T5595] veth0_macvtap: entered promiscuous mode
[   48.789688][ T5595] veth1_macvtap: entered promiscuous mode
[   48.801154][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.807752][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.820903][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.830156][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.834054][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.836859][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.844406][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.851714][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.860042][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.865683][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.940846][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.949317][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.982679][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.988102][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.273539][ T5725] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9'.
[   49.936326][ T5723] syz.2.7 (5723) used greatest stack depth: 21064 bytes left
[   50.011573][ T5729] loop1: detected capacity change from 0 to 131072
[   50.018418][ T5729] F2FS-fs (loop1): invalid crc value
[   50.056774][ T5729] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   50.061024][ T5729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   50.079182][ T5735] FAULT_INJECTION: forcing a failure.
[   50.079182][ T5735] name failslab, interval 1, probability 0, space 0, times 1
[   50.084361][ T5735] CPU: 1 UID: 0 PID: 5735 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) 
[   50.084373][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.084378][ T5735] Call Trace:
[   50.084381][ T5735]  <TASK>
[   50.084385][ T5735]  dump_stack_lvl+0xe8/0x150
[   50.084399][ T5735]  should_fail_ex+0x40c/0x560
[   50.084414][ T5735]  should_failslab+0xa8/0x100
[   50.084425][ T5735]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   50.084435][ T5735]  ? security_inode_alloc+0x39/0x310
[   50.084445][ T5735]  ? security_inode_alloc+0x39/0x310
[   50.084459][ T5735]  security_inode_alloc+0x39/0x310
[   50.084470][ T5735]  inode_init_always_gfp+0x97e/0xd30
[   50.084481][ T5735]  ? __pfx_proc_alloc_inode+0x10/0x10
[   50.084492][ T5735]  alloc_inode+0x82/0x1b0
[   50.084501][ T5735]  new_inode+0x1f/0x170
[   50.084508][ T5735]  ? proc_pid_make_inode+0x19/0x130
[   50.084517][ T5735]  proc_pid_make_inode+0x21/0x130
[   50.084525][ T5735]  proc_pident_instantiate+0x6d/0x2a0
[   50.084534][ T5735]  proc_pident_lookup+0x1b7/0x270
[   50.084544][ T5735]  path_openat+0x111f/0x3830
[   50.084565][ T5735]  do_file_open+0x23e/0x4a0
[   50.084577][ T5735]  ? __pfx_do_file_open+0x10/0x10
[   50.084611][ T5735]  ? __pfx_kfree_link+0x10/0x10
[   50.084625][ T5735]  ? _raw_spin_unlock+0x28/0x50
[   50.084632][ T5735]  ? alloc_fd+0x651/0x6c0
[   50.084645][ T5735]  do_sys_openat2+0x115/0x200
[   50.084655][ T5735]  ? __se_sys_futex+0x3a8/0x450
[   50.084667][ T5735]  ? __pfx_do_sys_openat2+0x10/0x10
[   50.084679][ T5735]  ? rcu_is_watching+0x15/0xb0
[   50.084692][ T5735]  __x64_sys_openat+0x138/0x170
[   50.084702][ T5735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.084710][ T5735]  do_syscall_64+0x174/0x580
[   50.084719][ T5735]  ? trace_irq_disable+0x3b/0x140
[   50.084746][ T5735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.084758][ T5735] RIP: 0033:0x7fc38d55e98e
[   50.084766][ T5735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   50.084772][ T5735] RSP: 002b:00007fc38e4d9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   50.084782][ T5735] RAX: ffffffffffffffda RBX: 00007fc38e4da6c0 RCX: 00007fc38d55e98e
[   50.084788][ T5735] RDX: 0000000000000002 RSI: 00007fc38e4d9f90 RDI: ffffffffffffff9c
[   50.084793][ T5735] RBP: 00007fc38d63506b R08: 0000000000000000 R09: 0000000000000000
[   50.084798][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.084802][ T5735] R13: 00007fc38d826038 R14: 00007fc38d825fa0 R15: 00007ffdf4a6fac8
[   50.084813][ T5735]  </TASK>
[   50.475863][ T5597] Bluetooth: hci0: command tx timeout
[   50.477893][ T5743] FAULT_INJECTION: forcing a failure.
