last executing test programs: 2m15.603942373s ago: executing program 32 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) write(r4, &(0x7f00000004c0)="0600000000000000020000000400000000000000000000006c733100"/128, 0x80) rmdir(&(0x7f0000000600)='./config/dlm/cluster/comms/2\x00') 2m5.76924109s ago: executing program 4 (id=193): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xa, 0x1}, &(0x7f00000000c0)={0x0, 0x8, 0x1}, &(0x7f00000001c0)={0x20, 0x0, 0x4}, &(0x7f0000000200)={0x20, 0x0, 0x8, {0x0, 0x0, [0x0]}}, &(0x7f0000000240)={0x40, 0x7, 0x2}, &(0x7f0000000280)={0x40, 0x9, 0x1}, &(0x7f00000002c0)={0x40, 0xb, 0x2}, &(0x7f0000000340)={0x40, 0xf, 0x2}, &(0x7f0000000380)={0x40, 0x13, 0x6}, &(0x7f00000003c0)={0x40, 0x17, 0x6}, &(0x7f0000000440)={0x40, 0x19, 0x2}, &(0x7f0000000480)={0x40, 0x1a, 0x2}, &(0x7f00000004c0)={0x40, 0x1c, 0x1}, &(0x7f0000000500)={0x40, 0x1e, 0x1}, &(0x7f0000000540)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 2m2.976863371s ago: executing program 4 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) r2 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE64(r2, 0x40104d14, &(0x7f0000000600)={0x0, 0x2000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c10)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000800)="ffffffff01000000002d3101000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='ubi0:vol0\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x410000, 0x0) 2m2.900733812s ago: executing program 2 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) 2m2.817864924s ago: executing program 2 (id=204): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000640)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007b00bbf35fd17e5ffff", 0x32}, {0x0}, {&(0x7f0000000040)="121addcb0fcac8f6c225d9ce806347051b653139497cc79ebcf4eb765a91bb5e", 0x20}, {&(0x7f0000000840)="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", 0x188}], 0x4) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 2m2.485129273s ago: executing program 1 (id=206): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x2a0, 0x0}}], 0xffffff80, 0x0) 2m1.861174879s ago: executing program 2 (id=207): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto$inet(r0, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) 2m1.482280908s ago: executing program 2 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='readonly\n', 0x9) 2m1.39924064s ago: executing program 1 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 999999\n', 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 2m1.363297901s ago: executing program 1 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='readonly\n', 0x9) write(0xffffffffffffffff, &(0x7f00000005c0)='1024\n', 0x5) 1m54.871669444s ago: executing program 3 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 999999\n', 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 1m54.836128285s ago: executing program 3 (id=222): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r2, 0x3e8}}, 0x48) 1m54.64861304s ago: executing program 3 (id=223): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040000000000000000000010902200001010080320904000002080650000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x20, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000500)="058000321f000000544f53484942412043442d524f4d20202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000600)="55534253010000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000700)="55534253020000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000800)="0500000400808389") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000900)="55534253030000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000a00)="05830000") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000b00)="55534253040000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) (async) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000c00)="05800000") (async) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000d00)="55534253050000000000000000") (async) 1m51.802275631s ago: executing program 5 (id=226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000001300)={0x1, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000001400)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001600)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r3, 0x3e8}}, 0x48) nanosleep(&(0x7f0000001800)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001900)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) nanosleep(&(0x7f0000001a00)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000001b00)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) 1m50.989075641s ago: executing program 5 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='dummy_', 0x6) 1m50.927321833s ago: executing program 5 (id=228): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 1m50.879827364s ago: executing program 5 (id=229): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000640)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007b00bbf35fd17e5ffff", 0x32}, {0x0}, {&(0x7f0000000040)="121addcb0fcac8f6c225d9ce806347051b653139497cc79ebcf4eb765a91bb5e", 0x20}, {&(0x7f0000000840)="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", 0x188}], 0x4) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1m50.072514745s ago: executing program 2 (id=230): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000140)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000002000)=""/4096, 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000200)="0200", 0x2}, {&(0x7f0000000300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/4096, 0x1000) writev(r0, &(0x7f0000001000)=[{&(0x7f0000001100)="02fa", 0x2}, {&(0x7f0000001200)="0200", 0x2}, {&(0x7f0000001300)="0200", 0x2}], 0x3) 1m50.068177915s ago: executing program 1 (id=231): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x2a0, 0x0}}], 0xffffff80, 0x0) 1m49.997274357s ago: executing program 3 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 1m49.977868007s ago: executing program 4 (id=233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto$inet(r0, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) 1m49.938941678s ago: executing program 5 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000700)={'wlan1\x00', @ifru_flags=0x1043}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, &(0x7f0000000340)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x1, 0x0, 0x0, 0x1}}}, 0x4f) 1m49.767260532s ago: executing program 3 (id=235): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m49.396418421s ago: executing program 4 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) 1m48.963761463s ago: executing program 1 (id=237): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e80304000000000000010902190001010080fa0904000001ff00000007058102000400"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="c000400000000041010001004001f000"/70], &(0x7f0000000600)=ANY=[@ANYBLOB="80011200000012010002ff000040e8030400000000000001"], 0x0, 0x0}, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000800)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000900)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000009000/0x13000)=nil, 0x13000, 0x3, 0x11, r1, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000900)) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000a00)=0x1) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000100)) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000b00)={0x980911, 0x1}) 1m48.963635532s ago: executing program 4 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='dummy_', 0x6) 1m48.901344654s ago: executing program 4 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) nanosleep(&(0x7f0000000e00)={0x1}, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000600)={0x0, 0x2000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c10)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000800)="ffffffff01000000002d3101000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='ubi0:vol0\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x410000, 0x0) 1m48.834374436s ago: executing program 5 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='readonly\n', 0x9) 1m46.205262352s ago: executing program 3 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='1024\n', 0x5) 1m44.577777453s ago: executing program 1 (id=242): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x60600, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='raid1\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) 1m34.117721105s ago: executing program 33 (id=230): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000140)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000002000)=""/4096, 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000200)="0200", 0x2}, {&(0x7f0000000300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/4096, 0x1000) writev(r0, &(0x7f0000001000)=[{&(0x7f0000001100)="02fa", 0x2}, {&(0x7f0000001200)="0200", 0x2}, {&(0x7f0000001300)="0200", 0x2}], 0x3) 1m33.068394562s ago: executing program 34 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='readonly\n', 0x9) 1m32.993850154s ago: executing program 35 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) nanosleep(&(0x7f0000000e00)={0x1}, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000600)={0x0, 0x2000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c10)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000800)="ffffffff01000000002d3101000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='ubi0:vol0\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x410000, 0x0) 1m30.955286075s ago: executing program 36 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='1024\n', 0x5) 1m28.929887516s ago: executing program 37 (id=242): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x60600, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='raid1\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) 44.56847206s ago: executing program 9 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000340)='\x00'/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f00000003c0)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x400000, 0x0) 39.190041035s ago: executing program 9 (id=352): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100), 0x0, 0x0) 36.353416117s ago: executing program 9 (id=351): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040000000000000000000010902200001010080320904000002080650000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x20, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000500)="058000321f000000544f53484942412043442d524f4d20202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000600)="55534253010000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000700)="55534253020000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000800)="0500000400808389") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000900)="55534253030000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000a00)="05830000") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000b00)="55534253040000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) (async) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000d00)="55534253050000000000000000") (async) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) (async) 33.201532546s ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 99', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 33.158651007s ago: executing program 0 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) 30.874717414s ago: executing program 0 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/virtio_blk/parameters/poll_queues\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1\n', 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000010000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000011000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000012000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000014000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000015000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000016000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000017000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000018000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000019000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001a000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001b000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001e000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001f000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000020000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000a00)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/vda\x00', 0x4002, 0x0) preadv2(r2, &(0x7f0000000c00)=[{&(0x7f0000000d00), 0x1000}], 0x1, 0x0, 0x0, 0x2) 30.874583484s ago: executing program 9 (id=361): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100), 0x0, 0x0) 30.096885284s ago: executing program 0 (id=367): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e20, 0x0, @remote}, r2, 0x3e8}}, 0x48) 29.339066833s ago: executing program 0 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 99', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 29.283696984s ago: executing program 0 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000340)='\x00'/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f00000003c0)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x400000, 0x0) 28.730509708s ago: executing program 9 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) 28.667714649s ago: executing program 9 (id=375): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/1, 0x1) writev(r0, &(0x7f0000002000)=[{&(0x7f0000002100)="02fa", 0x2}, {&(0x7f0000002200)="0200", 0x2}, {&(0x7f0000002300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/1, 0x1) writev(r0, &(0x7f0000004000)=[{&(0x7f0000004100)="02fa", 0x2}, {&(0x7f0000004200)="0200", 