last executing test programs: 1m4.395739164s ago: executing program 2 (id=47): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x405, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) 1m4.027626324s ago: executing program 2 (id=50): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000201"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000500)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000700)={0x21, 0x1, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000900)={0xa1, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000400)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 1m0.856951653s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="8000"/136], &(0x7f0000000300), 0x0) 1m0.56763139s ago: executing program 2 (id=64): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 59.049034968s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) rmdir(&(0x7f0000000080)='./cgroup.cpu/syz0\x00') nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 51.524994508s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./config/vkms\x00') 51.387803391s ago: executing program 2 (id=81): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x1}) write(r0, &(0x7f0000000200)='hello\x00', 0x5) 51.187768436s ago: executing program 1 (id=83): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60000000000010902120001010000000904000000ffffff00"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/i2c-adapter/i2c-1/new_device\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r1, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)='saa7115 0x21\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x10, &(0x7f0000002040)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.971611281s ago: executing program 2 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) 49.329815172s ago: executing program 3 (id=89): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102400001070501024000010904000104ffffff0007058102400001070501024000010705820140000107050601400001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 49.191716756s ago: executing program 0 (id=91): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b061000010102030109022e0001010080fa0904000004ff00000007050302000200070584020002000705880100040107050701000401"], 0x0) syz_usb_ep_read(r0, 0x3, 0x200, &(0x7f0000000500)=""/512) syz_usb_ep_write(r0, 0x84, 0x10, &(0x7f0000000100)="0000000c000000010007000101770000") syz_usb_ep_read(r0, 0x3, 0x200, &(0x7f0000000600)=""/512) (async) syz_usb_ep_write(r0, 0x84, 0x10, &(0x7f0000000700)="0000000c000000010007000101770000") (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x1}) syz_usb_ep_write(r0, 0x88, 0x10, &(0x7f0000000400)='\x00'/16) 47.263492564s ago: executing program 0 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002214000000050c0901a1010a810115002501750195018102c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002214000000050c0901a1010a810115002501750195018102c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002214000000050c0901a1010a810115002501750195018102c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002214000000050c0901a1010a810115002501750195018102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 47.209734206s ago: executing program 1 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) 47.136857427s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 47.076003849s ago: executing program 1 (id=96): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) 46.268438249s ago: executing program 3 (id=99): syz_usb_connect(0x0, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04203000010000000109028500020100803209040000000101000009240100013f0001010c24020101020001000000000c24020201020001000000000c24020301020001000000000924050e03010203000924030f0101000e000904010000010200000904010101010200000724010f0101000b2402010102100180bb0009058105640001000007250101000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000400)) 44.915312333s ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 44.729421378s ago: executing program 4 (id=103): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005300), 0x1, 0x51ac, &(0x7f0000005280)="$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") mkdirat(r0, &(0x7f0000000400)='dir\x00', 0x1ff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000500)=0x2) r1 = memfd_create(&(0x7f0000000600)='test\x00', 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000700)={{r1}, 0x0, 0x0}) 44.487736874s ago: executing program 0 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='500\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 43.927244358s ago: executing program 4 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='00:00\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disable', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:01/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='00:01\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:01/resources\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='disable', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:02/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='00:02\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='disable', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:05/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='00:05\x00', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:05/resources\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='disable', 0x7) 43.912207948s ago: executing program 3 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 43.671759874s ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) 43.474246549s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="8000"/136], &(0x7f0000000300), 0x0) 43.399848791s ago: executing program 4 (id=109): openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 43.323172203s ago: executing program 3 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00\x00\x00', 0x8) 43.283394864s ago: executing program 4 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000100000)=[@text32={0x20, &(0x7f0000100100)="b8b000e0fec70000000000f4", 0xc}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x0, 0x0) 43.115724948s ago: executing program 4 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1043}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='syzkaller0\x00', 0xb) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 42.769064327s ago: executing program 0 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 42.570906182s ago: executing program 0 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/rtc_cmos/driver_override\x00', 0x2, 0x0) 42.432096675s ago: executing program 0 (id=115): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10080}}}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x94, 0x20000680}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000000000)={0x1}, &(0x7f0000000000)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000000)={0x1}, &(0x7f0000000000)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) 21.661501256s ago: executing program 32 (id=115): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10080}}}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x94, 0x20000680}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000000000)={0x1}, &(0x7f0000000000)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000000)={0x1}, &(0x7f0000000000)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) 21.562395169s ago: executing program 33 (id=96): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x1) 21.472539731s ago: executing program 34 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) 21.369158184s ago: executing program 35 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00\x00\x00', 0x8) 21.242174017s ago: executing program 36 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1043}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='syzkaller0\x00', 0xb) sendto$inet(r3, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 3.530640341s ago: executing program 5 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0) 3.340956086s ago: executing program 5 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='disk\x00', 0x5) 3.021334874s ago: executing program 5 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0100000002000000", 0x8) 2.36493743s ago: executing program 9 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="8000"/136], &(0x7f0000000300), 0x0) 2.065709038s ago: executing program 9 (id=123): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x4}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x5}}) 516.824367ms ago: executing program 6 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 265.847173ms ago: executing program 7 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) 175.841976ms ago: executing program 5 (id=124): r0 = io_uring_setup(0x10, &(0x7f0000000000)) io_uring_setup(0x10, &(0x7f0000000000)) io_uring_setup(0x10, &(0x7f0000000000)) io_uring_setup(0x10, &(0x7f0000000000)) io_uring_setup(0x10, &(0x7f0000000000)) io_uring_setup(0x10, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000006)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x1, 0x0, &(0x7f0000000007)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x2, 0x0, &(0x7f0000000008)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x3, 0x0, &(0x7f0000000009)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x4, 0x0, &(0x7f000000000a)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x5, 0x0, &(0x7f000000000b)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x6, 0x0, &(0x7f000000000c)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x7, 0x0, &(0x7f000000000d)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x8, 0x0, &(0x7f000000000e)}], 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f000000000f)}], 0x1) 124.073967ms ago: executing program 8 (id=119): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902220001010080fa09040000010101000009240100010900010107058103400001"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0xa1, 0x0, 0x18, '\x00'/24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x14, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.513748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.522488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.530836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.541838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.551231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.560195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.576851][ T4284] device veth0_macvtap entered promiscuous mode [ 88.591351][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.604831][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.615153][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.625842][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.636455][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.646993][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.659781][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.673833][ T4284] device veth1_macvtap entered promiscuous mode [ 88.687001][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.697342][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.706743][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.716569][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.730693][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.740992][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751795][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.761062][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.763898][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.780460][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.810886][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.844062][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.855752][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.873654][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.884430][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.898370][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.909327][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.919515][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.930277][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.942753][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.969859][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.978408][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.992996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.002921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.016908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.027626][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 89.028360][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 89.034877][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 89.057800][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.070694][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.080938][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.091650][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.101767][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.108993][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 89.116781][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 89.119283][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.136094][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.146641][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.158659][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.176106][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.194565][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.226388][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.235301][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.269002][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.310621][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.331871][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.355449][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.367537][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.439908][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.456106][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.485591][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.515713][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.532934][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.554228][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.618227][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.658190][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.666071][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.682879][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.716201][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.733757][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.754553][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.792486][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.803982][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.820916][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.834128][ T4320] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 89.865283][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.885957][ T4320] usb 3-1: Product: syz [ 89.890702][ T4320] usb 3-1: Manufacturer: syz [ 89.895751][ T4320] usb 3-1: SerialNumber: syz [ 89.969474][ T4374] jffs2: notice: (4374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.017647][ T4273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.247491][ T4273] usb 4-1: config index 0 descriptor too