[   50.477893][ T5743] name failslab, interval 1, probability 0, space 0, times 0
[   50.483218][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) 
[   50.483229][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   50.483234][ T5743] Call Trace:
[   50.483237][ T5743]  <TASK>
[   50.483241][ T5743]  dump_stack_lvl+0xe8/0x150
[   50.483257][ T5743]  should_fail_ex+0x40c/0x560
[   50.483272][ T5743]  should_failslab+0xa8/0x100
[   50.483283][ T5743]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   50.483292][ T5743]  ? security_inode_alloc+0x39/0x310
[   50.483302][ T5743]  ? security_inode_alloc+0x39/0x310
[   50.483314][ T5743]  security_inode_alloc+0x39/0x310
[   50.483325][ T5743]  inode_init_always_gfp+0x97e/0xd30
[   50.483337][ T5743]  ? __pfx_mqueue_alloc_inode+0x10/0x10
[   50.483345][ T5743]  alloc_inode+0x82/0x1b0
[   50.483353][ T5743]  ? __pfx_mqueue_fill_super+0x10/0x10
[   50.483362][ T5743]  new_inode+0x1f/0x170
[   50.483370][ T5743]  ? __pfx_mqueue_fill_super+0x10/0x10
[   50.483380][ T5743]  mqueue_fill_super+0xdb/0x380
[   50.483389][ T5743]  ? __pfx_mqueue_fill_super+0x10/0x10
[   50.483398][ T5743]  get_tree_nodev+0xbb/0x150
[   50.483410][ T5743]  vfs_get_tree+0x92/0x2a0
[   50.483421][ T5743]  fc_mount_longterm+0x1c/0x100
[   50.483429][ T5743]  mq_init_ns+0x508/0x770
[   50.483438][ T5743]  copy_ipcs+0x45c/0x6c0
[   50.483448][ T5743]  create_new_namespaces+0x210/0x6b0
[   50.483457][ T5743]  ? security_capable+0x7e/0x2c0
[   50.483469][ T5743]  unshare_nsproxy_namespaces+0x149/0x190
[   50.483478][ T5743]  ksys_unshare+0x57d/0xa00
[   50.483490][ T5743]  ? __pfx_ksys_unshare+0x10/0x10
[   50.483498][ T5743]  ? rcu_is_watching+0x15/0xb0
[   50.483511][ T5743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.483519][ T5743]  __x64_sys_unshare+0x38/0x50
[   50.483527][ T5743]  do_syscall_64+0x174/0x580
[   50.483536][ T5743]  ? trace_irq_disable+0x3b/0x140
[   50.483546][ T5743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.483553][ T5743] RIP: 0033:0x7fc38d59e159
[   50.483560][ T5743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.483567][ T5743] RSP: 002b:00007fc38e4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   50.483575][ T5743] RAX: ffffffffffffffda RBX: 00007fc38d825fa0 RCX: 00007fc38d59e159
[   50.483580][ T5743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[   50.483586][ T5743] RBP: 00007fc38d63506b R08: 0000000000000000 R09: 0000000000000000
[   50.483591][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.483595][ T5743] R13: 00007fc38d826038 R14: 00007fc38d825fa0 R15: 00007ffdf4a6fac8
[   50.483606][ T5743]  </TASK>
[   50.573589][ T5597] Bluetooth: hci1: command tx timeout
[   50.575357][ T5597] Bluetooth: hci2: command tx timeout
[   50.774878][ T5762] netlink: 'syz.2.25': attribute type 7 has an invalid length.
[   50.883157][ T5772] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   50.898364][ T5774] process 'syz.2.31' launched './file0' with NULL argv: empty string added
[   50.901585][ T5774] Invalid argument reading file caps for ./file0
[   50.995435][ T5783] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   51.000162][ T5783] netlink: 224 bytes leftover after parsing attributes in process `syz.0.35'.