0x2}, {&(0x7f0000004300)="0200", 0x2}], 0x3) 26.705410259s ago: executing program 7 (id=387): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000d00)={@local, 0x40, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000b00)={'dummy0\x00', 0x1043}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000e00)='dummy0\x00', 0x7) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e25, 0x0, @empty}, 0x1c) listen(r3, 0xa) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0x4, {0x0, &(0x7f0000000340)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0x0, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e25, 0x0, @local, 0x2}, r5, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000400)={0x4, 0x8, 0x0, {r5, 0x3e8}}, 0x10) 26.407723797s ago: executing program 7 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/virtio_blk/parameters/poll_queues\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1\n', 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000010000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000011000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000012000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000014000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000015000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000016000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000017000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000018000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000019000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001a000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001b000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001e000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001f000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000020000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000a00)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/vda\x00', 0x4002, 0x0) preadv2(r2, &(0x7f0000000c00)=[{&(0x7f0000000d00), 0x1000}], 0x1, 0x0, 0x0, 0x2) 25.832936191s ago: executing program 7 (id=381): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xec}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xec}, 0x2}, 0x18, &(0x7f0000000140)={&(0x7f0000000180)="1009000202563412", 0x8}}, 0x0) 25.766205473s ago: executing program 7 (id=382): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000640)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007b00bbf35fd17e5ffff", 0x32}, {0x0}, {&(0x7f0000000040)="121addcb0fcac8f6c225d9ce806347051b653139497cc79ebcf4eb765a91bb5e", 0x20}, {&(0x7f0000000840)="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", 0x188}], 0x4) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 24.883294184s ago: executing program 7 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 99999', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 24.823079526s ago: executing program 7 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./export\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f00000004c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='8\n', 0x2) (async) nanosleep(&(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) (async) mount$nfs4(&(0x7f0000000740)='127.0.0.1:/\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}, {'timeo=10'}, {'retrans=1'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt/testdir\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="8000"/128], &(0x7f0000000980), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='3\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="8000"/128], 0x0) 13.594470558s ago: executing program 38 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000340)='\x00'/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f00000003c0)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x400000, 0x0) 13.560073929s ago: executing program 39 (id=375): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) read(r0, &(0x7f0000001000)=""/1, 0x1) writev(r0, &(0x7f0000002000)=[{&(0x7f0000002100)="02fa", 0x2}, {&(0x7f0000002200)="0200", 0x2}, {&(0x7f0000002300)="0200", 0x2}], 0x3) read(r0, &(0x7f0000003000)=""/1, 0x1) writev(r0, &(0x7f0000004000)=[{&(0x7f0000004100)="02fa", 0x2}, {&(0x7f0000004200)="0200", 0x2}, {&(0x7f0000004300)="0200", 0x2}], 0x3) 13.306563065s ago: executing program 8 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x2c}}, 0x0) 13.178277598s ago: executing program 8 (id=394): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 9.188710589s ago: executing program 40 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./export\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f00000004c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='8\n', 0x2) (async) nanosleep(&(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) (async) mount$nfs4(&(0x7f0000000740)='127.0.0.1:/\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'port=2049'}, {'timeo=10'}, {'retrans=1'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt/testdir\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="8000"/128], &(0x7f0000000980), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='3\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="8000"/128], 0x0) 9.183268149s ago: executing program 6 (id=397): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) read(0x0, &(0x7f0000000000)=""/44, 0x28) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {}, 0x200000, 0x0, 0x0}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000200000)}, 0x200000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 9.182138609s ago: executing program 8 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) 9.131464971s ago: executing program 8 (id=399): r0 = syz_usb_connect(0x2, 0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xa1, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000700)='\x00'/16) 8.940304785s ago: executing program 6 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) r2 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE64(r2, 0x40104d14, &(0x7f0000000600)={0x0, 0x2000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c10)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000800)="ffffffff01000000002d3101000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='ubi0:vol0\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00)='ubifs\x00', 0x0, 0x0) 6.236663953s ago: executing program 8 (id=401): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0x4, {0x0, &(0x7f0000000340)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0x0, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e25, 0x0, @local, 0x2}, r1, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000400)={0x4, 0x8, 0x0, {r1, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000500)={0x6, 0x118, 0x0, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 6.201458804s ago: executing program 8 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='id_ext=0123456789abcdef,ioc_guid=0123456789abcdef,dest=127.0.0.1:3260\x00', 0x45) 1.480314092s ago: executing program 6 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="e610", 0x2}], 0x0, 0x0, 0x0, 0x0) 1.110266462s ago: executing program 6 (id=404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) 186.532965ms ago: executing program 6 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 99999', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 90.411298ms ago: executing program 2 (id=388): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae1210001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000400)='\x00\x00\x00\x00') bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="020052487f00000100"/128, 0x80) kernel console output (not intermixed with test programs): y recommended to keep mac addresses unique to avoid problems! [ 149.750908][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.761667][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.771554][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.782094][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.792017][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.802746][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.812964][ T5271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.824409][ T5271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.835760][ T5271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.843088][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.852812][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.878240][ T5271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.887209][ T5271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.897102][ T5271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.906233][ T5271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.943924][ T7] Bluetooth: hci6: command 0x0409 tx timeout [ 149.998849][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.014833][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.023746][ T5288] device bridge_slave_0 entered promiscuous mode [ 150.032464][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.040097][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.048520][ T5288] device bridge_slave_1 entered promiscuous mode [ 150.063758][ T5290] chnl_net:caif_netlink_parms(): no params data found [ 150.383554][ T4237] misc userio: Buffer overflowed, userio client isn't keeping up [ 151.143582][ T4175] Bluetooth: hci7: command 0x0409 tx timeout [ 151.149834][ T4175] Bluetooth: hci8: command 0x0409 tx timeout [ 152.025720][ T4230] Bluetooth: hci6: command 0x041b tx timeout [ 152.064630][ T4237] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 152.283570][ T4237] psmouse serio2: Failed to enable mouse on [ 153.063945][ T4232] Bluetooth: hci9: command 0x0409 tx timeout [ 153.223494][ T4232] Bluetooth: hci8: command 0x041b tx timeout [ 153.229590][ T4232] Bluetooth: hci7: command 0x041b tx timeout [ 154.104027][ T4237] Bluetooth: hci6: command 0x040f tx timeout [ 155.073738][ T4230] Bluetooth: hci4: command 0x0409 tx timeout [ 155.143559][ T4230] Bluetooth: hci9: command 0x041b tx timeout [ 155.303584][ T4175] Bluetooth: hci7: command 0x040f tx timeout [ 155.310087][ T4175] Bluetooth: hci8: command 0x040f tx timeout [ 155.383905][ T5253] block2mtd: error: cannot open device /dev/zram0 [ 155.581185][ T5288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.640215][ T5288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.737687][ T5302] lo speed is unknown, defaulting to 1000 [ 155.793110][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.800830][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.802312][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.819292][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.820416][ T5290] device bridge_slave_0 entered promiscuous mode [ 155.920189][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.933700][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.957246][ T5290] device bridge_slave_1 entered promiscuous mode [ 156.029413][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.057710][ T5309] lo speed is unknown, defaulting to 1000 [ 156.167236][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.187256][ T5288] team0: Port device team_slave_0 added [ 156.193709][ T4237] Bluetooth: hci6: command 0x0419 tx timeout [ 156.197754][ T5288] team0: Port device team_slave_1 added [ 156.219191][ T5290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.229902][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.246831][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.266554][ T5290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.286499][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.297595][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.305079][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.331524][ T5288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.374509][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.391739][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.399472][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.426151][ T5288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.504404][ T5290] team0: Port device team_slave_0 added [ 156.538916][ T5290] team0: Port device team_slave_1 added [ 156.558896][ T5288] device hsr_slave_0 entered promiscuous mode [ 156.565998][ T5288] device hsr_slave_1 entered promiscuous mode [ 156.572554][ T5288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.581102][ T5288] Cannot create hsr debugfs directory [ 156.603758][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.630620][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.637866][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.664238][ T5290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.714916][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.724929][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.751662][ T5290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.762581][ T4229] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 156.777874][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.878061][ T5290] device hsr_slave_0 entered promiscuous mode [ 156.894475][ T5290] device hsr_slave_1 entered promiscuous mode [ 156.901318][ T5290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.909066][ T5290] Cannot create hsr debugfs directory [ 156.941350][ T5302] chnl_net:caif_netlink_parms(): no params data found [ 157.076056][ T5309] chnl_net:caif_netlink_parms(): no params data found [ 157.127481][ T4229] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 157.136596][ T5288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.192448][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.214067][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 157.215249][ T5288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.224882][ T4175] Bluetooth: hci9: command 0x040f tx timeout [ 157.239575][ T5288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.244633][ T4229] usb-storage 7-1:1.0: USB Mass Storage device detected [ 157.257631][ T4229] scsi host1: usb-storage 7-1:1.0 [ 157.284603][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.292202][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.302253][ T5302] device bridge_slave_0 entered promiscuous mode [ 157.336229][ T5288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.352292][ T5302] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.360675][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.369780][ T5302] device bridge_slave_1 entered promiscuous mode [ 157.383876][ T4229] Bluetooth: hci8: command 0x0419 tx timeout [ 157.403870][ T4229] Bluetooth: hci7: command 0x0419 tx timeout [ 157.431866][ T5302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.478626][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.486276][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.495156][ T5309] device bridge_slave_0 entered promiscuous mode [ 157.505792][ T5302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.534889][ T5302] team0: Port device team_slave_0 added [ 157.559425][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.566913][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.575554][ T5309] device bridge_slave_1 entered promiscuous mode [ 157.591970][ T5302] team0: Port device team_slave_1 added [ 157.661969][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.687821][ T5290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 157.726660][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.750981][ T5290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 157.774686][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.781664][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.817789][ T5302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.860294][ T5309] team0: Port device team_slave_0 added [ 157.875828][ T5290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 157.888191][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.903596][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.931049][ T5302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.955583][ T5309] team0: Port device team_slave_1 added [ 157.968506][ T5290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 158.044254][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.053960][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.081009][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.108210][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.126623][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.152900][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.226026][ T5302] device hsr_slave_0 entered promiscuous mode [ 158.244488][ T5302] device hsr_slave_1 entered promiscuous mode [ 158.251489][ T5302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.259233][ T5302] Cannot create hsr debugfs directory [ 158.321209][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.338427][ T5309] device hsr_slave_0 entered promiscuous mode [ 158.345954][ T5309] device hsr_slave_1 entered promiscuous mode [ 158.352640][ T5309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.360963][ T5309] Cannot create hsr debugfs directory [ 158.444622][ T4213] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 158.457314][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.474093][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.519757][ T5288] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.636254][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.658112][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.677181][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.684351][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.715289][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.730788][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.740154][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.750165][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.757311][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.811186][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.835471][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.849482][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.894072][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.916187][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.004816][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.013533][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.038189][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.074833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.088076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.096253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.105861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.118561][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.127322][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.141750][ T9] device hsr_slave_0 left promiscuous mode [ 159.149401][ T9] device hsr_slave_1 left promiscuous mode [ 159.157301][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.165838][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.175387][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.182796][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.190746][ T9] device bridge_slave_1 left promiscuous mode [ 159.198354][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.214816][ T9] device bridge_slave_0 left promiscuous mode [ 159.221249][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.223442][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 159.251210][ T9] device veth1_macvtap left promiscuous mode [ 159.258055][ T9] device veth0_macvtap left promiscuous mode [ 159.265184][ T9] device veth1_vlan left promiscuous mode [ 159.271195][ T9] device veth0_vlan left promiscuous mode [ 159.303826][ T4238] Bluetooth: hci9: command 0x0419 tx timeout [ 159.468200][ T9] team0 (unregistering): Port device team_slave_1 removed [ 159.483976][ T4213] sr 1:0:0:0: [sr0] scsi-1 drive [ 159.490358][ T9] team0 (unregistering): Port device team_slave_0 removed [ 159.506072][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.522792][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.602144][ T9] bond0 (unregistering): Released all slaves [ 159.660543][ T5290] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.675951][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.706449][ T5302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 159.729751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.749810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.779110][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.786261][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.806760][ T5302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 159.817274][ T5302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 159.828349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.843019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.873886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.892120][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.899331][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.919833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.980790][ T5309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.016070][ T5302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 160.110565][ T5309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.141829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.151347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.164895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.174223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.208159][ T5309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.290913][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.304419][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.314593][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.322129][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.330644][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.346686][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.356230][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.365631][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.402689][ T5309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.419543][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.458607][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.545704][ T4238] usb 7-1: USB disconnect, device number 2 [ 160.625270][ T4213] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 160.657730][ T5302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.739334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.766528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.814806][ T5302] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.833755][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.841276][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.882607][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.924116][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.949041][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.956190][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.001790][ T5290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.032560][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.064062][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.100084][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.141866][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.149016][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.214011][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.235430][ T5309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.271709][ T5309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.303453][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 161.343902][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.362604][ T25] audit: type=1800 audit(1600000055.640:24): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.249" name="idVendor" dev="configfs" ino=38914 res=0 errno=0 [ 161.362833][ T5408] udc-core: couldn't find an available UDC or it's busy [ 161.392691][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.425605][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.454427][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.462132][ T25] audit: type=1800 audit(1600000055.650:25): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.249" name="UDC" dev="configfs" ino=38915 res=0 errno=0 [ 161.490960][ T5309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.517661][ T5309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.613438][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.622284][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.669943][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.704611][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.734267][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.742815][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.812957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.844399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.907110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.924381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.943621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.952989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.958178][ T5416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.975083][ T5288] device veth0_vlan entered promiscuous mode [ 162.027234][ T5288] device veth1_vlan entered promiscuous mode [ 162.090803][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.108678][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.129140][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.178143][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.202715][ T5290] device veth0_vlan entered promiscuous mode [ 162.234287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.248873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.267605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.286995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.299253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.310179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.327253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.348420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.368961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.389271][ T5302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.402979][ T5288] device veth0_macvtap entered promiscuous mode [ 162.437658][ T5290] device veth1_vlan entered promiscuous mode [ 162.456445][ T5288] device veth1_macvtap entered promiscuous mode [ 162.465005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.477297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.494770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.520291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.530802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.543791][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.595184][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.633466][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.654934][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.677301][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.698346][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.719682][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.749325][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.774771][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.793416][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.813501][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.836086][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.863653][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.886392][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.911736][ T5290] device veth0_macvtap entered promiscuous mode [ 162.975773][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.992038][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.009246][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.020351][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.027525][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.038258][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.047758][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.057473][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.067043][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.107154][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.143824][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.195959][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.207383][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.217650][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.229212][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.242501][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.254945][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.265318][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.276493][ T4268] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 163.284277][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.296594][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.308810][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.320666][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.330625][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.340725][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.349264][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.358907][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.367838][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.375035][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.382694][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.392984][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.401781][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.410691][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.424035][ T5290] device veth1_macvtap entered promiscuous mode [ 163.461515][ T5288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.483003][ T5288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.497113][ T5288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.506017][ T5288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.537285][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.549195][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.560134][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.572335][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.581419][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.621914][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.634703][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.647983][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.659173][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.669181][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.682042][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.691905][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.702539][ T4268] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 163.702584][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.711697][ T4268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.730061][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.740538][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.750820][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.755159][ T4268] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 163.761843][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.777918][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.790104][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.803197][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.831612][ T5302] device veth0_vlan entered promiscuous mode [ 163.851109][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.860304][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.869788][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.880202][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.888896][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.897582][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.906393][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.915107][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.929195][ T5309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.940559][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.971354][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.981174][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.000710][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.019195][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.032439][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.050524][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.060871][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.071586][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.082002][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.092743][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.102924][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.116417][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.129852][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.143240][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.154376][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.164931][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.175486][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.187314][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.199980][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.210977][ T5290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.220575][ T5290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.229543][ T5290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.240190][ T5290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.268120][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.288954][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.303779][ T4268] gspca_mr97310a: reg write [21] error -110 [ 164.307719][ T5302] device veth1_vlan entered promiscuous mode [ 164.309763][ T4268] mr97310a: probe of 7-1:1.0 failed with error -110 [ 164.446978][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.464118][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.507329][ T5302] device veth0_macvtap entered promiscuous mode [ 164.534574][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.543216][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.556491][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.592110][ T5302] device veth1_macvtap entered promiscuous mode [ 164.598365][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.609920][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.632524][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.647299][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.667752][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.686991][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.703768][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.730450][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.758128][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.764645][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.787592][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.793457][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.804926][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.815487][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.829559][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.843416][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.853250][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.876166][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.896662][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.921770][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.946867][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.967898][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.979649][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.991327][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.001272][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.012101][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.025540][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.052023][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.062919][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.072439][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.085540][ T21] usb 7-1: USB disconnect, device number 3 [ 165.111814][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.135348][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.146225][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.157350][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.167260][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.181484][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.191646][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.202615][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.212621][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.223281][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.235648][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.246412][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.256583][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.267152][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.277210][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.288301][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.306518][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.324220][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.356605][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.366136][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.377070][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.388125][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.403070][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.406549][ T5302] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.411777][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.428845][ T5302] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.437930][ T5302] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.446820][ T5302] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.477566][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.521011][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.552199][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.572989][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.587463][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.620031][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.688139][ T5309] device veth0_vlan entered promiscuous mode [ 165.737646][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.935072][ T5481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.043604][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.362488][ T5479] netlink: 'syz.7.244': attribute type 4 has an invalid length. [ 166.485632][ T5309] device veth1_vlan entered promiscuous mode [ 166.539580][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.574885][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.598354][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.634644][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.704551][ T13] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.719092][ T5309] device veth0_macvtap entered promiscuous mode [ 166.726907][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.741723][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.750790][ T13] usb 7-1: Product: syz [ 166.756643][ T13] usb 7-1: Manufacturer: syz [ 166.761405][ T13] usb 7-1: SerialNumber: syz [ 166.764552][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.766517][ T5494] UBIFS error (pid: 5494): cannot open "(null)", error -22 [ 166.814464][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.816143][ T5309] device veth1_macvtap entered promiscuous mode [ 166.843535][ T4238] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 166.852623][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.875057][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.884732][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.920147][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.009757][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.032878][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.044756][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.056330][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.066698][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.077728][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.087974][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.099107][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.109355][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.121018][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.133029][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.166331][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.176633][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.187487][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.197494][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.208136][ T4238] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 167.208173][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.218296][ T4238] usb 8-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 167.218320][ T4238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.249268][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.260197][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.260243][ T5487] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 