short (expected 159, got 141) [ 90.268007][ T4273] usb 4-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 90.287931][ T4273] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.328263][ T4273] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 90.347905][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.355992][ T4273] usb 4-1: Product: syz [ 90.387147][ T4273] usb 4-1: Manufacturer: syz [ 90.398060][ T4273] usb 4-1: SerialNumber: syz [ 90.442396][ T4273] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 90.615640][ T4378] loop4: detected capacity change from 0 to 32768 [ 90.655469][ T4378] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4378) [ 90.705568][ T4378] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 90.738350][ T4378] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.763430][ T4378] BTRFS info (device loop4): using free space tree [ 90.924641][ T4378] BTRFS info (device loop4): enabling ssd optimizations [ 90.968566][ T4368] NFSD: attempt to initialize umh client tracking in a container ignored. [ 90.988536][ T4368] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 91.008381][ T4368] NFSD: Unable to initialize client recovery tracking! (-22) [ 91.016141][ T4368] NFSD: starting 10-second grace period (net f00003d7) [ 91.294748][ T4318] usb 3-1: USB disconnect, device number 2 [ 91.469763][ T4284] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 91.749516][ T4407] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 11 /dev/loop4 scanned by udevd (4407) [ 91.829560][ T7] cfg80211: failed to load regulatory.db [ 91.866851][ T4273] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 91.898727][ T4273] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 91.941762][ T4273] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 91.969638][ T4429] loop0: detected capacity change from 0 to 128 [ 92.025551][ T4273] usb 4-1: USB disconnect, device number 2 [ 92.267711][ T27] audit: type=1800 audit(1785894492.925:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="attr_allow_any_host" dev="configfs" ino=34165 res=0 errno=0 [ 92.304175][ T4433] nvmet: Invalid value 'ipv' for adrfam [ 92.314692][ T27] audit: type=1800 audit(1785894492.965:3): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="addr_trtype" dev="configfs" ino=33747 res=0 errno=0 [ 92.357649][ T27] audit: type=1800 audit(1785894492.965:4): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="addr_traddr" dev="configfs" ino=33748 res=0 errno=0 [ 92.412251][ T27] audit: type=1800 audit(1785894492.965:5): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="addr_trsvcid" dev="configfs" ino=33749 res=0 errno=0 [ 92.424752][ T4433] nvmet_tcp: address family 255 not supported [ 92.500971][ T4440] serial 00:05: in use; can't configure [ 92.530554][ T4440] serial 00:05: in use; can't configure [ 92.537613][ T27] audit: type=1800 audit(1785894492.965:6): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="addr_adrfam" dev="configfs" ino=33750 res=0 errno=0 [ 92.568234][ T4440] serial 00:05: in use; can't configure [ 92.786629][ T4447] lo speed is unknown, defaulting to 1000 [ 92.807552][ T4447] lo speed is unknown, defaulting to 1000 [ 92.815588][ T4447] lo speed is unknown, defaulting to 1000 [ 92.824206][ T4439] nvme nvme0: failed to connect socket: -111 [ 92.911092][ T4447] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.935085][ T4447] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.977354][ T4447] lo speed is unknown, defaulting to 1000 [ 93.001405][ T4447] lo speed is unknown, defaulting to 1000 [ 93.017316][ T4447] lo speed is unknown, defaulting to 1000 [ 93.025991][ T4447] lo speed is unknown, defaulting to 1000 [ 93.033069][ T4447] lo speed is unknown, defaulting to 1000 [ 93.034661][ T4454] jffs2: notice: (4454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.169180][ T4273] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.191472][ T4320] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.210693][ T4280] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 93.217998][ T4280] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 93.224934][ T4280] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 93.232975][ T4280] Bluetooth: hci5: unexpected event for opcode 0x2002 [ 93.240019][ T4280] Bluetooth: hci5: unexpected event for opcode 0x201c [ 93.248582][ T4280] Bluetooth: hci5: unexpected event for opcode 0x200f [ 93.255509][ T4280] Bluetooth: hci5: unexpected event for opcode 0x202a [ 93.263082][ T4280] Bluetooth: hci5: unexpected event for opcode 0x202f [ 93.270495][ T4280] Bluetooth: hci5: unexpected event for opcode 0x203b [ 93.370022][ T4273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.379258][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.387441][ T4273] usb 4-1: SerialNumber: syz [ 93.392596][ T4320] usb 2-1: not running at top speed; connect to a high speed hub [ 93.406162][ T4320] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 93.416864][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.441539][ T4320] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 002 [ 93.577573][ T4437] NFSD: attempt to initialize umh client tracking in a container ignored. [ 93.587244][ T4437] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 93.597032][ T4437] NFSD: Unable to initialize client recovery tracking! (-22) [ 93.604721][ T4437] NFSD: starting 90-second grace period (net f0000576) [ 93.617636][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.801762][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 93.814201][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.823157][ T7] usb 3-1: Product: syz [ 93.828231][ T7] usb 3-1: Manufacturer: syz [ 93.833089][ T7] usb 3-1: SerialNumber: syz [ 93.857334][ T7] gspca_main: spca500-2.14.0 probing 046d:0900 [ 93.957082][ T4466] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 94.104549][ T4470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.120703][ T4320] (null): failure reading functionality [ 94.126813][ T4320] i2c i2c-1: failure reading functionality [ 94.145486][ T4320] i2c i2c-1: connected i2c-tiny-usb device [ 94.168378][ T4320] usb 2-1: USB disconnect, device number 2 [ 94.597595][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.635576][ T4273] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 94.665352][ T4273] usb 4-1: USB disconnect, device number 3 [ 94.781848][ T4321] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 94.791215][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.800141][ T4321] usb 5-1: Product: syz [ 94.804431][ T4321] usb 5-1: Manufacturer: syz [ 94.809175][ T4321] usb 5-1: SerialNumber: syz [ 94.997564][ T4421] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.189916][ T4421] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 95.215184][ T4421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.277604][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.497564][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.681857][ T4315] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice= 0.00 [ 95.692862][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.701445][ T4315] usb 4-1: Product: syz [ 95.705752][ T4315] usb 4-1: Manufacturer: syz [ 95.708494][ T4420] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.712540][ T4315] usb 4-1: SerialNumber: syz [ 95.730805][ T4315] smsusb:smsusb_probe: board id=2, interface number 0 [ 95.754222][ T4315] smsusb:siano_media_device_register: media controller created [ 95.934403][ T4420] usb 1-1: not running at top speed; connect to a high speed hub [ 95.935154][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.949550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.956835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.964120][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.968648][ T4420] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 95.971384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.987784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 95.995079][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.002362][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.009658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.016930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.017589][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.033230][ T4315] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -71 [ 96.041607][ T4315] smsmdtv:smscore_set_device_mode: mode detect failed -71 [ 96.048796][ T4315] smsmdtv:smscore_start_device: set device mode failed , rc -71 [ 96.056476][ T4315] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 96.064615][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 96.069188][ T4420] usb 1-1: Product: syz [ 96.071806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.071885][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.090523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.097777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.105029][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.112275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.119518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.126760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.134005][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.153131][ T4420] usb 1-1: Manufacturer: syz [ 96.160394][ T4420] usb 1-1: SerialNumber: syz [ 96.168489][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 96.175721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.183035][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.190332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.197609][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.204886][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.212214][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.219513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.226790][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.234374][ T7] gspca_spca500: reg write: error -110 [ 96.241247][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 96.248466][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.255730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.263002][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.270279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.277577][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.284860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.292151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.300211][ T7] gspca_spca500: reg write: error -32 [ 96.306484][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 96.313799][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.321076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.328367][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.335673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.342948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.350219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 96.367333][ T4315] smsusb:smsusb_probe: Device initialized with return code -71 [ 96.382062][ T7] gspca_spca500: reg write: error -32 [ 96.394235][ T7] gspca_spca500: reg write: error -32 [ 96.403367][ T7] gspca_spca500: reg write: error -32 [ 96.414276][ T7] gspca_spca500: reg write: error -32 [ 96.421591][ T7] gspca_spca500: reg write: error -32 [ 96.432381][ T7] gspca_spca500: reg write: error -32 [ 96.473350][ T4421] usbhid 2-1:1.0: can't add hid device: -71 [ 96.489256][ T4421] usbhid: probe of 2-1:1.0 failed with error -71 [ 96.541441][ T4421] usb 2-1: USB disconnect, device number 3 [ 96.610812][ T4315] smsusb: probe of 4-1:1.0 failed with error -71 [ 96.641175][ T4315] usb 4-1: USB disconnect, device number 4 [ 96.677809][ C1] usb 1-1: received EP1 urb->status = -2 [ 96.683917][ T4420] usb 1-1: unable to init card! (ret=-110) [ 96.691374][ T4420] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 96.743096][ T7] usb 3-1: USB disconnect, device number 3 [ 96.827342][ T27] audit: type=1800 audit(1785894497.485:7): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="attr_allow_any_host" dev="configfs" ino=34282 res=0 errno=0 [ 96.855504][ T27] audit: type=1800 audit(1785894497.515:8): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="addr_trtype" dev="configfs" ino=34875 res=0 errno=0 [ 96.874015][ T4494] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 96.878975][ T27] audit: type=1800 audit(1785894497.515:9): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="addr_traddr" dev="configfs" ino=34876 res=0 errno=0 [ 96.903667][ T27] audit: type=1800 audit(1785894497.515:10): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="addr_trsvcid" dev="configfs" ino=34877 res=0 errno=0 [ 96.926703][ T27] audit: type=1800 audit(1785894497.515:11): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.29" name="addr_adrfam" dev="configfs" ino=34878 res=0 errno=0 [ 97.105725][ T4497] lo speed is unknown, defaulting to 1000 [ 97.114903][ T94] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:0602c4ea-3323-4ee2-a919-684cdc7f3ea7. [ 97.131229][ T4497] lo speed is unknown, defaulting to 1000 [ 97.148549][ T4497] lo speed is unknown, defaulting to 1000 [ 97.174801][ T4494] nvme nvme0: creating 2 I/O queues. [ 97.194127][ T4494] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 97.225468][ T4494] nvme nvme0: new ctrl: NQN "testnqn", addr 127.0.0.1:8009 [ 97.507971][ T4321] usb 5-1: USB disconnect, device number 2 [ 97.544439][ T4502] jffs2: notice: (4502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.568059][ T4420] lo speed is unknown, defaulting to 1000 [ 97.580866][ T4497] infiniband syz0: set active [ 97.595359][ T4497] infiniband syz0: added lo [ 97.679294][ T4497] RDS/IB: syz0: added [ 97.684535][ T4497] smc: adding ib device syz0 with port count 1 [ 97.691763][ T4497] smc: ib device syz0 port 1 has pnetid [ 97.700281][ T4420] lo speed is unknown, defaulting to 1000 [ 97.708559][ T4497] lo speed is unknown, defaulting to 1000 [ 97.897205][ T4497] lo speed is unknown, defaulting to 1000 [ 97.991906][ T4497] lo speed is unknown, defaulting to 1000 [ 98.079636][ T4497] lo speed is unknown, defaulting to 1000 [ 98.117636][ T4420] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.172562][ T4497] lo speed is unknown, defaulting to 1000 [ 98.207490][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.280023][ T4506] rdma_rxe: rxe_register_device failed with error -23 [ 98.287188][ T4506] rdma_rxe: failed to add veth0 [ 98.314500][ T4420] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 98.342912][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.361571][ T4420] usb 4-1: config 0 descriptor?? [ 98.402448][ T4321] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 98.417987][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.446463][ T4321] usb 5-1: Product: syz [ 98.455413][ T4321] usb 5-1: Manufacturer: syz [ 98.492920][ T4321] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 98.758900][ T4315] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.785684][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.797578][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.801447][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.823475][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.831003][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.843888][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.852241][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.871662][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.883283][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.891840][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.903505][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.912083][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.922112][ T4273] usb 1-1: USB disconnect, device number 2 [ 98.927272][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.936726][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.949472][ T4315] usb 3-1: not running at top speed; connect to a high speed hub [ 98.965478][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.974402][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 98.976606][ T4315] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 1.00 [ 98.994551][ T7] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00 [ 99.006666][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.015100][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.024881][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.054701][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.072449][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.092696][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.103363][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.117458][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.126813][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.145794][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.163525][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.178462][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.207483][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.214942][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.242630][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.256818][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.278589][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.286049][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.317454][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.324909][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.353146][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.368147][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.387445][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.394921][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.406847][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.415763][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.424037][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.436040][ T4420] corsair-psu 0003:1B1C:1C03.0001: unknown main item tag 0x0 [ 99.467822][ T4420] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 99.567598][ T4420] corsair-psu 0003:1B1C:1C03.0001: unable to initialize device (-38) [ 99.586056][ T4420] corsair-psu: probe of 0003:1B1C:1C03.0001 failed with error -38 [ 99.634151][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.743445][ T4320] usb 5-1: USB disconnect, device number 3 [ 99.989232][ T4420] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.071000][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.078535][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.085758][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.094877][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.102384][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.109968][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.117172][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.124516][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.131842][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.139341][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.146571][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.156626][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.164110][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.171653][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.179148][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.186444][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.196592][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.207089][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.212208][ T4420] usb 1-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00 [ 100.223953][ T4420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.235595][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.243112][ T4420] smsc95xx v2.0.0 [ 100.246915][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.246955][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.269336][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.287582][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.295511][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.325167][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.337589][ T7] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 100.352018][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.362629][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.396336][ T7] usb 2-1: USB disconnect, device number 4 [ 100.403602][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.422795][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.437287][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.461326][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.488883][ T27] audit: type=1800 audit(1785894501.155:12): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.45" name="memory_backed" dev="configfs" ino=34958 res=0 errno=0 [ 100.515510][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.523961][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.538695][ T27] audit: type=1800 audit(1785894501.175:13): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.45" name="zone_nr_conv" dev="configfs" ino=34959 res=0 errno=0 [ 100.566047][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.575091][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.587295][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.594642][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.609226][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.616416][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.626815][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.656800][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.666482][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.674583][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.682010][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.689836][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.697078][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.713833][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.734073][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.753519][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.762961][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.775765][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.785030][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.810794][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.822332][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.832436][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.887626][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.894843][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.922179][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.930667][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.942031][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.963573][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 100.993254][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 101.000719][ T4315] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0 [ 101.020278][ T4421] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.033425][ T4321] usb 4-1: USB disconnect, device number 5 [ 101.039936][ T4315] petalynx 0003:18B1:0037.0002: hidraw0: USB HID v1.11 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 101.064558][ T4545] rdma_rxe: rxe_register_device failed with error -23 [ 101.096261][ T4545] rdma_rxe: failed to add lo [ 101.131880][ T4315] usb 3-1: USB disconnect, device number 4 [ 101.252644][ T4421] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.277532][ T4421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.286088][ T4421] usb 5-1: Product: syz [ 101.303281][ T4421] usb 5-1: Manufacturer: syz [ 101.332686][ T4421] usb 5-1: SerialNumber: syz [ 101.339568][ T4549] fido_id[4549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.369965][ T4421] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.454464][ T4420] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 101.479995][ T4420] smsc95xx: probe of 1-1:1.0 failed with error -71 [ 101.497298][ T4421] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.518101][ T4420] usb 1-1: USB disconnect, device number 3 [ 101.558636][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.666984][ T4547] loop1: detected capacity change from 0 to 32768 [ 101.726817][ T4547] o2cb: This node has not been configured. [ 101.734133][ T4315] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 101.746169][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 101.767468][ T4547] o2cb: Cluster check failed. Fix errors before retrying. [ 101.771191][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.776574][ T4547] (syz.1.48,4547,1):ocfs2_dlm_init:3373 ERROR: status = -22 [ 101.790576][ T4547] (syz.1.48,4547,1):ocfs2_mount_volume:1792 ERROR: status = -22 [ 101.810417][ T4547] (syz.1.48,4547,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 101.965714][ T4315] usb 3-1: not running at top speed; connect to a high speed hub [ 101.985645][ T4315] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 102.003886][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.042528][ T4315] gspca_main: spca501-2.14.0 probing 0000:0000 [ 102.060838][ T4321] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 102.103340][ T4557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.207820][ T4557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.272547][ T4557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.457587][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.639751][ T127] usb 1-1: New USB device found, idVendor=17e9, idProduct=0000, bcdDevice= 0.00 [ 102.656634][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.709316][ T4421] usb 5-1: Service connection timeout for: 256 [ 102.716055][ T4421] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 102.760854][ T4421] ath9k_htc: Failed to initialize the device [ 102.772304][ T4421] usb 5-1: ath9k_htc: USB layer deinitialized [ 103.025814][ T4566] md/linear:md0: disk numbering problem. Aborting! [ 103.033197][ T4566] md: pers->run() failed ... [ 103.157668][ T4315] gspca_spca501: reg write: error -110 [ 103.163889][ T4315] spca501 3-1:1.0: Reg write failed for 0x01,0x16,0x11 [ 103.181452][ T4315] spca501: probe of 3-1:1.0 failed with error -22 [ 103.204718][ T4315] usb 3-1: Found UVC 1.00 device (0000:0000) [ 103.216922][ T4315] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 103.233774][ T4315] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 103.243225][ T4315] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 103.282268][ T4571] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.287929][ T27] audit: type=1800 audit(1785894503.945:14): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="attr_allow_any_host" dev="configfs" ino=34997 res=0 errno=0 [ 103.306081][ T4571] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 103.330677][ T27] audit: type=1800 audit(1785894503.945:15): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_trtype" dev="configfs" ino=34998 res=0 errno=0 [ 103.356272][ T27] audit: type=1800 audit(1785894503.955:16): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_traddr" dev="configfs" ino=34999 res=0 errno=0 [ 103.380893][ T4571] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 103.392213][ T4571] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 103.425741][ T27] audit: type=1800 audit(1785894504.045:17): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_trsvcid" dev="configfs" ino=35000 res=0 errno=0 [ 103.454884][ T27] audit: type=1800 audit(1785894504.055:18): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_adrfam" dev="configfs" ino=35001 res=0 errno=0 [ 103.734677][ T27] audit: type=1800 audit(1785894504.395:19): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="memory_backed" dev="configfs" ino=34417 res=0 errno=0 [ 103.775621][ T27] audit: type=1800 audit(1785894504.425:20): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="zone_nr_conv" dev="configfs" ino=34418 res=0 errno=0 [ 103.838378][ T7] usb 5-1: USB disconnect, device number 4 [ 103.883541][ T4421] usb 3-1: USB disconnect, device number 5 [ 103.906671][ T127] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 103.916933][ T127] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 103.951920][ T127] [drm:udl_init] *ERROR* Selecting channel failed [ 103.990879][ T127] [drm] Initialized udl 0.0.1 20120220 for 1-1:1.0 on minor 2 [ 104.007519][ T127] [drm] Initialized udl on minor 2 [ 104.023105][ T127] udl 1-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.049627][ T127] udl 1-1:1.0: [drm] Cannot find any crtc or sizes [ 104.090584][ T127] usb 1-1: USB disconnect, device number 4 [ 104.117211][ T4320] udl 1-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 104.128621][ T4320] udl 1-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 104.136959][ T4320] udl 1-1:1.0: [drm] Cannot find any crtc or sizes [ 104.257655][ T4321] lg-g15 0003:046D:C222.0003: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 104.307722][ T4321] usb 4-1: USB disconnect, device number 6 [ 104.379500][ T4588] batman_adv: batadv0: Adding interface: veth0 [ 104.385837][ T4588] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.411023][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.527639][ T4588] batman_adv: batadv0: Interface activated: veth0 [ 104.568534][ T4590] batman_adv: batadv0: Interface deactivated: veth0 [ 104.577652][ T4590] batman_adv: batadv0: Removing interface: veth0 [ 104.599459][ T4586] fido_id[4586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 104.673798][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.699449][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.737350][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.758348][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.875742][ T27] audit: type=1800 audit(1785894505.535:21): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.65" name="attr_allow_any_host" dev="configfs" ino=35047 res=0 errno=0 [ 104.897170][ T4596] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.935092][ T4596] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 104.975203][ T4580] loop1: detected capacity change from 0 to 32768 [ 104.976319][ T4596] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 105.020803][ T4596] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 105.043163][ T4580] (syz.1.57,4580,0):ocfs2_verify_heartbeat:814 ERROR: Cannot heartbeat on a locally mounted device. [ 105.087801][ T4580] (syz.1.57,4580,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 105.197461][ T4315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.392244][ T4315] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 105.413746][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.442505][ T4606] md: serialize_policy is only effective for raid1 [ 105.460030][ T4315] usb 3-1: Product: syz [ 105.464251][ T4315] usb 3-1: Manufacturer: syz [ 105.488034][ T4315] usb 3-1: SerialNumber: syz [ 