[   51.069913][ T5787] loop0: detected capacity change from 0 to 512
[   51.072861][ T5787] =======================================================
[   51.072861][ T5787] WARNING: The mand mount option has been deprecated and
[   51.072861][ T5787]          and is ignored by this kernel. Remove the mand
[   51.072861][ T5787]          option from the mount to silence this warning.
[   51.072861][ T5787] =======================================================
[   51.111327][ T5787] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   51.114639][ T5787] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.119241][ T5787] EXT4-fs (loop0): The Hurd can't support 64-bit file systems
[   51.247639][ T5801] mmap: syz.0.44 (5801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   51.284170][ T5805] loop0: detected capacity change from 0 to 128
[   51.292775][ T5805] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   51.304324][ T5805] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   51.395612][ T5814] bonding: no command found in bonding_masters - use +ifname or -ifname
[   51.542686][ T5827] tipc: Started in network mode
[   51.545489][ T5827] tipc: Node identity fe4f05ec69df, cluster identity 4711
[   51.549839][ T5827] tipc: Enabled bearer <eth:hsr0>, priority 10
[   51.690316][ T5835] loop2: detected capacity change from 0 to 4096
[   51.706147][ T5062] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   51.718983][ T5839] loop1: detected capacity change from 0 to 64
[   51.728465][ T5835] EXT4-fs (loop2): Test dummy encryption mode enabled
[   51.749804][ T5835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.790809][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.791468][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.64'.
[   51.900822][ T5062] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[   51.905283][ T5062] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[   51.913098][ T5062] usb 1-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[   51.917692][ T5062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.923035][ T5062] usb 1-1: Product: syz
[   51.928196][ T5062] usb 1-1: Manufacturer: syz
[   51.932394][ T5062] usb 1-1: SerialNumber: syz
[   51.947395][ T5062] digi_acceleport 1-1:1.0: Digi 2 port USB adapter converter detected
[   51.954448][ T5062] digi_acceleport 1-1:1.0: probe with driver digi_acceleport failed with error -22
[   52.006545][ T5851] netlink: 'syz.1.68': attribute type 23 has an invalid length.
[   52.009054][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   52.160856][ T5062] usb 1-1: USB disconnect, device number 2
[   52.250901][ T5864] loop1: detected capacity change from 0 to 4096
[   52.272726][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.299681][ T5595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.555215][ T5601] Bluetooth: hci0: command tx timeout
[   52.635730][ T5601] Bluetooth: hci2: command tx timeout
[   52.635860][ T5597] Bluetooth: hci1: command tx timeout
[   52.675830][ T5674] tipc: Node number set to 2542798316
[   52.852874][ T5880] misc userio: Can't change port extra on an already running userio instance
[   53.531345][ T5888] loop2: detected capacity change from 0 to 164
[   53.600120][ T5895] loop0: detected capacity change from 0 to 2048
[   53.825763][ T5910] loop0: detected capacity change from 0 to 256
[   53.969017][ T5920] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   54.131642][ T5924] loop0: detected capacity change from 0 to 32768
[   54.137158][ T5924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.101 (5924)
[   54.153063][ T5924] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.158530][ T5924] BTRFS info (device loop0): using sha256 checksum algorithm
[   54.199938][ T5924] BTRFS info (device loop0): enabling ssd optimizations
[   54.202138][ T5924] BTRFS info (device loop0): turning on sync discard
[   54.204081][ T5924] BTRFS info (device loop0): enabling free space tree
[   54.206510][ T5924] BTRFS info (device loop0): use zlib compression, level 3
[   54.373694][ T5941] xt_socket: unknown flags 0xc
[   54.391454][ T5603] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.470617][ T5943] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.489151][ T5943] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.553495][ T5599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.637460][ T5597] Bluetooth: hci0: command tx timeout
[   54.650414][ T5961] FAULT_INJECTION: forcing a failure.