167.287907][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.297604][ T4238] gspca_main: se401-2.14.0 probing 03e8:0004 [ 167.319015][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.326422][ T5505] udc-core: couldn't find an available UDC or it's busy [ 167.329997][ T25] audit: type=1800 audit(1600000061.620:26): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.256" name="idVendor" dev="configfs" ino=39466 res=0 errno=0 [ 167.370377][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.375615][ T25] audit: type=1800 audit(1600000061.620:27): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.256" name="UDC" dev="configfs" ino=39467 res=0 errno=0 [ 167.414259][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.454866][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.473666][ T5510] zram: Cannot change disksize for initialized device [ 167.480646][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.490827][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.501455][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.522199][ T13] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.529478][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.542510][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.554886][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.565956][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.585137][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.597493][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.608049][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.611454][ T5512] ubi: mtd1 is already attached to ubi0 [ 167.619472][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.638626][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.643802][ T5482] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 167.660514][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.677279][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.691932][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.701901][ T5309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.713621][ T4238] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 167.721516][ T5309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.733911][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.744635][ T5512] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 167.758664][ T5512] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 167.765620][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.775075][ T5512] UBIFS error (ubi0:0 pid 5512): ubifs_read_node: bad node type (255 but expected 6) [ 167.788242][ T5512] UBIFS error (ubi0:0 pid 5512): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1 [ 167.800536][ T5512] Not a node, first 24 bytes: [ 167.800559][ T5512] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........................ [ 167.819493][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.828958][ T5512] CPU: 1 PID: 5512 Comm: syz.9.246 Not tainted syzkaller #0 [ 167.831023][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.836266][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.836280][ T5512] Call Trace: [ 167.836289][ T5512] [ 167.836297][ T5512] dump_stack_lvl+0x188/0x250 [ 167.836332][ T5512] ? ubifs_dump_inode+0xb40/0xb40 [ 167.836350][ T5512] ? show_regs_print_info+0x20/0x20 [ 167.836375][ T5512] ? ubi_leb_read+0x324/0x590 [ 167.836394][ T5512] ? ubi_eba_is_mapped+0x77/0xa0 [ 167.836417][ T5512] ubifs_read_node+0x4cc/0x790 [ 167.836441][ T5512] ubifs_read_superblock+0x11d/0x4040 [ 167.857115][ T5309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.857942][ T5512] ? mark_lock+0x94/0x320 [ 167.860878][ T5309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.865534][ T5512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.865565][ T5512] ? lock_chain_count+0x20/0x20 [ 167.865583][ T5512] ? ubifs_write_sb_node+0xb0/0xb0 [ 167.865603][ T5512] ? __phys_addr+0xb6/0x170 [ 167.871929][ T5309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.875871][ T5512] ? __kasan_kmalloc_large+0x86/0xa0 [ 167.875900][ T5512] ? rcu_is_watching+0x11/0xa0 [ 167.875918][ T5512] ubifs_mount+0x26dc/0x6750 [ 167.875962][ T5512] ? inode_slab_ctor+0x20/0x20 [ 167.875978][ T5512] ? vfs_parse_fs_param+0x420/0x420 [ 167.876003][ T5512] legacy_get_tree+0xe6/0x180 [ 167.876019][ T5512] ? inode_slab_ctor+0x20/0x20 [ 167.876038][ T5512] vfs_get_tree+0x88/0x270 [ 167.876059][ T5512] do_new_mount+0x247/0xa40 [ 167.876084][ T5512] __se_sys_mount+0x2e3/0x3d0 [ 167.876108][ T5512] ? __x64_sys_mount+0xc0/0xc0 [ 167.876130][ T5512] ? __x64_sys_mount+0x1c/0xc0 [ 167.876156][ T5512] do_syscall_64+0x4c/0xa0 [ 167.876173][ T5512] ? clear_bhb_loop+0x30/0x80 [ 167.876192][ T5512] ? clear_bhb_loop+0x30/0x80 [ 167.876210][ T5512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.876229][ T5512] RIP: 0033:0x7fad0bb5d159 [ 167.876247][ T5512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.876261][ T5512] RSP: 002b:00007fad09d73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.876280][ T5512] RAX: ffffffffffffffda RBX: 00007fad0bde5180 RCX: 00007fad0bb5d159 [ 167.876293][ T5512] RDX: 0000200000000b00 RSI: 0000200000000900 RDI: 0000200000000a00 [ 167.876304][ T5512] RBP: 00007fad0bbf4024 R08: 0000000000000000 R09: 0000000000000000 [ 167.876316][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.876332][ T5512] R13: 00007fad0bde5218 R14: 00007fad0bde5180 R15: 00007ffc2bd54158 [ 167.876358][ T5512] [ 167.953698][ T4238] usb 8-1: device descriptor read/64, error -71 [ 167.967679][ T5309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.053659][ T5482] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 168.129397][ T5482] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.154959][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.184733][ T5482] usb-storage 9-1:1.0: USB Mass Storage device detected [ 168.223255][ T5482] scsi host1: usb-storage 9-1:1.0 [ 168.273534][ T4238] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 168.463628][ T4238] usb 8-1: device descriptor read/64, error -71 [ 168.733558][ T4238] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 168.824004][ T4238] usb 8-1: device descriptor read/8, error -71 [ 168.834162][ T13] usb 7-1: Service connection timeout for: 256 [ 168.840934][ T13] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 168.967389][ T4268] usb 7-1: USB disconnect, device number 4 [ 168.987166][ T13] ath9k_htc: Failed to initialize the device [ 168.993888][ T4268] usb 7-1: ath9k_htc: USB layer deinitialized [ 169.093538][ T4238] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 169.333731][ T4238] usb 8-1: device not accepting address 2, error -71 [ 169.341089][ T4238] gspca_se401: read req failed req 0x06 error -19 [ 169.351859][ T4238] usb 8-1: USB disconnect, device number 2 [ 169.403903][ T4213] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 169.553276][ T13] wiimote 0005:057E:0306.0004: item fetching failed at offset 4/5 [ 169.563219][ T13] wiimote 0005:057E:0306.0004: HID parse failed [ 169.570546][ T13] wiimote: probe of 0005:057E:0306.0004 failed with error -22 [ 170.466799][ T4213] sr 1:0:0:0: [sr0] scsi-1 drive [ 170.786404][ T5537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.391806][ T4268] usb 9-1: USB disconnect, device number 2 [ 172.484801][ T4213] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 175.623691][ T5510] block2mtd: error: cannot open device /dev/zram0 [ 175.688924][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.730997][ T5548] UBIFS error (pid: 5548): cannot open "(null)", error -22 [ 175.748810][ T5536] netlink: 'syz.6.261': attribute type 4 has an invalid length. [ 175.769878][ T25] audit: type=1800 audit(1600000070.060:28): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.265" name="idVendor" dev="configfs" ino=40246 res=0 errno=0 [ 175.770953][ T5550] udc-core: couldn't find an available UDC or it's busy [ 175.862453][ T25] audit: type=1800 audit(1600000070.060:29): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.265" name="UDC" dev="configfs" ino=40247 res=0 errno=0 [ 176.006552][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.029482][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.101951][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.130105][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.158475][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.182757][ T5482] wiimote 0005:057E:0306.0005: item fetching failed at offset 0/1 [ 176.201328][ T5482] wiimote 0005:057E:0306.0005: HID parse failed [ 176.203654][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.218650][ T5482] wiimote: probe of 0005:057E:0306.0005 failed with error -22 [ 176.243698][ T4232] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 176.293732][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.353845][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.592196][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.623836][ T4232] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 176.689892][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.793696][ T4232] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 176.813554][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.848160][ T4232] usb 7-1: Product: syz [ 176.867796][ T4232] usb 7-1: Manufacturer: syz [ 176.885452][ T4232] usb 7-1: SerialNumber: syz [ 176.955205][ T4232] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 176.969036][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.977236][ T4232] usb 7-1: setting power ON [ 177.105732][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.220272][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.256274][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.294809][ T4232] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 177.334410][ T4232] usb 7-1: media controller created [ 177.395952][ T5591] zram: Cannot change disksize for initialized device [ 177.405703][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.419908][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.613607][ T4175] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 178.104187][ T4175] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 178.122531][ T4175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.348313][ T4175] usb-storage 9-1:1.0: USB Mass Storage device detected [ 178.401479][ T4175] scsi host1: usb-storage 9-1:1.0 [ 178.601380][ T5608] netlink: 'syz.9.276': attribute type 4 has an invalid length. [ 178.729243][ T5619] UBIFS error (pid: 5619): cannot open "(null)", error -22 [ 178.776231][ T25] audit: type=1800 audit(86400.520:30): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.278" name="idVendor" dev="configfs" ino=40523 res=0 errno=0 [ 178.807254][ T5621] udc-core: couldn't find an available UDC or it's busy [ 178.877688][ T25] audit: type=1800 audit(86400.550:31): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.278" name="UDC" dev="configfs" ino=40524 res=0 errno=0 [ 179.044286][ T5631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.375413][ T4232] dvb-usb: recv bulk message failed: -71 [ 179.382290][ T4232] usb 7-1: mode switch failed (-71) [ 179.412768][ T4232] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 179.484155][ T4232] usb 7-1: setting power OFF [ 179.504089][ T4232] dvb-usb: bulk message failed: -71 (2/0) [ 179.517398][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 179.537620][ T4232] usb 7-1: setting power ON [ 179.565159][ T4232] dvb-usb: bulk message failed: -71 (2/0) [ 179.592109][ T1221] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 179.602352][ T4232] usb 7-1: analog interface selection failed (-71) [ 179.702138][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 179.722757][ T4232] dvb_usb_cxusb: probe of 7-1:1.0 failed with error -71 [ 179.745424][ T4232] usb 7-1: USB disconnect, device number 5 [ 180.143464][ T4232] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 180.463767][ T4268] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.503659][ T4232] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 180.512732][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.623609][ T1221] sr 1:0:0:0: [sr0] scsi-1 drive [ 181.083622][ T4268] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 181.113634][ T4232] net1080: probe of 7-1:1.0 failed with error -71 [ 181.123255][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.154392][ T4268] usb 1-1: Product: syz [ 181.158651][ T4268] usb 1-1: Manufacturer: syz [ 181.166499][ T4268] usb 1-1: SerialNumber: syz [ 181.220838][ T4232] usb 7-1: USB disconnect, device number 6 [ 181.245885][ T4268] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 181.261996][ T4268] usb 1-1: setting power ON [ 181.455741][ T4268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.552157][ T5703] netlink: 'syz.6.288': attribute type 4 has an invalid length. [ 181.849036][ T4238] usb 9-1: USB disconnect, device number 3 [ 182.189520][ T4268] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 182.196246][ T1221] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 182.198391][ T4268] usb 1-1: media controller created [ 182.235555][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.275466][ T4268] usb 1-1: selecting invalid altsetting 6 [ 182.281248][ T4268] usb 1-1: digital interface selection failed (-22) [ 182.328835][ T4268] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 182.413543][ T4268] usb 1-1: setting power OFF [ 182.445646][ T25] audit: type=1800 audit(1700000005.350:32): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.290" name="idVendor" dev="configfs" ino=40589 res=0 errno=0 [ 182.469677][ T5713] udc-core: couldn't find an available UDC or it's busy [ 182.488246][ T9] device hsr_slave_0 left promiscuous mode [ 182.500096][ T25] audit: type=1800 audit(1700000005.370:33): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.290" name="UDC" dev="configfs" ino=40590 