105.511955][ T4315] gspca_main: spca500-2.14.0 probing 046d:0900 [ 105.959288][ T4617] PM: suspend entry (deep) [ 106.047987][ T4315] gspca_spca500: reg write: error -32 [ 106.055776][ T4315] gspca_spca500: reg write: error -32 [ 106.078775][ T4315] gspca_spca500: reg write: error -32 [ 106.100133][ T4315] gspca_spca500: reg write: error -32 [ 106.117509][ T4315] gspca_spca500: reg write: error -32 [ 106.138603][ T4315] gspca_spca500: reg write: error -32 [ 106.162722][ T4315] gspca_spca500: reg write: error -32 [ 106.181114][ T4315] gspca_spca500: reg write: error -32 [ 106.198956][ T4315] gspca_spca500: reg write: error -32 [ 106.224793][ T4315] gspca_spca500: reg write: error -32 [ 106.247596][ T4315] gspca_spca500: reg write: error -32 [ 106.253229][ T4585] loop4: detected capacity change from 0 to 65536 [ 106.264291][ T4315] gspca_spca500: reg write: error -32 [ 106.309479][ T4315] gspca_spca500: reg write: error -32 [ 106.343755][ T4315] gspca_spca500: reg write: error -32 [ 106.399582][ T4585] XFS (loop4): Mounting V5 Filesystem [ 106.571944][ T4585] XFS (loop4): Ending clean mount [ 106.688606][ T4617] Filesystems sync: 0.698 seconds [ 106.714484][ T4610] loop0: detected capacity change from 0 to 32768 [ 106.742649][ T4315] usb 3-1: USB disconnect, device number 6 [ 106.772611][ T4284] XFS (loop4): Unmounting Filesystem [ 106.787191][ T4610] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 106.792846][ T4617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.814739][ T4617] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.900244][ T4617] Bluetooth: hci0: Suspend notifier action (3) failed: -4 [ 106.916469][ T4617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.935788][ T4617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.962788][ T4617] Bluetooth: hci1: Suspend notifier action (3) failed: -4 [ 106.985609][ T4617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.034952][ T4617] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.054510][ T4617] Bluetooth: hci2: Suspend notifier action (3) failed: -4 [ 107.074642][ T4617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.084492][ T4617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.108508][ T4617] Bluetooth: hci3: Suspend notifier action (3) failed: -4 [ 107.127755][ T4617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.136860][ T4617] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.148952][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 107.148965][ T27] audit: type=1800 audit(1785894507.815:28): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="attr_allow_any_host" dev="configfs" ino=35094 res=0 errno=0 [ 107.180153][ T4639] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 107.202828][ T4617] Bluetooth: hci4: Suspend notifier action (3) failed: -4 [ 107.217669][ T27] audit: type=1800 audit(1785894507.845:29): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="addr_trtype" dev="configfs" ino=34480 res=0 errno=0 [ 107.234931][ T4639] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 107.255217][ T4617] Freezing user space processes [ 107.281518][ T27] audit: type=1800 audit(1785894507.895:30): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="addr_traddr" dev="configfs" ino=34481 res=0 errno=0 [ 107.376334][ T4617] Freezing user space processes completed (elapsed 0.105 seconds) [ 107.384918][ T4617] OOM killer disabled. [ 107.389118][ T4617] Freezing remaining freezable tasks [ 107.398818][ T4617] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 107.408902][ T4617] printk: Suspending console(s) (use no_console_suspend to debug) [ 107.508560][ T4617] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 107.550151][ T4617] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 107.588703][ T4617] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 107.628845][ T4617] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 107.668650][ T4617] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 107.708772][ T4617] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 107.749807][ T4617] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 107.799743][ T4617] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 107.838510][ T4617] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 107.878494][ T4617] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 107.928632][ T4617] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 107.978235][ T4617] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 108.019397][ T4617] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 108.058459][ T4617] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 108.098542][ T4617] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 108.171522][ T47] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 108.365404][ T4617] PM: suspend debug: Waiting for 5 second(s). [ 108.868602][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.953390][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.027536][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.107564][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.187641][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.947581][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 111.032458][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 111.117537][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 111.197575][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 111.268258][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 113.771313][ T4617] OOM killer enabled. [ 113.772071][ T4617] Restarting tasks ... done. [ 113.789761][ T4617] random: crng reseeded on system resumption [ 113.793383][ T4617] PM: suspend exit [ 113.861330][ T4280] Bluetooth: hci4: unexpected event for opcode 0x041b [ 113.914352][ T4407] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 114.071867][ T27] audit: type=1800 audit(1785894514.735:31): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name="zoned" dev="configfs" ino=34505 res=0 errno=0 [ 114.085608][ T27] audit: type=1800 audit(1785894514.745:32): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name="memory_backed" dev="configfs" ino=34506 res=0 errno=0 [ 114.101127][ T27] audit: type=1800 audit(1785894514.765:33): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name="zone_nr_conv" dev="configfs" ino=34507 res=0 errno=0 [ 114.186855][ T4749] md: array md0 already has disks! [ 114.445545][ T4749] md/linear:md0: disk numbering problem. Aborting! [ 114.446773][ T4749] md: pers->run() failed ... [ 114.487963][ T27] audit: type=1800 audit(1785894515.155:34): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="local" dev="configfs" ino=34530 res=0 errno=0 [ 114.500188][ T27] audit: type=1800 audit(1785894515.165:35): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="nodeid" dev="configfs" ino=34531 res=0 errno=0 [ 114.521414][ T4759] dlm: Using TCP for communications [ 114.526111][ T4752] md: serialize_policy is only effective for raid1 [ 114.538755][ T4321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.578219][ T4759] dlm: foo: joining the lockspace group... [ 114.720569][ T4321] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 114.722137][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.728163][ T4321] i2c-tiny-usb 2-1:1.0: version 0.00 found at bus 002 address 005 [ 115.193300][ T4321] (null): failure reading functionality [ 115.275665][ T4758] dlm: dlm user daemon left 1 lockspaces [ 115.398655][ T4321] i2c i2c-1: failure reading functionality [ 115.401533][ T4321] i2c i2c-1: connected i2c-tiny-usb device [ 115.808321][ T4761] NFSD: attempt to initialize umh client tracking in a container ignored. [ 115.809958][ T4761] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 115.811304][ T4761] NFSD: Unable to initialize client recovery tracking! (-22) [ 115.812488][ T4761] NFSD: starting 90-second grace period (net f000043f) [ 116.024065][ T4776] jffs2: notice: (4776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.036706][ T27] audit: type=1800 audit(1785894516.695:36): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="attr_allow_any_host" dev="configfs" ino=34550 res=0 errno=0 [ 116.041928][ T4780] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 116.044320][ T27] audit: type=1800 audit(1785894516.705:37): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="addr_trtype" dev="configfs" ino=34551 res=0 errno=0 [ 116.048177][ T4780] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 116.050413][ T27] audit: type=1800 audit(1785894516.705:38): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="addr_traddr" dev="configfs" ino=34552 res=0 errno=0 [ 116.054765][ T4780] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 116.056974][ T4780] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 116.058654][ T27] audit: type=1800 audit(1785894516.715:39): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="addr_trsvcid" dev="configfs" ino=34553 res=0 errno=0 [ 116.062652][ T27] audit: type=1800 audit(1785894516.715:40): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="addr_adrfam" dev="configfs" ino=34554 res=0 errno=0 [ 116.287609][ T4321] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 116.468345][ T4315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.470977][ T4321] usb 4-1: not running at top speed; connect to a high speed hub [ 116.475271][ T4321] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 116.476780][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.478395][ T4321] usb 4-1: Product: syz [ 116.479139][ T4321] usb 4-1: Manufacturer: syz [ 116.480006][ T4321] usb 4-1: SerialNumber: syz [ 116.487709][ T4420] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.651176][ T4315] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 116.652783][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.654199][ T4315] usb 1-1: Product: syz [ 116.654898][ T4315] usb 1-1: Manufacturer: syz [ 116.655665][ T4315] usb 1-1: SerialNumber: syz [ 116.671362][ T4420] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.673102][ T4420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.674470][ T4420] usb 5-1: Product: syz [ 116.675279][ T4420] usb 5-1: Manufacturer: syz [ 116.676111][ T4420] usb 5-1: SerialNumber: syz [ 116.690584][ T4420] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.719203][ T4420] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.069755][ T4315] dvbdev: DVB: registering new adapter (DEC3000-s) [ 117.084515][ T4315] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 117.273994][ T4315] usb 1-1: selecting invalid altsetting 8 [ 117.467812][ C0] usb 4-1: received EP1 urb->status = -2 [ 117.468921][ T4321] usb 4-1: unable to init card! (ret=-110) [ 117.470242][ T4321] snd-usb-caiaq: probe of 4-1:1.0 failed with error -110 [ 117.483390][ T4421] usb 1-1: USB disconnect, device number 5 [ 117.747667][ T4420] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 117.749185][ T4420] ath9k_htc: Failed to initialize the device [ 117.773883][ T4420] usb 5-1: ath9k_htc: USB layer deinitialized [ 117.926327][ T127] usb 5-1: USB disconnect, device number 5 [ 118.089347][ T4321] usb 2-1: USB disconnect, device number 5 [ 118.144283][ T4797] jffs2: notice: (4797) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.307800][ T4315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.468661][ T7] usb 4-1: USB disconnect, device number 7 [ 118.487633][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 118.490474][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.492287][ T4315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.496631][ T4315] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.501914][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.509013][ T4315] usb 1-1: config 0 descriptor?? [ 118.657440][ T4321] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.819463][ T4806] loop4: detected capacity change from 0 to 32768 [ 118.835801][ T4806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.98 (4806) [ 118.853222][ T4321] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 118.854838][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.856166][ T4321] usb 2-1: Product: syz [ 118.856941][ T4321] usb 2-1: Manufacturer: syz [ 118.858293][ T4321] usb 2-1: SerialNumber: syz [ 118.862250][ T4806] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.864174][ T4806] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 118.865757][ T4806] BTRFS info (device loop4): using free space tree [ 118.886802][ T4321] gspca_main: spca500-2.14.0 probing 046d:0900 [ 118.936005][ T4806] BTRFS info (device loop4): enabling ssd optimizations [ 118.950879][ T4806] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.397654][ T4420] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.523497][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.524843][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.526306][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.528445][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.529730][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.531113][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.534958][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.535228][ T4844] Zero length message leads to an empty skb [ 119.536363][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.539638][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.540931][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.542254][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.543477][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.544716][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.545836][ T4315] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 119.553330][ T4315] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input7 [ 119.563915][ T4315] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 119.579853][ T4420] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 1.00 [ 119.581704][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.234265][ T4834] usb 1-1: USB disconnect, device number 6 [ 120.444438][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 120.444453][ T27] audit: type=1800 audit(1785894521.105:44): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="attr_allow_any_host" dev="configfs" ino=35188 res=0 errno=0 [ 120.451099][ T4851] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.453772][ T4851] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 120.456488][ T4851] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 120.459631][ T4851] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 120.460976][ T27] audit: type=1800 audit(1785894521.115:45): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="addr_trtype" dev="configfs" ino=35189 res=0 errno=0 [ 120.464472][ T27] audit: type=1800 audit(1785894521.115:46): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="addr_traddr" dev="configfs" ino=35190 res=0 errno=0 [ 120.473723][ T27] audit: type=1800 audit(1785894521.115:47): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="addr_trsvcid" dev="configfs" ino=35191 res=0 errno=0 [ 120.477307][ T27] audit: type=1800 audit(1785894521.125:48): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="addr_adrfam" dev="configfs" ino=35192 res=0 errno=0 [ 120.851299][ T4420] usb 4-1: 1:1: cannot set freq 48000 to ep 0x81 [ 120.929313][ T4420] usb 4-1: USB disconnect, device number 8 [ 121.061577][ T4854] loop4: detected capacity change from 0 to 32768 [ 121.072120][ T4854] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.103 (4854) [ 121.103778][ T4854] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 121.105718][ T4854] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 121.107319][ T4854] BTRFS info (device loop4): using free space tree [ 121.306741][ T4854] BTRFS info (device loop4): enabling ssd optimizations [ 121.386070][ T4284] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 121.591254][ T27] audit: type=1800 audit(1785894522.255:49): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.106" name="zoned" dev="configfs" ino=35214 res=0 errno=0 [ 121.594551][ T27] audit: type=1800 audit(1785894522.255:50): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.106" name="memory_backed" dev="configfs" ino=35215 res=0 errno=0 [ 121.606580][ T27] audit: type=1800 audit(1785894522.255:51): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.106" name="zone_nr_conv" dev="configfs" ino=35216 res=0 errno=0 [ 121.730400][ T4884] i8042 kbd 00:01: in use; can't configure [ 121.741316][ T4884] i8042 aux 00:02: in use; can't configure [ 121.748502][ T4885] jffs2: notice: (4885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.081365][ T4892] PM: hibernation: hibernation entry [ 122.609637][ T27] audit: type=1800 audit(1785894523.265:52): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.113" name="attr_allow_any_host" dev="configfs" ino=35264 res=0 errno=0 [ 122.616021][ T27] audit: type=1800 audit(1785894523.275:53): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.113" name="addr_trtype" dev="configfs" ino=35265 res=0 errno=0 [ 122.623576][ T4900] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.626081][ T4900] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 122.628653][ T4900] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 122.630998][ T4900] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 122.913721][ T4892] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.924866][ T4892] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.954771][ T4892] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 122.956254][ T4892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.957839][ T4892] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.964081][ T4892] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 122.965619][ T4892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.966797][ T4892] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.991033][ T4892] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 122.992661][ T4892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.994087][ T4892] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.027298][ T4892] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 123.028875][ T4892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.030264][ T4892] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.050833][ T4892] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 123.279806][ T4892] Filesystems sync: 0.227 seconds [ 123.285998][ T4892] Freezing user space processes [ 123.305329][ T4321] usb 2-1: USB disconnect, device number 6 [ 124.227463][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.027562][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.033663][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.039778][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.046290][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.307586][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 127.107762][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 127.107781][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 127.107845][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 127.113892][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 132.790098][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796884][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.288323][ T4892] Freezing of tasks failed after 20.001 seconds (1 tasks refusing to freeze, wq_busy=0): [ 143.298504][ T4892] task:syz.2.86 state:D stack:24192 pid:4759 ppid:4281 flags:0x00004004 [ 143.308179][ T4892] Call Trace: [ 143.311475][ T4892] [ 143.314420][ T4892] __schedule+0x107f/0x4030 [ 143.319052][ T4892] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 143.325000][ T4892] ? lockdep_hardirqs_on+0x94/0x140 [ 143.330313][ T4892] ? _raw_spin_unlock+0x40/0x40 [ 143.335225][ T4892] ? __sched_text_start+0x8/0x8 [ 143.340164][ T4892] ? load_image+0x410/0x410 [ 143.344716][ T4892] ? prepare_to_wait_event+0x430/0x470 [ 143.350293][ T4892] schedule+0xb9/0x180 [ 143.354419][ T4892] do_uevent+0x1e9/0x490 [ 143.358833][ T4892] ? dlm_scand+0x220/0x220 [ 143.363352][ T4892] ? __kmem_cache_free+0xb6/0x200 [ 143.368491][ T4892] ? wake_bit_function+0x200/0x200 [ 143.373667][ T4892] ? kobject_uevent_env+0x364/0x890 [ 143.379023][ T4892] __dlm_new_lockspace+0x1d6a/0x22b0 [ 143.384387][ T4892] ? dlm_new_lockspace+0x50/0x50 [ 143.389438][ T4892] ? wake_bit_function+0x200/0x200 [ 143.394598][ T4892] ? apparmor_capable+0x12c/0x190 [ 143.399691][ T4892] ? bpf_lsm_capable+0x5/0x10 [ 143.404381][ T4892] ? security_capable+0x85/0xb0 [ 143.409335][ T4892] ? dlm_new_user_lockspace+0x20/0x40 [ 143.414771][ T4892] device_create_lockspace+0xc4/0x350 [ 143.420232][ T4892] ? device_user_deadlock+0xd0/0xd0 [ 143.425442][ T4892] ? __might_fault+0xc2/0x120 [ 143.430252][ T4892] ? _copy_from_user+0x10b/0x170 [ 143.435246][ T4892] device_write+0x893/0xea0 [ 143.439873][ T4892] ? security_file_permission+0x75/0xa0 [ 143.445464][ T4892] ? device_read+0x1480/0x1480 [ 143.450346][ T4892] vfs_write+0x2dc/0x9a0 [ 143.454658][ T4892] ? file_end_write+0x250/0x250 [ 143.459623][ T4892] ? __fget_files+0x28/0x460 [ 143.464253][ T4892] ? __fget_files+0x3fc/0x460 [ 143.469013][ T4892] ? __fdget_pos+0x1d4/0x360 [ 143.473645][ T4892] ? ksys_write+0x70/0x260 [ 143.478197][ T4892] ksys_write+0x14d/0x260 [ 143.482582][ T4892] ? __ia32_sys_read+0x80/0x80 [ 143.487454][ T4892] ? lockdep_hardirqs_on+0x94/0x140 [ 143.492720][ T4892] do_syscall_64+0x4c/0xa0 [ 143.497198][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 143.501955][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 143.506646][ T4892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.512616][ T4892] RIP: 0033:0x7fb07e79e019 [ 143.517045][ T4892] RSP: 002b:00007fb07f625028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.525547][ T4892] RAX: ffffffffffffffda RBX: 00007fb07ea25fa0 RCX: 00007fb07e79e019 [ 143.533655][ T4892] RDX: 0000000000000078 RSI: 0000200000000400 RDI: 0000000000000007 [ 143.541754][ T4892] RBP: 00007fb07e83500c R08: 0000000000000000 R09: 0000000000000000 [ 143.549814][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.557899][ T4892] R13: 00007fb07ea26038 R14: 00007fb07ea25fa0 R15: 00007ffe0662d468 [ 143.565919][ T4892] [ 143.571593][ T4892] OOM killer enabled. [ 143.575629][ T4892] Restarting tasks ... done. [ 143.612690][ T4892] PM: hibernation: hibernation exit [ 144.828204][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.837658][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.846225][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.868677][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.882409][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.890508][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.018150][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.027652][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.037049][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.044349][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.056966][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.064293][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.072581][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.081670][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.098339][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.111604][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.119704][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.126967][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.188312][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.199385][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.212574][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.223520][ T4678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.234801][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.242394][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.249981][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.286857][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.296034][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.304055][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.312060][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.323672][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.331137][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.446237][ T4678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.487581][ T4917] lo speed is unknown, defaulting to 1000 [ 145.501548][ T4919] lo speed is unknown, defaulting to 1000 [ 145.501572][ T4917] lo speed is unknown, defaulting to 1000 [ 145.510564][ T4921] lo speed is unknown, defaulting to 1000 [ 145.531345][ T4925] lo speed is unknown, defaulting to 1000 [ 145.551955][ T4678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.565182][ T4923] lo speed is unknown, defaulting to 1000 [ 145.646703][ T4678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.663435][ T4919] lo speed is unknown, defaulting to 1000 [ 145.933135][ T4921] lo speed is unknown, defaulting to 1000 [ 145.981819][ T4917] chnl_net:caif_netlink_parms(): no params data found [ 146.210922][ T4925] lo speed is unknown, defaulting to 1000 [ 146.360405][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.373011][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.382528][ T4917] device bridge_slave_0 entered promiscuous mode [ 146.406013][ T4923] lo speed is unknown, defaulting to 1000 [ 146.450096][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.457251][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.478656][ T4917] device bridge_slave_1 entered promiscuous mode [ 146.621068][ T4917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.635434][ T4917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.829202][ T4917] team0: Port device team_slave_0 added [ 146.899591][ T4917] team0: Port device team_slave_1 added [ 146.947489][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 147.013702][ T4919] chnl_net:caif_netlink_parms(): no params data found [ 147.113743][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.122813][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.152473][ T4917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.187623][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 147.194168][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 147.236283][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.257497][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.307535][ T4917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.319319][ T4921] chnl_net:caif_netlink_parms(): no params data found [ 147.347684][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 147.355094][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 147.485105][ T4917] device hsr_slave_0 entered promiscuous mode [ 147.492627][ T4917] device hsr_slave_1 entered promiscuous mode [ 147.499393][ T4917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.506995][ T4917] Cannot create hsr debugfs directory [ 147.515287][ T4923] chnl_net:caif_netlink_parms(): no params data found [ 147.581418][ T4925] chnl_net:caif_netlink_parms(): no params data found [ 147.797044][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.804597][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.828832][ T4919] device bridge_slave_0 entered promiscuous mode [ 147.863277][ T4678] device hsr_slave_0 left promiscuous mode [ 147.878852][ T4678] device hsr_slave_1 left promiscuous mode [ 147.898425][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.905930][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.933513][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.945453][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.953598][ T4678] device bridge_slave_1 left promiscuous mode [ 147.960428][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.974690][ T4678] device bridge_slave_0 left promiscuous mode [ 147.982969][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.033091][ T4678] device veth1_macvtap left promiscuous mode [ 148.047931][ T4678] device veth0_macvtap left promiscuous mode [ 148.054186][ T4678] device veth1_vlan left promiscuous mode [ 148.069159][ T4678] device veth0_vlan left promiscuous mode [ 148.920521][ T4678] team0 (unregistering): Port device team_slave_1 removed [ 148.958777][ T4678] team0 (unregistering): Port device team_slave_0 removed [ 148.994361][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.032515][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 149.040664][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.277626][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 149.283712][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 149.312640][ T4678] bond0 (unregistering): Released all slaves [ 149.416877][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.428733][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.438452][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 149.444508][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 149.466695][ T4919] device bridge_slave_1 entered promiscuous mode [ 149.494609][ T7] lo speed is unknown, defaulting to 1000 [ 149.530297][ T4921] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.545832][ T4921] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.564874][ T4921] device bridge_slave_0 entered promiscuous mode [ 149.636678][ T4921] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.643936][ T4921] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.652296][ T4921] device bridge_slave_1 entered promiscuous mode [ 149.669566][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.684484][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.714180][ T4923] device bridge_slave_0 entered promiscuous mode [ 149.730437][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.753220][ T4925] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.761214][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.770540][ T4925] device bridge_slave_0 entered promiscuous mode [ 149.780725][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.790742][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.798390][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.806642][ T4923] device bridge_slave_1 entered promiscuous mode [ 149.834599][ T4925] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.843513][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.855639][ T4925] device bridge_slave_1 entered promiscuous mode [ 149.892502][ T4921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.930334][ T4919] team0: Port device team_slave_0 added [ 149.945466][ T4921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.959768][ T4923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.979974][ T4919] team0: Port device team_slave_1 added [ 150.013218][ T4923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.024826][ T4925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.091723][ T4925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.121561][ T4921] team0: Port device team_slave_0 