[   54.650414][ T5961] name failslab, interval 1, probability 0, space 0, times 0
[   54.660538][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) 
[   54.660550][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   54.660557][ T5961] Call Trace:
[   54.660562][ T5961]  <TASK>
[   54.660566][ T5961]  dump_stack_lvl+0xe8/0x150
[   54.660587][ T5961]  should_fail_ex+0x40c/0x560
[   54.660610][ T5961]  should_failslab+0xa8/0x100
[   54.660629][ T5961]  __kmalloc_cache_noprof+0xa8/0x660
[   54.660646][ T5961]  ? tipc_group_create+0x9b/0x4f0
[   54.660656][ T5961]  ? tipc_group_create+0x9b/0x4f0
[   54.660667][ T5961]  tipc_group_create+0x9b/0x4f0
[   54.660677][ T5961]  tipc_sk_join+0x25d/0x6a0
[   54.660687][ T5961]  ? __pfx_tipc_sk_join+0x10/0x10
[   54.660694][ T5961]  ? tipc_setsockopt+0x731/0x9a0
[   54.660702][ T5961]  ? __local_bh_enable_ip+0xd0/0x130
[   54.660711][ T5961]  tipc_setsockopt+0x73e/0x9a0
[   54.660721][ T5961]  ? __pfx_tipc_setsockopt+0x10/0x10
[   54.660729][ T5961]  ? __fget_files+0x2a/0x420
[   54.660739][ T5961]  ? aa_sock_opt_perm+0xff/0x1a0
[   54.660751][ T5961]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   54.660758][ T5961]  ? __pfx_tipc_setsockopt+0x10/0x10
[   54.660765][ T5961]  do_sock_setsockopt+0x17c/0x1b0
[   54.660777][ T5961]  __x64_sys_setsockopt+0x13d/0x1b0
[   54.660787][ T5961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.660795][ T5961]  do_syscall_64+0x174/0x580
[   54.660803][ T5961]  ? trace_irq_disable+0x3b/0x140
[   54.660813][ T5961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.660821][ T5961] RIP: 0033:0x7f8bdf19e159
[   54.660829][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.660836][ T5961] RSP: 002b:00007f8bdd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   54.660845][ T5961] RAX: ffffffffffffffda RBX: 00007f8bdf425fa0 RCX: 00007f8bdf19e159
[   54.660850][ T5961] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[   54.660854][ T5961] RBP: 00007f8bdf23506b R08: 0000000000000010 R09: 0000000000000000
[   54.660858][ T5961] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[   54.660863][ T5961] R13: 00007f8bdf426038 R14: 00007f8bdf425fa0 R15: 00007ffed139a158
[   54.660873][ T5961]  </TASK>
[   54.732346][ T5597] Bluetooth: hci2: command tx timeout
[   54.734828][ T5601] Bluetooth: hci1: command tx timeout
[   54.831960][ T5974] FAULT_INJECTION: forcing a failure.