res=0 errno=0 [ 182.520306][ T9] device hsr_slave_1 left promiscuous mode [ 182.533446][ T5517] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 182.564360][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.571845][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.601007][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.631128][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.658466][ T9] device bridge_slave_1 left promiscuous mode [ 182.673595][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.701982][ T9] device bridge_slave_0 left promiscuous mode [ 182.721963][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.775816][ T9] device hsr_slave_0 left promiscuous mode [ 182.799945][ T9] device hsr_slave_1 left promiscuous mode [ 182.823209][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.851564][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.871392][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.891972][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.893754][ T5517] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 182.924255][ T9] device bridge_slave_1 left promiscuous mode [ 182.927568][ T5517] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.930484][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.011062][ T9] device bridge_slave_0 left promiscuous mode [ 183.023639][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.061593][ T9] device hsr_slave_0 left promiscuous mode [ 183.092660][ T9] device hsr_slave_1 left promiscuous mode [ 183.108762][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.127032][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.142618][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.155828][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.174015][ T9] device bridge_slave_1 left promiscuous mode [ 183.180232][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.201609][ T9] device bridge_slave_0 left promiscuous mode [ 183.212433][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.249580][ T9] device hsr_slave_0 left promiscuous mode [ 183.263038][ T9] device hsr_slave_1 left promiscuous mode [ 183.272391][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.281451][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.289662][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.297303][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.313904][ T9] device bridge_slave_1 left promiscuous mode [ 183.320938][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.329860][ T9] device bridge_slave_0 left promiscuous mode [ 183.336479][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.358791][ T9] device veth1_macvtap left promiscuous mode [ 183.365007][ T9] device veth0_macvtap left promiscuous mode [ 183.371046][ T9] device veth1_vlan left promiscuous mode [ 183.378389][ T9] device veth0_vlan left promiscuous mode [ 183.388035][ T9] device veth1_macvtap left promiscuous mode [ 183.394636][ T9] device veth0_macvtap left promiscuous mode [ 183.400740][ T9] device veth1_vlan left promiscuous mode [ 183.407222][ T9] device veth0_vlan left promiscuous mode [ 183.414796][ T9] device veth1_macvtap left promiscuous mode [ 183.421226][ T9] device veth0_macvtap left promiscuous mode [ 183.427705][ T9] device veth1_vlan left promiscuous mode [ 183.433624][ T9] device veth0_vlan left promiscuous mode [ 183.440459][ T9] device veth1_macvtap left promiscuous mode [ 183.447281][ T9] device veth0_macvtap left promiscuous mode [ 183.453504][ T9] device veth1_vlan left promiscuous mode [ 183.459404][ T9] device veth0_vlan left promiscuous mode [ 183.887944][ T9] team0 (unregistering): Port device team_slave_1 removed [ 183.906408][ T9] team0 (unregistering): Port device team_slave_0 removed [ 183.920163][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.936139][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.002941][ T9] bond0 (unregistering): Released all slaves [ 184.139738][ T9] team0 (unregistering): Port device team_slave_1 removed [ 184.153414][ T9] team0 (unregistering): Port device team_slave_0 removed [ 184.167168][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.185381][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.293036][ T9] bond0 (unregistering): Released all slaves [ 184.299722][ T4268] dvb-usb: bulk message failed: -71 (2/0) [ 184.308671][ T4268] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 184.336328][ T4268] usb 1-1: setting power ON [ 184.359328][ T4268] dvb-usb: bulk message failed: -71 (2/0) [ 184.393773][ T4268] usb 1-1: analog interface selection failed (-71) [ 184.447896][ T4328] smc: removing ib device syz0 [ 184.534044][ T4268] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 184.623381][ T4268] dvb_usb_cxusb: probe of 1-1:1.0 failed with error -71 [ 184.693528][ T4268] usb 1-1: USB disconnect, device number 6 [ 184.695490][ T5749] siw: device registration error -23 [ 185.115361][ T9] team0 (unregistering): Port device team_slave_1 removed [ 185.184209][ T9] team0 (unregistering): Port device team_slave_0 removed [ 185.238105][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.326424][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.362559][ T5763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.568605][ T9] bond0 (unregistering): Released all slaves [ 185.870787][ T9] team0 (unregistering): Port device team_slave_1 removed [ 185.922547][ T9] team0 (unregistering): Port device team_slave_0 removed [ 185.974675][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.006063][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.076160][ T9] bond0 (unregistering): Released all slaves [ 186.113483][ T4175] Bluetooth: hci3: command 0x0406 tx timeout [ 186.142318][ T5517] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, c2:23:1f:0b:dc:96 [ 186.163624][ T4232] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 186.182997][ T5517] usb 7-1: USB disconnect, device number 7 [ 186.194947][ T5517] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 186.352082][ T4229] wiimote 0005:057E:0306.0006: item fetching failed at offset 0/1 [ 186.370661][ T4229] wiimote 0005:057E:0306.0006: HID parse failed [ 186.393803][ T4229] wiimote: probe of 0005:057E:0306.0006 failed with error -22 [ 186.488225][ T25] audit: type=1800 audit(1700000004.105:34): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.302" name="idVendor" dev="configfs" ino=41251 res=0 errno=0 [ 186.554885][ T5773] Need at least one configuration in g1. [ 186.561075][ T25] audit: type=1800 audit(1700000004.175:35): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.302" name="UDC" dev="configfs" ino=40645 res=0 errno=0 [ 186.634144][ T5778] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 186.792893][ T4232] usb 10-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 186.815118][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.834129][ T5773] udc dummy_udc.0: failed to start g1: -22 [ 187.125714][ T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 187.326450][ T4232] net1080: probe of 10-1:1.0 failed with error -71 [ 187.411584][ T4232] usb 10-1: USB disconnect, device number 2 [ 187.514869][ T7] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 187.532919][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.594676][ T7] usb-storage 7-1:1.0: USB Mass Storage device detected [ 187.627799][ T7] scsi host1: usb-storage 7-1:1.0 [ 188.764817][ T144] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 189.829956][ T144] sr 1:0:0:0: [sr0] scsi-1 drive [ 190.827093][ T4267] usb 7-1: USB disconnect, device number 8 [ 190.924874][ T144] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 190.946751][ T5591] block2mtd: error: cannot open device /dev/zram0 [ 191.247403][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.262576][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.271717][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.400994][ T5969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.489688][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.529933][ T25] audit: type=1800 audit(1700000002.440:36): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.314" name="idVendor" dev="configfs" ino=41403 res=0 errno=0 [ 191.542097][ T5979] Need at least one configuration in g1. [ 191.581805][ T5979] udc dummy_udc.0: failed to start g1: -22 [ 191.619665][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.662536][ T25] audit: type=1800 audit(1700000002.440:37): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.314" name="UDC" dev="configfs" ino=41404 res=0 errno=0 [ 191.671164][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.713430][ T7] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 191.822129][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.873183][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 191.957791][ T5969] dummy0 speed is unknown, defaulting to 1000 [ 192.028397][ T5995] netlink: 'syz.0.315': attribute type 4 has an invalid length. [ 192.731817][ T5998] zram: Cannot change disksize for initialized device [ 192.778156][ T6006] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.995640][ T4232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.375752][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 193.395687][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.523546][ T4229] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 193.783654][ T4232] net1080: probe of 1-1:1.0 failed with error -71 [ 193.839698][ T4232] usb 1-1: USB disconnect, device number 7 [ 194.087342][ T4229] usb 10-1: New USB device found, idVendor=045e, idProduct=028e, bcdDevice= 1.14 [ 194.103354][ T4229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.111507][ T4229] usb 10-1: Product: syz [ 194.122916][ T4229] usb 10-1: Manufacturer: syz [ 194.128255][ T4229] usb 10-1: SerialNumber: syz [ 194.198621][ T4229] input: Microsoft X-Box 360 pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input7 [ 194.266523][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273175][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452785][ T4267] usb 10-1: USB disconnect, device number 3 [ 194.463585][ C1] xpad 10-1:1.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.472162][ T4267] xpad 10-1:1.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 194.712270][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 194.720435][ T7] usb 7-1: can't read configurations, error -71 [ 195.019094][ T21] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 195.413780][ T21] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 195.432111][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.504768][ T21] usb-storage 9-1:1.0: USB Mass Storage device detected [ 195.561280][ T21] scsi host1: usb-storage 9-1:1.0 [ 195.950016][ T5998] block2mtd: error: cannot open device /dev/zram0 [ 196.103662][ T7] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 196.143111][ T6132] siw: device registration error -23 [ 196.163656][ T5517] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 196.314704][ T6142] netlink: 'syz.9.327': attribute type 4 has an invalid length. [ 196.705150][ T144] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 197.044669][ T6149] loop0: detected capacity change from 0 to 32768 [ 197.126091][ T6149] XFS (loop9): Invalid device [./dev/loop0], error=-2 [ 197.313565][ T7] usb 7-1: New USB device found, idVendor=045e, idProduct=028e, bcdDevice= 1.14 [ 197.322660][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.333156][ T7] usb 7-1: Product: syz [ 197.338415][ T7] usb 7-1: Manufacturer: syz [ 197.343029][ T7] usb 7-1: SerialNumber: syz [ 197.374683][ T5517] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 1.00 [ 197.391116][ T7] input: Microsoft X-Box 360 pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input8 [ 197.403782][ T6164] ubi: ubi0 already exists [ 197.414113][ T5517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.422163][ T5517] usb 1-1: Product: syz [ 197.441056][ T5517] usb 1-1: Manufacturer: syz [ 197.446658][ T5517] usb 1-1: SerialNumber: syz [ 197.478628][ T6169] ubi0 error: ubi_create_volume: volume 0 already exists [ 197.492195][ T6169] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 197.516697][ T6169] UBIFS error (ubi0:0 pid 6169): ubifs_read_node: bad node type (255 but expected 6) [ 197.535118][ T5599] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 197.543460][ T6169] UBIFS error (ubi0:0 pid 6169): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1 [ 197.558179][ T6169] Not a node, first 24 bytes: [ 197.558200][ T6169] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........................ [ 197.633718][ T6169] CPU: 0 PID: 6169 Comm: syz.9.334 Not tainted syzkaller #0 [ 197.641050][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.651111][ T6169] Call Trace: [ 197.654400][ T6169] [ 197.657337][ T6169] dump_stack_lvl+0x188/0x250 [ 197.662033][ T6169] ? ubifs_dump_inode+0xb40/0xb40 [ 197.667117][ T6169] ? show_regs_print_info+0x20/0x20 [ 197.672354][ T6169] ? ubi_leb_read+0x324/0x590 [ 197.677045][ T6169] ? ubi_eba_is_mapped+0x77/0xa0 [ 197.682003][ T6169] ubifs_read_node+0x4cc/0x790 [ 197.686788][ T6169] ubifs_read_superblock+0x11d/0x4040 [ 197.692185][ T6169] ? mark_lock+0x94/0x320 [ 197.696533][ T6169] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 197.702544][ T6169] ? lock_chain_count+0x20/0x20 [ 197.707412][ T6169] ? ubifs_write_sb_node+0xb0/0xb0 [ 197.712538][ T6169] ? __phys_addr+0xb6/0x170 [ 197.717053][ T6169] ? __kasan_kmalloc_large+0x86/0xa0 [ 197.722353][ T6169] ? rcu_is_watching+0x11/0xa0 [ 197.727133][ T6169] ubifs_mount+0x26dc/0x6750 [ 197.731768][ T6169] ? inode_slab_ctor+0x20/0x20 [ 197.736548][ T6169] ? vfs_parse_fs_param+0x420/0x420 [ 197.741770][ T6169] legacy_get_tree+0xe6/0x180 [ 197.746460][ T6169] ? inode_slab_ctor+0x20/0x20 [ 197.751237][ T6169] vfs_get_tree+0x88/0x270 [ 197.755669][ T6169] do_new_mount+0x247/0xa40 [ 197.760190][ T6169] __se_sys_mount+0x2e3/0x3d0 [ 197.764886][ T6169] ? __x64_sys_mount+0xc0/0xc0 [ 197.769676][ T6169] ? __x64_sys_mount+0x1c/0xc0 [ 197.774453][ T6169] do_syscall_64+0x4c/0xa0 [ 197.778882][ T6169] ? clear_bhb_loop+0x30/0x80 [ 197.783578][ T6169] ? clear_bhb_loop+0x30/0x80 [ 197.788267][ T6169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.794180][ T6169] RIP: 0033:0x7fad0bb5d159 [ 197.798600][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.803822][ T144] sr 1:0:0:0: [sr0] scsi-1 drive [ 197.818208][ T6169] RSP: 002b:00007fad09d73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.818252][ T6169] RAX: ffffffffffffffda RBX: 00007fad0bde5180 RCX: 00007fad0bb5d159 [ 197.818267][ T6169] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 197.818286][ T6169] RBP: 00007fad0bbf4024 R08: 0000000000000000 R09: 0000000000000000 [ 197.818299][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.818310][ T6169] R13: 00007fad0bde5218 R14: 00007fad0bde5180 R15: 00007ffc2bd54158 [ 197.818340][ T6169] [ 197.860385][ T4267] usb 7-1: USB disconnect, device number 11 [ 197.873426][ C0] xpad 7-1:1.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 197.873537][ C0] xpad 7-1:1.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 197.900505][ T4267] xpad 7-1:1.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 198.033780][ T5599] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 198.050982][ T5599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.523590][ T5599] net1080: probe of 8-1:1.0 failed with error -71 [ 198.538928][ T5599] usb 8-1: USB disconnect, device number 3 [ 198.771382][ T7] usb 9-1: USB disconnect, device number 4 [ 198.853588][ T144] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 199.053644][ T5599] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 199.336855][ T6242] zram: Cannot change disksize for initialized device [ 199.373608][ T5517] usbhid 1-1:1.0: can't add hid device: -71 [ 199.403923][ T5517] usbhid: probe of 1-1:1.0 failed with error -71 [ 199.441094][ T5517] usb 1-1: USB disconnect, device number 8 [ 199.453708][ T5599] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 199.487687][ T6244] nvme nvme0: failed to connect socket: -101 [ 199.506043][ T5599] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 199.542762][ T5599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.664491][ T5599] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 200.068161][ T144] usb 8-1: Unsupported hardware version: 0x3 [ 200.083416][ T144] usb 8-1: could not get hw params (-22) [ 200.091546][ T144] usb 8-1: could not probe fw (-22) [ 200.481016][ T6281] netlink: 'syz.0.341': attribute type 4 has an invalid length. [ 202.584195][ T6160] block2mtd: error: cannot open device ./dev/ram0 [ 202.672554][ T1108] usb 8-1: USB disconnect, device number 4 [ 202.909990][ T6374] siw: device registration error -23 [ 203.253395][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.504036][ T4229] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 203.613771][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 203.622857][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.694755][ T7] usb-storage 1-1:1.0: USB Mass Storage device detected [ 203.720826][ T7] scsi host1: usb-storage 1-1:1.0 [ 204.083622][ T4229] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 204.093136][ T4229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.102720][ T4229] usb 8-1: Product: syz [ 204.112992][ T4229] usb 8-1: Manufacturer: syz [ 204.118015][ T4229] usb 8-1: SerialNumber: syz [ 204.653384][ C1] usb 8-1: received EP1 urb->status = -2 [ 204.659592][ T4229] usb 8-1: unable to init card! (ret=-110) [ 204.666972][ T4229] snd-usb-caiaq: probe of 8-1:1.0 failed with error -110 [ 205.006639][ T5482] usb 1-1: USB disconnect, device number 9 [ 205.703832][ T6242] block2mtd: error: cannot open device /dev/zram0 [ 205.791542][ T4238] usb 8-1: USB disconnect, device number 5 [ 205.870048][ T5517] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 205.877178][ T5482] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.943647][ T4230] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 205.994398][ T6500] netlink: 'syz.8.353': attribute type 4 has an invalid length. [ 206.313772][ T5517] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 206.338756][ T5517] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 206.357146][ T5517] usb 7-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 206.373142][ T5517] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.435074][ T6480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 206.442165][ T6480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 206.484456][ T4230] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 206.530836][ T6515] ubi: ubi0 already exists [ 206.538048][ T4230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.588071][ T4230] usb-storage 10-1:1.0: USB Mass Storage device detected [ 206.596016][ T6516] ubi0 error: ubi_create_volume: volume 0 already exists [ 206.597672][ T4230] scsi host1: usb-storage 10-1:1.0 [ 206.606085][ T6516] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 206.628709][ T6516] UBIFS error (ubi0:0 pid 6516): ubifs_read_node: bad node type (255 but expected 6) [ 206.638934][ T6516] UBIFS error (ubi0:0 pid 6516): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1 [ 206.653184][ T6516] Not a node, first 24 bytes: [ 206.653204][ T6516] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........................ [ 206.683582][ T6516] CPU: 1 PID: 6516 Comm: syz.8.354 Not tainted syzkaller #0 [ 206.690922][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.701038][ T6516] Call Trace: [ 206.704321][ T6516] [ 206.707239][ T6516] dump_stack_lvl+0x188/0x250 [ 206.711903][ T6516] ? ubifs_dump_inode+0xb40/0xb40 [ 206.716910][ T6516] ? show_regs_print_info+0x20/0x20 [ 206.722124][ T6516] ? ubi_leb_read+0x324/0x590 [ 206.726804][ T6516] ? ubi_eba_is_mapped+0x77/0xa0 [ 206.731724][ T6516] ubifs_read_node+0x4cc/0x790 [ 206.736486][ T6516] ubifs_read_superblock+0x11d/0x4040 [ 206.741877][ T6516] ? mark_lock+0x94/0x320 [ 206.746214][ T6516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 206.752198][ T6516] ? lock_chain_count+0x20/0x20 [ 206.757031][ T6516] ? ubifs_write_sb_node+0xb0/0xb0 [ 206.762155][ T6516] ? __phys_addr+0xb6/0x170 [ 206.766657][ T6516] ? __kasan_kmalloc_large+0x86/0xa0 [ 206.771928][ T6516] ? rcu_is_watching+0x11/0xa0 [ 206.776682][ T6516] ubifs_mount+0x26dc/0x6750 [ 206.781289][ T6516] ? inode_slab_ctor+0x20/0x20 [ 206.786041][ T6516] ? vfs_parse_fs_param+0x420/0x420 [ 206.791262][ T6516] legacy_get_tree+0xe6/0x180 [ 206.795952][ T6516] ? inode_slab_ctor+0x20/0x20 [ 206.800732][ T6516] vfs_get_tree+0x88/0x270 [ 206.805159][ T6516] do_new_mount+0x247/0xa40 [ 206.809667][ T6516] __se_sys_mount+0x2e3/0x3d0 [ 206.814359][ T6516] ? __x64_sys_mount+0xc0/0xc0 [ 206.819135][ T6516] ? __x64_sys_mount+0x1c/0xc0 [ 206.823899][ T6516] do_syscall_64+0x4c/0xa0 [ 206.828324][ T6516] ? clear_bhb_loop+0x30/0x80 [ 206.832987][ T6516] ? clear_bhb_loop+0x30/0x80 [ 206.837674][ T6516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.843552][ T6516] RIP: 0033:0x7fd70b848159 [ 206.847949][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.867538][ T6516] RSP: 002b:00007fd709a5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.875945][ T6516] RAX: ffffffffffffffda RBX: 00007fd70bad0180 RCX: 00007fd70b848159 [ 206.883930][ T6516] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 206.891923][ T6516] RBP: 00007fd70b8df024 R08: 0000000000000000 R09: 0000000000000000 [ 206.899905][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.907887][ T6516] R13: 00007fd70bad0218 R14: 00007fd70bad0180 R15: 00007ffc83d191c8 [ 206.915890][ T6516] [ 207.103791][ T5482] usb 1-1: New USB device found, idVendor=045e, idProduct=028e, bcdDevice= 1.14 [ 207.112863][ T5482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.128427][ T5482] usb 1-1: Product: syz [ 207.132631][ T5482] usb 1-1: Manufacturer: syz [ 207.137402][ T5482] usb 1-1: SerialNumber: syz [ 207.200500][ T5482] input: Microsoft X-Box 360 pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 207.460490][ T5482] usb 1-1: USB disconnect, device number 10 [ 207.467011][ C1] xpad 1-1:1.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.476845][ T5482] xpad 1-1:1.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 207.723753][ T4329] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 207.938851][ T5517] usb 7-1: USB disconnect, device number 12 [ 208.733435][ T4230] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 208.773621][ T4329] sr 1:0:0:0: [sr0] scsi-1 drive [ 209.103533][ T4230] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.113538][ T4230] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.123387][ T4230] usb 8-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 209.132434][ T4230] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.165523][ T6549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.172755][ T6549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.785651][ T4238] usb 10-1: USB disconnect, device number 4 [ 209.884283][ T4329] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 210.404117][ T4230] usb 8-1: USB disconnect, device number 6 [ 210.983508][ T6513] block2mtd: error: cannot open device ./dev/ram0 [ 211.052840][ T6597] siw: device registration error -23 [ 211.120705][ T6592] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 211.139214][ T6592] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 211.189774][ T6592] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 211.229889][ T6592] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 211.239668][ T6592] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 211.248760][ T6592] netlink: 'syz.0.360': attribute type 4 has an invalid length. [ 211.880400][ T6628] netlink: 'syz.6.365': attribute type 4 has an invalid length. [ 212.673859][ T6642] ubi: ubi0 already exists [ 212.730715][ T6645] ubi0 error: ubi_create_volume: volume 0 already exists [ 212.753408][ T6645] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 212.778492][ T6645] UBIFS error (ubi0:0 pid 6645): ubifs_read_node: bad node type (255 but expected 6) [ 212.795145][ T6645] UBIFS error (ubi0:0 pid 6645): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1 [ 212.833373][ T6645] Not a node, first 24 bytes: [ 212.839688][ T6645] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........................ [ 212.899442][ T6645] CPU: 1 PID: 6645 Comm: syz.0.372 Not tainted syzkaller #0 [ 212.906777][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.916934][ T6645] Call Trace: [ 212.920228][ T6645] [ 212.923157][ T6645] dump_stack_lvl+0x188/0x250 [ 212.927853][ T6645] ? ubifs_dump_inode+0xb40/0xb40 [ 212.932880][ T6645] ? show_regs_print_info+0x20/0x20 [ 212.938086][ T6645] ? ubi_leb_read+0x324/0x590 [ 212.942767][ T6645] ? ubi_eba_is_mapped+0x77/0xa0 [ 212.947714][ T6645] ubifs_read_node+0x4cc/0x790 [ 212.952492][ T6645] ubifs_read_superblock+0x11d/0x4040 [ 212.953419][ T4267] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 212.957879][ T6645] ? mark_lock+0x94/0x320 [ 212.957905][ T6645] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 212.957929][ T6645] ? lock_chain_count+0x20/0x20 [ 212.980521][ T6645] ? ubifs_write_sb_node+0xb0/0xb0 [ 212.985646][ T6645] ? __phys_addr+0xb6/0x170 [ 212.990153][ T6645] ? __kasan_kmalloc_large+0x86/0xa0 [ 212.995457][ T6645] ? rcu_is_watching+0x11/0xa0 [ 213.000239][ T6645] ubifs_mount+0x26dc/0x6750 [ 213.004875][ T6645] ? inode_slab_ctor+0x20/0x20 [ 213.009657][ T6645] ? vfs_parse_fs_param+0x420/0x420 [ 213.014895][ T6645] legacy_get_tree+0xe6/0x180 [ 213.019584][ T6645] ? inode_slab_ctor+0x20/0x20 [ 213.024365][ T6645] vfs_get_tree+0x88/0x270 [ 213.028795][ T6645] do_new_mount+0x247/0xa40 [ 213.033335][ T6645] __se_sys_mount+0x2e3/0x3d0 [ 213.038026][ T6645] ? __x64_sys_mount+0xc0/0xc0 [ 213.042805][ T6645] ? __x64_sys_mount+0x1c/0xc0 [ 213.047576][ T6645] do_syscall_64+0x4c/0xa0 [ 213.052000][ T6645] ? clear_bhb_loop+0x30/0x80 [ 213.056682][ T6645] ? clear_bhb_loop+0x30/0x80 [ 213.061371][ T6645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.067272][ T6645] RIP: 0033:0x7f33a3311159 [ 213.071691][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.091307][ T6645] RSP: 002b:00007f33a1527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.099742][ T6645] RAX: ffffffffffffffda RBX: 00007f33a3599180 RCX: 00007f33a3311159 [ 213.107730][ T6645] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 00002000000004c0 [ 213.115718][ T6645] RBP: 00007f33a33a8024 R08: 0000000000000000 R09: 0000000000000000 [ 213.123706][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.131689][ T6645] R13: 00007f33a3599218 R14: 00007f33a3599180 R15: 00007ffe0ed367d8 [ 213.139706][ T6645] [ 213.343609][ T4267] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 213.353901][ T4267] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 213.365501][ T4267] usb 9-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 213.375745][ T4267] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.403693][ T6643] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 213.411255][ T6643] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 213.503501][ T4238] psmouse serio3: Failed to reset mouse on : -5 [ 214.251824][ T6698] siw: device registration error -23 [ 214.657944][ T4267] usb 9-1: USB disconnect, device number 5 [ 215.182856][ T6701] siw: device registration error -23 [ 215.502144][ T6706] netlink: 'syz.7.378': attribute type 2 has an invalid length. [ 215.511419][ T6706] netlink: 'syz.7.378': attribute type 2 has an invalid length. [ 215.520732][ T6706] netlink: 'syz.7.378': attribute