added [ 150.143469][ T4921] team0: Port device team_slave_1 added [ 150.175537][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.187500][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.214005][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.230766][ T4923] team0: Port device team_slave_0 added [ 150.266871][ T4917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.286511][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.298523][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.324934][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.346117][ T4923] team0: Port device team_slave_1 added [ 150.372038][ T4925] team0: Port device team_slave_0 added [ 150.388641][ T4917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.410110][ T4917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.432924][ T4921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.440957][ T4921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.467507][ T4921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.497706][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.504703][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.540852][ T4923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.558575][ T4925] team0: Port device team_slave_1 added [ 150.567886][ T4917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.581003][ T4921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.597442][ T4921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.647418][ T4921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.659971][ T4923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.666956][ T4923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.704081][ T4923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.857197][ T4925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.865190][ T4925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.892203][ T4925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.927109][ T4923] device hsr_slave_0 entered promiscuous mode [ 150.936008][ T4923] device hsr_slave_1 entered promiscuous mode [ 150.943971][ T4923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.951963][ T4923] Cannot create hsr debugfs directory [ 150.965317][ T4919] device hsr_slave_0 entered promiscuous mode [ 150.974896][ T4919] device hsr_slave_1 entered promiscuous mode [ 150.981939][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.991278][ T4919] Cannot create hsr debugfs directory [ 150.997326][ T4925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.004417][ T4925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.031377][ T4925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.047099][ T4921] device hsr_slave_0 entered promiscuous mode [ 151.054539][ T4921] device hsr_slave_1 entered promiscuous mode [ 151.061580][ T4921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.069505][ T4921] Cannot create hsr debugfs directory [ 151.108043][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 151.188672][ T4678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.324299][ T4678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.348495][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 151.354660][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 151.396564][ T4925] device hsr_slave_0 entered promiscuous mode [ 151.404267][ T4925] device hsr_slave_1 entered promiscuous mode [ 151.417654][ T4925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.425269][ T4925] Cannot create hsr debugfs directory [ 151.480917][ T4678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.507872][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 151.507880][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 151.612849][ T4678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.676264][ T4917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.784808][ T4917] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.826936][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.835930][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.902609][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.919606][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.930556][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.937722][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.975807][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.009570][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.035627][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.055377][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.062583][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.125127][ T4678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.162287][ T4921] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 152.207740][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.218747][ T4921] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 152.245741][ T4678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.263591][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.293033][ T4921] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 152.338280][ T4921] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 152.369815][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.386679][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.408665][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.418136][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.427097][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.446547][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.516896][ T4678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.542847][ T4917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.555287][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.570480][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.579202][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.597153][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.606808][ T4919] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.669789][ T4678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.695962][ T4919] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.747079][ T4919] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.770415][ T4919] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.851998][ T4923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 152.910660][ T4923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 152.936376][ T4923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 152.976297][ T4923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 153.121578][ T4925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 153.178174][ T4921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.188986][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 153.203576][ T4925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 153.218932][ T4925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 153.241812][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.250476][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.315086][ T4921] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.322665][ T4925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 153.366567][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.376611][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.428303][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 153.434404][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 153.509525][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.518866][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.527335][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.534510][ T4680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.546750][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.555672][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.564474][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.571650][ T4680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.579802][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.588159][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 153.597626][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 153.624866][ T4917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.789711][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.796693][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.805840][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.898693][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.918150][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.929031][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.936949][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.945126][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.954591][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.963670][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.972392][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.984024][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.047306][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.074542][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.092818][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.106076][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.113287][ T4679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.131255][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.140250][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.161938][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.262246][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.282927][ T4925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.297750][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.306830][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.325934][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.333184][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.442796][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.486911][ T4923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.638455][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.646597][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.669144][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.688774][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.708964][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.718272][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.727167][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.738857][ T4925] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.827772][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.836104][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.844303][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.853476][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.863073][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.882030][ T4923] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.975810][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.000454][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.029191][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.036382][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.053874][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.065086][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.083496][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.095839][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.110470][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.131992][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.149008][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.165453][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.174230][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.181458][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.214210][ T4917] device veth0_vlan entered promiscuous mode [ 155.309044][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.323690][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.336862][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.358933][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.370493][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.385351][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.392563][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.410553][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.425717][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.444864][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.452054][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.470087][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.487307][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.523942][ T4917] device veth1_vlan entered promiscuous mode [ 155.622460][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.635155][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.650121][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.660255][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.677233][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.686075][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.694116][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.730406][ T4921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.787033][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.819815][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.848818][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.859541][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.878451][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.898573][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.918269][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.934436][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.958644][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.967196][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.983590][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.001909][ T4925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.122883][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.142025][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.172656][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.193170][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.230561][ T4917] device veth0_macvtap entered promiscuous mode [ 156.304128][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.329953][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.368345][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.393041][ T4917] device veth1_macvtap entered promiscuous mode [ 156.477137][ T4923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.499421][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.520578][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.538943][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.556829][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.587661][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.595182][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.657931][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.679676][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.709559][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.747438][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.777441][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.807481][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.840649][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.908452][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.023394][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.058678][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.080236][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106446][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.137517][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.159197][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.177587][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.193870][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.208367][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.240628][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.269199][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.298516][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.317937][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.384671][ T4917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.413111][ T4917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.447828][ T4917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.456594][ T4917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.509851][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.537642][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.551278][ T4925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.623880][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.649483][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.692385][ T4921] device veth0_vlan entered promiscuous mode [ 157.716663][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.744741][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.796019][ T4921] device veth1_vlan entered promiscuous mode [ 157.906851][ T4923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.947753][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.956025][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.966325][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.974829][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.059251][ T4678] device hsr_slave_0 left promiscuous mode [ 158.075297][ T4678] device hsr_slave_1 left promiscuous mode [ 158.084967][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.100068][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.114597][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.122235][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.138254][ T4678] device bridge_slave_1 left promiscuous mode [ 158.146013][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.179341][ T4678] device bridge_slave_0 left promiscuous mode [ 158.185634][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.218006][ T4678] device hsr_slave_0 left promiscuous mode [ 158.237507][ T4678] device hsr_slave_1 left promiscuous mode [ 158.244030][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.267478][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.284850][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.298065][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.318681][ T4678] device bridge_slave_1 left promiscuous mode [ 158.324938][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.353835][ T4678] device bridge_slave_0 left promiscuous mode [ 158.363602][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.453634][ T4678] device veth1_macvtap left promiscuous mode [ 158.459825][ T4678] device veth0_macvtap left promiscuous mode [ 158.465953][ T4678] device veth1_vlan left promiscuous mode [ 158.472398][ T4678] device veth0_vlan left promiscuous mode [ 158.480345][ T4678] device veth1_macvtap left promiscuous mode [ 158.486420][ T4678] device veth0_macvtap left promiscuous mode [ 158.495496][ T4678] device veth1_vlan left promiscuous mode [ 158.501565][ T4678] device veth0_vlan left promiscuous mode [ 158.710031][ T4678] infiniband syz0: set down [ 159.106541][ T4678] team0 (unregistering): Port device team_slave_1 removed [ 159.150786][ T4678] team0 (unregistering): Port device team_slave_0 removed [ 159.192312][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.231970][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.513078][ T4678] bond0 (unregistering): Released all slaves [ 159.975789][ T4678] team0 (unregistering): Port device team_slave_1 removed [ 160.021357][ T4678] team0 (unregistering): Port device team_slave_0 removed [ 160.058432][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.097951][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.365512][ T4678] bond0 (unregistering): Released all slaves [ 160.448635][ T4677] smc: removing ib device syz0 [ 160.466046][ T4921] device veth0_macvtap entered promiscuous mode [ 160.494831][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.511503][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.521541][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.539912][ T4420] lo speed is unknown, defaulting to 1000 [ 160.551184][ T4921] device veth1_macvtap entered promiscuous mode [ 160.630838][ T4679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.657148][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.686106][ T4679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.707434][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.717316][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.767773][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.809919][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.819316][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.848737][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.877767][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.888831][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.928237][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.958633][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.987400][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.997304][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.017384][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.037218][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.072873][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.101824][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.141321][ T4921] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.168658][ T4921] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.187397][ T4921] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.196148][ T4921] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.236398][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.262391][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.282007][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.319566][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.365941][ T4919] device veth0_vlan entered promiscuous mode [ 161.391762][ T4679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.440387][ T4679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.465216][ T4919] device veth1_vlan entered promiscuous mode [ 161.488721][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.514626][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.661261][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.708474][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.760617][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.789164][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.886540][ T4919] device veth0_macvtap entered promiscuous mode [ 161.908601][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.919354][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.948455][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.988913][ T4923] device veth0_vlan entered promiscuous mode [ 162.021230][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.032081][ T4919] device veth1_macvtap entered promiscuous mode [ 162.053229][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.063332][ T4923] device veth1_vlan entered promiscuous mode [ 162.098209][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.106927][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.135466][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.155253][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.172360][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.215146][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.248362][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.368196][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.398227][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.421828][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.442110][ T4923] device veth0_macvtap entered promiscuous mode [ 162.462110][ T4734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.482135][ T4734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.494327][ T4925] device veth0_vlan entered promiscuous mode [ 162.519610][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.529605][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.538251][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.546835][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.586440][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.597239][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.614428][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.625327][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.643633][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.657133][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.669240][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.679155][ T4923] device veth1_macvtap entered promiscuous mode [ 162.701744][ T4925] device veth1_vlan entered promiscuous mode [ 162.715885][ T4832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 162.742241][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.761990][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.783484][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.793051][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.806590][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.818765][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.834541][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.845530][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.856510][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.869933][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.881881][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.911523][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.927235][ T4832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 162.948760][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.958850][ T4832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.972752][ T4919] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.997890][ T4919] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.006656][ T4919] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.017524][ T4832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 163.043026][ T4919] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.053505][ T4832] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 163.070715][ T4832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.079361][ T4832] usb 6-1: Product: syz [ 163.086569][ T4832] usb 6-1: Manufacturer: syz [ 163.091653][ T4832] usb 6-1: SerialNumber: syz [ 163.118020][ T5100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.125736][ T5100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.137154][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.165462][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.176847][ T5100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 163.193508][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.206467][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.226817][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.265363][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.288161][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.315537][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.338826][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.366587][ T4925] device veth0_macvtap entered promiscuous mode [ 163.375775][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.396469][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.415613][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.436019][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.445574][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.466938][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.485542][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.496685][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.518397][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.536732][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.554622][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.565483][ T4923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.583956][ T4923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.596026][ T4923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.599093][ T4834] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 163.632573][ T4925] device veth1_macvtap entered promiscuous mode [ 163.643698][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.659929][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.674636][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.689186][ T4923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.704775][ T4923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.714744][ T4923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.732953][ T4923] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.819327][ T4834] usb 10-1: not running at top speed; connect to a high speed hub [ 163.853407][ T4834] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 163.881491][ T4834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.894054][ T4834] usb 10-1: Product: syz [ 163.898973][ T4834] usb 10-1: Manufacturer: syz [ 163.903771][ T4834] usb 10-1: SerialNumber: syz [ 163.915869][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.935684][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.945759][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.957490][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.968002][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.978966][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.989411][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.000371][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.010699][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.021571][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.033803][ T4925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.067948][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.079877][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.103477][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.123004][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.134956][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.145603][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.162683][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.173404][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.184498][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.204668][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.217087][ T4925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.228135][ T4925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.248499][ T4925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.260151][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.282473][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.317511][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.328520][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.356518][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.368690][ T4925] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.378915][ T4925] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.388711][ T4925] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.398667][ T4925] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.421886][ T4832] redrat3 6-1:1.0: Problem fetching firmware ID [ 164.501740][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.516920][ T4832] redrat3 6-1:1.0: Failed to read timeout from hardware [ 164.518222][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.596610][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.606000][ T4673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.623670][ T4673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.671092][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.697039][ T4734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.737627][ T4734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.776548][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.826302][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.837538][ T4832] rc_core: IR keymap rc-hauppauge not found [ 164.843504][ T4832] Registered IR keymap rc-empty [ 164.868274][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.878969][ T4832] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0 [ 164.898957][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.914439][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.938804][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.953042][ T4832] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0/input8 [ 164.980430][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.989947][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 164.989960][ T27] audit: type=1800 audit(1785894565.655:57): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.117" name="zoned" dev="configfs" ino=38375 res=0 errno=0 [ 165.090898][ T4832] redrat3 6-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 165.117051][ T4832] redrat3 6-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 165.138697][ T4834] usb 10-1: 1:1: cannot set freq 48000 to ep 0x81 [ 165.155419][ T4832] redrat3 6-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 165.177949][ T27] audit: type=1800 audit(1785894565.695:58): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.117" name="memory_backed" dev="configfs" ino=38395 res=0 errno=0 [ 165.229130][ T4834] usb 10-1: USB disconnect, device number 2 [ 165.287819][ T27] audit: type=1800 audit(1785894565.705:59): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.117" name="zone_nr_conv" dev="configfs" ino=38396 res=0 errno=0 [ 165.314015][ T5127] jffs2: notice: (5127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.349997][ T4832] redrat3: probe of 6-1:1.0 failed with error -5 [ 165.376269][ T3638] ================================================================== [ 165.384385][ T3638] BUG: KASAN: use-after-free in string+0x204/0x290 [ 165.390927][ T3638] Read of size 1 at addr ffff888072842728 by task udevd/3638 [ 165.397733][ T4832] usb 6-1: USB disconnect, device number 2 [ 165.398309][ T3638] [ 165.398343][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 165.413453][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.423547][ T3638] Call Trace: [ 165.426855][ T3638] [ 165.429820][ T3638] dump_stack_lvl+0x188/0x24e [ 165.434545][ T3638] ? __lock_acquire+0x7c40/0x7c40 [ 165.439615][ T3638] ? show_regs_print_info+0x12/0x12 [ 165.444858][ T3638] ? load_image+0x410/0x410 [ 165.449399][ T3638] ? __virt_addr_valid+0x467/0x540 [ 165.454558][ T3638] ? string+0x204/0x290 [ 165.458762][ T3638] print_report+0xa8/0x210 [ 165.463223][ T3638] kasan_report+0x10b/0x140 [ 165.467806][ T3638] ? string+0x204/0x290 [ 165.471994][ T3638] string+0x204/0x290 [ 165.476018][ T3638] vsnprintf+0x10db/0x1c20 [ 165.480508][ T3638] add_uevent_var+0x1cd/0x460 [ 165.485222][ T3638] ? kobject_uevent_env+0x890/0x890 [ 165.490460][ T3638] ? trace_contention_end+0x5f/0x170 [ 165.495788][ T3638] ? __mutex_lock+0x1ab/0xae0 [ 165.500510][ T3638] rc_dev_uevent+0x15b/0x190 [ 165.505142][ T3638] dev_uevent+0x4d6/0x740 [ 165.509525][ T3638] ? dev_uevent_name+0xa0/0xa0 [ 165.514340][ T3638] uevent_show+0x1a8/0x320 [ 165.518804][ T3638] dev_attr_show+0x50/0xb0 [ 165.523273][ T3638] sysfs_kf_seq_show+0x349/0x4b0 [ 165.528258][ T3638] ? device_get_ownership+0xa0/0xa0 [ 165.533502][ T3638] seq_read_iter+0x460/0xc50 [ 165.538144][ T3638] vfs_read+0x471/0x960 [ 165.542345][ T3638] ? kernel_read+0x1e0/0x1e0 [ 165.546982][ T3638] ? __x64_sys_newfstat+0x19a/0x220 [ 165.552225][ T3638] ? do_sys_openat2+0x20a/0x4f0 [ 165.557128][ T3638] ? __fdget_pos+0x2b5/0x360 [ 165.561768][ T3638] ksys_read+0x14d/0x260 [ 165.566056][ T3638] ? vfs_write+0x9a0/0x9a0 [ 165.570523][ T3638] ? lockdep_hardirqs_on+0x94/0x140 [ 165.575771][ T3638] do_syscall_64+0x4c/0xa0 [ 165.580243][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 165.584969][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 165.589699][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.595655][ T3638] RIP: 0033:0x7f054f6a7407 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.600101][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 165.619744][ T3638] RSP: 002b:00007ffe8b708a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 165.628200][ T3638] RAX: ffffffffffffffda RBX: 00007f054fd9f880 RCX: 00007f054f6a7407 [ 165.636221][ T3638] RDX: 0000000000001000 RSI: 000055c3efa3e340 RDI: 000000000000000c [ 165.644234][ T3638] RBP: 00007f054f7efff0 R08: 0000000000000000 R09: 0000000000000000 [ 165.652250][ T3638] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 165.660261][ T3638] R13: 00007f054f7efea0 R14: 0000000000000000 R15: 000055c3efa1f7a0 [ 165.668281][ T3638] [ 165.671329][ T3638] [ 165.673691][ T3638] Allocated by task 4832: [ 165.678044][ T3638] kasan_set_track+0x4b/0x70 [ 165.682676][ T3638] __kasan_kmalloc+0x8e/0xa0 [ 165.687304][ T3638] redrat3_dev_probe+0x3ef/0x23c0 [ 165.692371][ T3638] usb_probe_interface+0x5be/0xae0 [ 165.697533][ T3638] really_probe+0x24a/0xb40 [ 165.702077][ T3638] __driver_probe_device+0x1f5/0x390 [ 165.707392][ T3638] driver_probe_device+0x4f/0x420 [ 165.712453][ T3638] __device_attach_driver+0x2c6/0x510 [ 165.717862][ T3638] bus_for_each_drv+0x184/0x210 [ 165.722751][ T3638] __device_attach+0x2a7/0x480 [ 165.727563][ T3638] bus_probe_device+0xba/0x1d0 [ 165.732369][ T3638] device_add+0xbcf/0x1050 [ 165.736820][ T3638] usb_set_configuration+0x19d5/0x2030 [ 165.742316][ T3638] usb_generic_driver_probe+0x89/0x150 [ 165.747808][ T3638] usb_probe_device+0x126/0x250 [ 165.752717][ T3638] really_probe+0x24a/0xb40 [ 165.757250][ T3638] __driver_probe_device+0x1f5/0x390 [ 165.762561][ T3638] driver_probe_device+0x4f/0x420 [ 165.767683][ T3638] __device_attach_driver+0x2c6/0x510 [ 165.773097][ T3638] bus_for_each_drv+0x184/0x210 [ 165.777980][ T3638] __device_attach+0x2a7/0x480 [ 165.782771][ T3638] bus_probe_device+0xba/0x1d0 [ 165.787563][ T3638] device_add+0xbcf/0x1050 [ 165.792031][ T3638] usb_new_device+0xa01/0x15e0 [ 165.796834][ T3638] hub_event+0x2b2f/0x5200 [ 165.801321][ T3638] process_one_work+0x8ab/0x1160 [ 165.806314][ T3638] worker_thread+0xaf5/0x12a0 [ 165.811027][ T3638] kthread+0x29d/0x330 [ 165.815119][ T3638] ret_from_fork+0x1f/0x30 [ 165.819577][ T3638] [ 165.821944][ T3638] Freed by task 4832: [ 165.825947][ T3638] kasan_set_track+0x4b/0x70 [ 165.830584][ T3638] kasan_save_free_info+0x27/0x40 [ 165.835654][ T3638] ____kasan_slab_free+0x126/0x1f0 [ 165.840814][ T3638] slab_free_freelist_hook+0x133/0x1b0 [ 165.846312][ T3638] __kmem_cache_free+0xb6/0x200 [ 165.851204][ T3638] redrat3_dev_probe+0x1b69/0x23c0 [ 165.856360][ T3638] usb_probe_interface+0x5be/0xae0 [ 165.861532][ T3638] really_probe+0x24a/0xb40 [ 165.866073][ T3638] __driver_probe_device+0x1f5/0x390 [ 165.871397][ T3638] driver_probe_device+0x4f/0x420 [ 165.876462][ T3638] __device_attach_driver+0x2c6/0x510 [ 165.881883][ T3638] bus_for_each_drv+0x184/0x210 [ 165.886766][ T3638] __device_attach+0x2a7/0x480 [ 165.891559][ T3638] bus_probe_device+0xba/0x1d0 [ 165.896365][ T3638] device_add+0xbcf/0x1050 [ 165.900819][ T3638] usb_set_configuration+0x19d5/0x2030 [ 165.906337][ T3638] usb_generic_driver_probe+0x89/0x150 [ 165.911833][ T3638] usb_probe_device+0x126/0x250 [ 165.916727][ T3638] really_probe+0x24a/0xb40 [ 165.921263][ T3638] __driver_probe_device+0x1f5/0x390 [ 165.926583][ T3638] driver_probe_device+0x4f/0x420 [ 165.931641][ T3638] __device_attach_driver+0x2c6/0x510 [ 165.937046][ T3638] bus_for_each_drv+0x184/0x210 [ 165.941936][ T3638] __device_attach+0x2a7/0x480 [ 165.946737][ T3638] bus_probe_device+0xba/0x1d0 [ 165.951533][ T3638] device_add+0xbcf/0x1050 [ 165.956021][ T3638] usb_new_device+0xa01/0x15e0 [ 165.960819][ T3638] hub_event+0x2b2f/0x5200 [ 165.965277][ T3638] process_one_work+0x8ab/0x1160 [ 165.970257][ T3638] worker_thread+0xaf5/0x12a0 [ 165.974983][ T3638] kthread+0x29d/0x330 [ 165.979081][ T3638] ret_from_fork+0x1f/0x30 [ 165.983534][ T3638] [ 165.985882][ T3638] The buggy address belongs to the object at ffff888072842000 [ 165.985882][ T3638] which belongs to the cache kmalloc-2k of size 2048 [ 165.999971][ T3638] The buggy address is located 1832 bytes inside of [ 165.999971][ T3638] 2048-byte region [ffff888072842000, ffff888072842800) [ 166.013453][ T3638] [ 166.015830][ T3638] The buggy address belongs to the physical page: [ 166.022307][ T3638] page:ffffea0001ca1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72840 [ 166.032495][ T3638] head:ffffea0001ca1000 order:3 compound_mapcount:0 compound_pincount:0 [ 166.040852][ T3638] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 166.048893][ T3638] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442000 [ 166.057506][ T3638] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 166.066111][ T3638] page dumped because: kasan: bad access detected [ 166.072554][ T3638] page_owner tracks the page as allocated [ 166.078294][ T3638] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4834, tgid 4834 (kworker/0:18), ts 154548884117, free_ts 154484553553 [ 166.101255][ T3638] post_alloc_hook+0x173/0x1a0 [ 166.106079][ T3638] get_page_from_freelist+0x206b/0x2180 [ 166.111686][ T3638] __alloc_pages+0x1ec/0x4f0 [ 166.116317][ T3638] alloc_slab_page+0x5d/0x180 [ 166.121040][ T3638] new_slab+0x87/0x2d0 [ 166.125152][ T3638] ___slab_alloc+0xbc5/0x1240 [ 166.129860][ T3638] __kmem_cache_alloc_node+0x126/0x270 [ 166.135354][ T3638] __kmalloc_node_track_caller+0xa0/0x240 [ 166.141133][ T3638] __alloc_skb+0x226/0x7d0 [ 166.145593][ T3638] mld_newpack+0x12d/0xc10 [ 166.150042][ T3638] add_grec+0x1466/0x19c0 [ 166.154411][ T3638] mld_ifc_work+0x6eb/0xab0 [ 166.158965][ T3638] process_one_work+0x8ab/0x1160 [ 166.163937][ T3638] worker_thread+0xaf5/0x12a0 [ 166.168674][ T3638] kthread+0x29d/0x330 [ 166.172775][ T3638] ret_from_fork+0x1f/0x30 [ 166.177230][ T3638] page last free stack trace: [ 166.181918][ T3638] free_unref_page_prepare+0x8e5/0x9e0 [ 166.187446][ T3638] free_unref_page+0x2e/0x3f0 [ 166.192187][ T3638] __unfreeze_partials+0x188/0x1e0 [ 166.197421][ T3638] put_cpu_partial+0x17c/0x250 [ 166.202235][ T3638] qlist_free_all+0x76/0xe0 [ 166.206771][ T3638] kasan_quarantine_reduce+0x144/0x160 [ 166.212270][ T3638] __kasan_slab_alloc+0x1e/0x80 [ 166.217161][ T3638] slab_post_alloc_hook+0x4b/0x490 [ 166.222328][ T3638] kmem_cache_alloc_node+0x1ad/0x310 [ 166.227674][ T3638] __alloc_skb+0xf9/0x7d0 [ 166.232059][ T3638] rtmsg_ifinfo_build_skb+0x80/0x190 [ 166.237395][ T3638] rtnetlink_event+0xd1/0x1a0 [ 166.242133][ T3638] raw_notifier_call_chain+0xcb/0x160 [ 166.247551][ T3638] dev_set_mac_address+0x2ed/0x400 [ 166.252723][ T3638] bond_set_mac_address+0x2c4/0x820 [ 166.257964][ T3638] dev_set_mac_address+0x27f/0x400 [ 166.263136][ T3638] [ 166.265496][ T3638] Memory state around the buggy address: [ 166.271171][ T3638] ffff888072842600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.279282][ T3638] ffff888072842680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.287379][ T3638] >ffff888072842700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.295469][ T3638] ^ [ 166.300864][ T3638] ffff888072842780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.308957][ T3638] ffff888072842800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.317048][ T3638] ================================================================== [ 166.737435][ T4881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 167.174995][ T4676] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.335445][ T3638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.342715][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 167.349689][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.359771][ T3638] Call Trace: [ 167.363077][ T3638] [ 167.366036][ T3638] dump_stack_lvl+0x188/0x24e [ 167.370757][ T3638] ? memcpy+0x3c/0x60 [ 167.374779][ T3638] ? show_regs_print_info+0x12/0x12 [ 167.380028][ T3638] ? load_image+0x410/0x410 [ 167.384569][ T3638] panic+0x2d3/0x710 [ 167.388503][ T3638] ? bpf_jit_dump+0xd0/0xd0 [ 167.393063][ T3638] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 167.399085][ T3638] ? _raw_spin_unlock+0x40/0x40 [ 167.403996][ T3638] ? print_memory_metadata+0x314/0x400 [ 167.409517][ T3638] check_panic_on_warn+0x80/0xa0 [ 167.414496][ T3638] ? string+0x204/0x290 [ 167.418688][ T3638] end_report+0x66/0x110 [ 167.422982][ T3638] kasan_report+0x118/0x140 [ 167.427528][ T3638] ? string+0x204/0x290 [ 167.431725][ T3638] string+0x204/0x290 [ 167.435743][ T3638] vsnprintf+0x10db/0x1c20 [ 167.440211][ T3638] add_uevent_var+0x1cd/0x460 [ 167.444922][ T3638] ? kobject_uevent_env+0x890/0x890 [ 167.450181][ T3638] ? trace_contention_end+0x5f/0x170 [ 167.455511][ T3638] ? __mutex_lock+0x1ab/0xae0 [ 167.460244][ T3638] rc_dev_uevent+0x15b/0x190 [ 167.464881][ T3638] dev_uevent+0x4d6/0x740 [ 167.469256][ T3638] ? dev_uevent_name+0xa0/0xa0 [ 167.474070][ T3638] uevent_show+0x1a8/0x320 [ 167.478537][ T3638] dev_attr_show+0x50/0xb0 [ 167.482997][ T3638] sysfs_kf_seq_show+0x349/0x4b0 [ 167.487984][ T3638] ? device_get_ownership+0xa0/0xa0 [ 167.493232][ T3638] seq_read_iter+0x460/0xc50 [ 167.497869][ T3638] vfs_read+0x471/0x960 [ 167.502077][ T3638] ? kernel_read+0x1e0/0x1e0 [ 167.506719][ T3638] ? __x64_sys_newfstat+0x19a/0x220 [ 167.512003][ T3638] ? do_sys_openat2+0x20a/0x4f0 [ 167.516903][ T3638] ? __fdget_pos+0x2b5/0x360 [ 167.521541][ T3638] ksys_read+0x14d/0x260 [ 167.525834][ T3638] ? vfs_write+0x9a0/0x9a0 [ 167.530300][ T3638] ? lockdep_hardirqs_on+0x94/0x140 [ 167.535554][ T3638] do_syscall_64+0x4c/0xa0 [ 167.540017][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 167.544737][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 167.549460][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.555395][ T3638] RIP: 0033:0x7f054f6a7407 [ 167.559842][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 167.579488][ T3638] RSP: 002b:00007ffe8b708a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 167.587933][ T3638] RAX: ffffffffffffffda RBX: 00007f054fd9f880 RCX: 00007f054f6a7407 [ 167.595975][ T3638] RDX: 0000000000001000 RSI: 000055c3efa3e340 RDI: 000000000000000c [ 167.604010][ T3638] RBP: 00007f054f7efff0 R08: 0000000000000000 R09: 0000000000000000 [ 167.612025][ T3638] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 167.620044][ T3638] R13: 00007f054f7efea0 R14: 0000000000000000 R15: 000055c3efa1f7a0 [ 167.628057][ T3638] [ 167.631679][ T3638] Kernel Offset: disabled [ 167.636021][ T3638] Rebooting in 86400 seconds..