[   54.831960][ T5974] name failslab, interval 1, probability 0, space 0, times 0
[   54.836030][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT(full) 
[   54.836040][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   54.836045][ T5974] Call Trace:
[   54.836048][ T5974]  <TASK>
[   54.836051][ T5974]  dump_stack_lvl+0xe8/0x150
[   54.836066][ T5974]  should_fail_ex+0x40c/0x560
[   54.836080][ T5974]  should_failslab+0xa8/0x100
[   54.836092][ T5974]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   54.836101][ T5974]  ? alloc_empty_file+0x5b/0x1d0
[   54.836109][ T5974]  ? alloc_empty_file+0x5b/0x1d0
[   54.836120][ T5974]  alloc_empty_file+0x5b/0x1d0
[   54.836129][ T5974]  alloc_file_pseudo+0x115/0x1e0
[   54.836140][ T5974]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   54.836153][ T5974]  hugetlb_file_setup+0x3ee/0x630
[   54.836163][ T5974]  ksys_mmap_pgoff+0x1ec/0x760
[   54.836171][ T5974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.836179][ T5974]  do_syscall_64+0x174/0x580
[   54.836187][ T5974]  ? trace_irq_disable+0x3b/0x140
[   54.836197][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.836204][ T5974] RIP: 0033:0x7f8bdf19e159
[   54.836212][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.836218][ T5974] RSP: 002b:00007f8bdd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   54.836228][ T5974] RAX: ffffffffffffffda RBX: 00007f8bdf425fa0 RCX: 00007f8bdf19e159
[   54.836239][ T5974] RDX: 0000000002000007 RSI: 0000000000003000 RDI: 0000200000000000
[   54.836244][ T5974] RBP: 00007f8bdf23506b R08: ffffffffffffffff R09: 0000000040000000
[   54.836249][ T5974] R10: 0000000000048033 R11: 0000000000000246 R12: 0000000000000000
[   54.836254][ T5974] R13: 00007f8bdf426038 R14: 00007f8bdf425fa0 R15: 00007ffed139a158
[   54.836264][ T5974]  </TASK>
[   54.928143][ T5978] dlm: no locking on control device
[   54.978701][ T5986] capability: warning: `syz.0.121' uses deprecated v2 capabilities in a way that may be insecure
[   54.987337][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'.
[   54.994905][ T5985] bridge_slave_0: default FDB implementation only supports local addresses
[   55.024812][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'.
[   55.031244][ T5985] bridge_slave_0: default FDB implementation only supports local addresses
[   55.265109][   T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   55.277329][ T5674] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   55.426494][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   55.431261][   T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[   55.434701][   T24] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[   55.438494][   T24] usb 1-1: Manufacturer: syz
[   55.443613][   T24] usb 1-1: config 0 descriptor??
[   55.452612][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[   55.452703][ T5674] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[   55.455588][   T24] hub 1-1:0.0: probe with driver hub failed with error -5
[   55.464095][   T24] usb 1-1: selecting invalid altsetting 1
[   55.466546][   T24] usb 1-1: Can not set alternate setting to 1, error: -22
[   55.469266][   T24] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22
[   55.492418][ T5674] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.505055][ T5674] usb 3-1: config 0 interface 0 has no altsetting 0
[   55.510114][ T5674] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[   55.519848][ T5674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.545604][ T5674] usb 3-1: config 0 descriptor??
[   55.548642][ T5990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   55.765588][  T490] usb 1-1: USB disconnect, device number 3
[   55.987666][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x2
[   55.993272][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x5
[   55.996382][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   55.999363][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.002100][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.004803][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.010107][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.012941][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.016050][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.018802][ T5674] asus 0003:0B05:19B6.0001: unknown main item tag 0x0
[   56.035928][ T5674] asus 0003:0B05:19B6.0001: hidraw0: USB HID v0.0c Device [HID 0b05:19b6] on usb-dummy_hcd.2-1/input0
[   56.174101][ T5674] usb 3-1: USB disconnect, device number 2
[   56.184422][ T5674] ------------[ cut here ]------------
[   56.186231][ T5674] !work->func
[   56.186238][ T5674] WARNING: kernel/workqueue.c:4335 at __flush_work+0xb8f/0xca0, CPU#0: kworker/0:5/5674
[   56.190282][ T5674] Modules linked in:
[   56.192123][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[   56.195084][ T5674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.198260][ T5674] Workqueue: usb_hub_wq hub_event
[   56.199884][ T5674] RIP: 0010:__flush_work+0xb8f/0xca0
[   56.201712][ T5674] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c6 61 44 0a cc e8 20 cd 38 00 90 0f 0b 90 e9 7c ff ff ff e8 12 cd 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 f8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   56.207893][ T5674] RSP: 0018:ffffc900066eef40 EFLAGS: 00010283
[   56.210227][ T5674] RAX: ffffffff818e246e RBX: ffff88811349e8f0 RCX: 0000000000100000
[   56.213115][ T5674] RDX: ffffc90027ca7000 RSI: 00000000000038fa RDI: 00000000000038fb
[   56.215692][ T5674] RBP: ffffc900066ef100 R08: ffffffff90575937 R09: 1ffffffff20aeb26
[   56.219409][ T5674] R10: dffffc0000000000 R11: fffffbfff20aeb27 R12: dffffc0000000000
[   56.221982][ T5674] R13: 1ffff11022693d1e R14: 1ffff92000cdddf0 R15: ffff88811349e8d8
[   56.224403][ T5674] FS:  0000000000000000(0000) GS:ffff88818d959000(0000) knlGS:0000000000000000
[   56.227187][ T5674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.229261][ T5674] CR2: 000000110c461a53 CR3: 0000000110cfc000 CR4: 00000000000006f0
[   56.232215][ T5674] Call Trace:
[   56.233320][ T5674]  <TASK>
[   56.234268][ T5674]  ? __pfx___flush_work+0x10/0x10
[   56.236122][ T5674]  ? rcu_is_watching+0x15/0xb0
[   56.237686][ T5674]  ? work_grab_pending+0x3d1/0x930
[   56.239348][ T5674]  ? __cancel_work_sync+0x5c/0x110
[   56.240984][ T5674]  __cancel_work_sync+0xbe/0x110
[   56.243078][ T5674]  asus_remove+0x147/0x180
[   56.244467][ T5674]  ? hid_device_remove+0xb3/0x370
[   56.246102][ T5674]  ? __pfx_asus_remove+0x10/0x10
[   56.247623][ T5674]  hid_device_remove+0x230/0x370
[   56.249579][ T5674]  ? __pfx_hid_device_remove+0x10/0x10
[   56.251771][ T5674]  device_release_driver_internal+0x48b/0x880
[   56.254137][ T5674]  bus_remove_device+0x444/0x560
[   56.256286][ T5674]  ? __pfx_bus_remove_device+0x10/0x10
[   56.258487][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.260684][ T5674]  device_del+0x524/0x8f0
[   56.262382][ T5674]  ? __pfx_device_del+0x10/0x10
[   56.264275][ T5674]  hid_destroy_device+0x6b/0x1b0
[   56.266264][ T5674]  usbhid_disconnect+0x9f/0xc0
[   56.268142][ T5674]  usb_unbind_interface+0x295/0x9f0
[   56.270181][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.272386][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.274590][ T5674]  ? __pfx_usb_unbind_interface+0x10/0x10
[   56.276897][ T5674]  device_release_driver_internal+0x4f5/0x880
[   56.279347][ T5674]  bus_remove_device+0x444/0x560
[   56.281238][ T5674]  ? __pfx_bus_remove_device+0x10/0x10
[   56.282956][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.284719][ T5674]  device_del+0x524/0x8f0
[   56.286622][ T5674]  ? __pfx_device_del+0x10/0x10
[   56.288333][ T5674]  ? kobject_put+0x516/0x550
[   56.290212][ T5674]  usb_disable_device+0x3d4/0x8d0
[   56.292204][ T5674]  usb_disconnect+0x346/0x9a0
[   56.294049][ T5674]  hub_event+0x1bbb/0x4d30
[   56.295870][ T5674]  ? register_lock_class+0x31/0x2e0
[   56.298089][ T5674]  ? trace_hrtimer_start+0x82/0x200
[   56.300176][ T5674]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   56.302286][ T5674]  ? __pfx_hub_event+0x10/0x10
[   56.304190][ T5674]  ? process_scheduled_works+0xa20/0x14e0
[   56.306298][ T5674]  ? rcu_is_watching+0x15/0xb0
[   56.308059][ T5674]  ? process_scheduled_works+0xa20/0x14e0
[   56.309817][ T5674]  process_scheduled_works+0xa8e/0x14e0
[   56.311536][ T5674]  ? __pfx_process_scheduled_works+0x10/0x10
[   56.313370][ T5674]  ? assign_work+0x3cf/0x5d0
[   56.314896][ T5674]  worker_thread+0xa47/0xfb0
[   56.316580][ T5674]  ? __kthread_parkme+0x71/0x1f0
[   56.318118][ T5674]  kthread+0x388/0x470
[   56.319377][ T5674]  ? __pfx_worker_thread+0x10/0x10
[   56.321001][ T5674]  ? __pfx_kthread+0x10/0x10
[   56.322572][ T5674]  ret_from_fork+0x514/0xb70
[   56.324017][ T5674]  ? __pfx_ret_from_fork+0x10/0x10
[   56.325652][ T5674]  ? __switch_to+0xc89/0x1420
[   56.327097][ T5674]  ? __pfx_kthread+0x10/0x10
[   56.328518][ T5674]  ret_from_fork_asm+0x1a/0x30
[   56.329965][ T5674]  </TASK>
[   56.330924][ T5674] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   56.333129][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[   56.335929][ T5674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.338944][ T5674] Workqueue: usb_hub_wq hub_event
[   56.340464][ T5674] Call Trace:
[   56.341489][ T5674]  <TASK>
[   56.342400][ T5674]  vpanic+0x56c/0xa60
[   56.343642][ T5674]  ? __pfx__printk+0x10/0x10
[   56.345143][ T5674]  ? __pfx_vpanic+0x10/0x10
[   56.346539][ T5674]  ? is_bpf_text_address+0x292/0x2b0
[   56.348200][ T5674]  ? is_bpf_text_address+0x26/0x2b0
[   56.349822][ T5674]  panic+0xc5/0xd0
[   56.351031][ T5674]  ? __pfx_panic+0x10/0x10
[   56.352423][ T5674]  ? ret_from_fork_asm+0x1a/0x30
[   56.353956][ T5674]  __warn+0x315/0x4c0
[   56.355204][ T5674]  ? __flush_work+0xb8f/0xca0
[   56.356631][ T5674]  ? __flush_work+0xb8f/0xca0
[   56.358074][ T5674]  __report_bug+0x276/0x570
[   56.359468][ T5674]  ? __flush_work+0xb8f/0xca0
[   56.360886][ T5674]  ? __pfx___report_bug+0x10/0x10
[   56.362394][ T5674]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   56.364173][ T5674]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   56.365962][ T5674]  ? __flush_work+0xb8f/0xca0
[   56.367388][ T5674]  report_bug+0x16a/0x220
[   56.368697][ T5674]  ? __flush_work+0xb8f/0xca0
[   56.370140][ T5674]  ? __flush_work+0xb91/0xca0
[   56.371597][ T5674]  handle_bug+0x9c/0x200
[   56.372919][ T5674]  exc_invalid_op+0x1a/0x50
[   56.374342][ T5674]  asm_exc_invalid_op+0x1a/0x20
[   56.375835][ T5674] RIP: 0010:__flush_work+0xb8f/0xca0
[   56.377453][ T5674] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c6 61 44 0a cc e8 20 cd 38 00 90 0f 0b 90 e9 7c ff ff ff e8 12 cd 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 f8
[   56.383251][ T5674] RSP: 0018:ffffc900066eef40 EFLAGS: 00010283
[   56.385192][ T5674] RAX: ffffffff818e246e RBX: ffff88811349e8f0 RCX: 0000000000100000
[   56.387600][ T5674] RDX: ffffc90027ca7000 RSI: 00000000000038fa RDI: 00000000000038fb
[   56.390000][ T5674] RBP: ffffc900066ef100 R08: ffffffff90575937 R09: 1ffffffff20aeb26
[   56.392384][ T5674] R10: dffffc0000000000 R11: fffffbfff20aeb27 R12: dffffc0000000000
[   56.394773][ T5674] R13: 1ffff11022693d1e R14: 1ffff92000cdddf0 R15: ffff88811349e8d8
[   56.397190][ T5674]  ? __flush_work+0xb8e/0xca0
[   56.398624][ T5674]  ? __pfx___flush_work+0x10/0x10
[   56.400177][ T5674]  ? rcu_is_watching+0x15/0xb0
[   56.401639][ T5674]  ? work_grab_pending+0x3d1/0x930
[   56.403230][ T5674]  ? __cancel_work_sync+0x5c/0x110
[   56.404793][ T5674]  __cancel_work_sync+0xbe/0x110
[   56.406316][ T5674]  asus_remove+0x147/0x180
[   56.407676][ T5674]  ? hid_device_remove+0xb3/0x370
[   56.409216][ T5674]  ? __pfx_asus_remove+0x10/0x10
[   56.410718][ T5674]  hid_device_remove+0x230/0x370
[   56.412249][ T5674]  ? __pfx_hid_device_remove+0x10/0x10
[   56.413893][ T5674]  device_release_driver_internal+0x48b/0x880
[   56.415789][ T5674]  bus_remove_device+0x444/0x560
[   56.417342][ T5674]  ? __pfx_bus_remove_device+0x10/0x10
[   56.419022][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.420724][ T5674]  device_del+0x524/0x8f0
[   56.422055][ T5674]  ? __pfx_device_del+0x10/0x10
[   56.423542][ T5674]  hid_destroy_device+0x6b/0x1b0
[   56.425110][ T5674]  usbhid_disconnect+0x9f/0xc0
[   56.426616][ T5674]  usb_unbind_interface+0x295/0x9f0
[   56.428213][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.430042][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.431784][ T5674]  ? __pfx_usb_unbind_interface+0x10/0x10
[   56.433628][ T5674]  device_release_driver_internal+0x4f5/0x880
[   56.435495][ T5674]  bus_remove_device+0x444/0x560
[   56.437010][ T5674]  ? __pfx_bus_remove_device+0x10/0x10
[   56.438682][ T5674]  ? kernfs_remove_by_name_ns+0x101/0x140
[   56.440417][ T5674]  device_del+0x524/0x8f0
[   56.441740][ T5674]  ? __pfx_device_del+0x10/0x10
[   56.443248][ T5674]  ? kobject_put+0x516/0x550
[   56.444666][ T5674]  usb_disable_device+0x3d4/0x8d0
[   56.446208][ T5674]  usb_disconnect+0x346/0x9a0
[   56.447648][ T5674]  hub_event+0x1bbb/0x4d30
[   56.449039][ T5674]  ? register_lock_class+0x31/0x2e0
[   56.450619][ T5674]  ? trace_hrtimer_start+0x82/0x200
[   56.452231][ T5674]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   56.453861][ T5674]  ? __pfx_hub_event+0x10/0x10
[   56.455350][ T5674]  ? process_scheduled_works+0xa20/0x14e0
[   56.457273][ T5674]  ? rcu_is_watching+0x15/0xb0
[   56.458978][ T5674]  ? process_scheduled_works+0xa20/0x14e0
[   56.461092][ T5674]  process_scheduled_works+0xa8e/0x14e0
[   56.462923][ T5674]  ? __pfx_process_scheduled_works+0x10/0x10
[   56.464751][ T5674]  ? assign_work+0x3cf/0x5d0
[   56.466519][ T5674]  worker_thread+0xa47/0xfb0
[   56.468096][ T5674]  ? __kthread_parkme+0x71/0x1f0
[   56.469623][ T5674]  kthread+0x388/0x470
[   56.470878][ T5674]  ? __pfx_worker_thread+0x10/0x10
[   56.472582][ T5674]  ? __pfx_kthread+0x10/0x10
[   56.473987][ T5674]  ret_from_fork+0x514/0xb70
[   56.475374][ T5674]  ? __pfx_ret_from_fork+0x10/0x10
[   56.476876][ T5674]  ? __switch_to+0xc89/0x1420
[   56.478265][ T5674]  ? __pfx_kthread+0x10/0x10
[   56.479710][ T5674]  ret_from_fork_asm+0x1a/0x30
[   56.481143][ T5674]  </TASK>
[   56.482671][ T5674] Kernel Offset: disabled
[   56.483982][ T5674] Rebooting in 86400 seconds..