type 2 has an invalid length. [ 216.295718][ T6720] validate_nla: 3 callbacks suppressed [ 216.295755][ T6720] netlink: 'syz.7.382': attribute type 4 has an invalid length. [ 216.483725][ T4238] misc userio: Buffer overflowed, userio client isn't keeping up [ 217.283455][ T5517] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 217.653606][ T5517] usb 7-1: not running at top speed; connect to a high speed hub [ 217.763632][ T5517] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 217.774823][ T5517] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 217.784832][ T5517] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.845558][ T5517] usb 7-1: Found UVC 1.00 device (0000:0000) [ 218.048676][ T6712] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 219.293616][ T5517] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 219.323705][ T5517] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 219.332597][ T5517] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 219.341316][ T5517] gspca_main: spca501-2.14.0 probing 0000:0000 [ 219.373513][ T5517] gspca_spca501: reg write: error -71 [ 219.385429][ T5517] spca501 7-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 219.392486][ T5517] spca501: probe of 7-1:1.0 failed with error -22 [ 219.408565][ T5517] usb 7-1: USB disconnect, device number 13 [ 220.133497][ T4238] misc userio: Buffer overflowed, userio client isn't keeping up [ 223.704106][ T4238] misc userio: Buffer overflowed, userio client isn't keeping up [ 227.313463][ T4238] misc userio: Buffer overflowed, userio client isn't keeping up [ 228.306879][ T7175] siw: device registration error -23 [ 228.551951][ T7181] dummy0 speed is unknown, defaulting to 1000 [ 228.576867][ T7183] dummy0 speed is unknown, defaulting to 1000 [ 228.721420][ T7188] netlink: 'syz.6.393': attribute type 2 has an invalid length. [ 228.730768][ T7188] netlink: 'syz.6.393': attribute type 2 has an invalid length. [ 228.758443][ T7188] netlink: 'syz.6.393': attribute type 2 has an invalid length. [ 228.800418][ T7188] netlink: 'syz.6.393': attribute type 2 has an invalid length. [ 228.843797][ T7188] netlink: 'syz.6.393': attribute type 2 has an invalid length. [ 228.863828][ T7188] netlink: 'syz.6.393': attribute type 4 has an invalid length. [ 228.877184][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 229.036348][ T7181] chnl_net:caif_netlink_parms(): no params data found [ 229.689125][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.696522][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.705405][ T7183] device bridge_slave_0 entered promiscuous mode [ 229.713212][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.720647][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.730700][ T7181] device bridge_slave_0 entered promiscuous mode [ 229.738304][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.750485][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.759591][ T7183] device bridge_slave_1 entered promiscuous mode [ 229.769834][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.777059][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.785346][ T7181] device bridge_slave_1 entered promiscuous mode [ 229.817187][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.828656][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.840709][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.862617][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.888687][ T7181] team0: Port device team_slave_0 added [ 229.898741][ T7181] team0: Port device team_slave_1 added [ 229.917282][ T7183] team0: Port device team_slave_0 added [ 229.929793][ T7183] team0: Port device team_slave_1 added [ 229.936080][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.943031][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.969370][ T7181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.988105][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.995262][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.021345][ T7181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.051487][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.058687][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.084974][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.098608][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.109024][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.135438][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.162659][ T7181] device hsr_slave_0 entered promiscuous mode [ 230.169663][ T7181] device hsr_slave_1 entered promiscuous mode [ 230.177217][ T7181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.184859][ T7181] Cannot create hsr debugfs directory [ 230.218642][ T7183] device hsr_slave_0 entered promiscuous mode [ 230.225338][ T7183] device hsr_slave_1 entered promiscuous mode [ 230.231864][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.239656][ T7183] Cannot create hsr debugfs directory [ 230.583780][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 230.583965][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 231.158479][ T7181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.179032][ T7181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.195383][ T7181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.206882][ T7183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.217442][ T7181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.229023][ T7183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.247427][ T7183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.266117][ T7183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.360806][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.395626][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.407523][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.420563][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.438503][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.451638][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.469065][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.478020][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.485162][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.518335][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.527839][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.538881][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.551626][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.558829][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.575330][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.590818][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.601068][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.606843][ T4238] misc userio: Buffer overflowed, userio client isn't keeping up [ 231.620715][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.645023][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.665187][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.685855][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.702401][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.725371][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.746383][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.785588][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.797629][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.807193][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.814324][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.822370][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.831183][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.839641][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.849133][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.858788][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.876736][ T7181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.895003][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.912415][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.921231][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.928384][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.947649][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.973553][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.017760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.030250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.049128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.062849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.079200][ T7183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.101255][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.123955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.132848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.156794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.172458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.191394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.224476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.244631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.252461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.277099][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.334911][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.355382][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.399322][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.418363][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.434826][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.442738][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.465768][ T7181] device veth0_vlan entered promiscuous mode [ 232.504820][ T7181] device veth1_vlan entered promiscuous mode [ 232.529170][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.548688][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.561307][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.596951][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.609427][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.621872][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.640150][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.655210][ T7181] device veth0_macvtap entered promiscuous mode [ 232.665797][ T5482] Bluetooth: hci1: command 0x041b tx timeout [ 232.683412][ T5482] Bluetooth: hci0: command 0x041b tx timeout [ 232.716783][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.749143][ T7181] device veth1_macvtap entered promiscuous mode [ 232.815638][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.842000][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.872939][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.913016][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.924468][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.936365][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.948338][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.958902][ T7309] zram: Cannot change disksize for initialized device [ 232.967652][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.981104][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.992280][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.002561][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.013346][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.026390][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.048358][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.060014][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.070548][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.073457][ T5517] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 233.091226][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.101190][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.102141][ T7313] ubi: mtd1 is already attached to ubi0 [ 233.111952][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.127712][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.138230][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.148218][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.158743][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.169914][ T7181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.180426][ T7181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.191400][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.200254][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.222122][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.230385][ T7312] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 233.230452][ T7312] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 233.238431][ T7312] UBIFS error (ubi0:0 pid 7312): ubifs_read_node: bad node type (255 but expected 6) [ 233.248799][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.265625][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.283588][ T7312] UBIFS error (ubi0:0 pid 7312): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1 [ 233.298650][ T7181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.308995][ T7312] Not a node, first 24 bytes: [ 233.309017][ T7312] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ........................ [ 233.319968][ T7181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.332269][ T4238] input: PS/2 Generic Mouse as /devices/serio3/input/input11 [ 233.344968][ T7181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.346728][ T7312] CPU: 1 PID: 7312 Comm: syz.6.400 Not tainted syzkaller #0 [ 233.360905][ T7181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.360940][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.379655][ T7312] Call Trace: [ 233.382942][ T7312] [ 233.385869][ T7312] dump_stack_lvl+0x188/0x250 [ 233.390558][ T7312] ? ubifs_dump_inode+0xb40/0xb40 [ 233.395575][ T7312] ? show_regs_print_info+0x20/0x20 [ 233.400777][ T7312] ? ubi_leb_read+0x324/0x590 [ 233.405449][ T7312] ? ubi_eba_is_mapped+0x77/0xa0 [ 233.410397][ T7312] ubifs_read_node+0x4cc/0x790 [ 233.415167][ T7312] ubifs_read_superblock+0x11d/0x4040 [ 233.420551][ T7312] ? mark_lock+0x94/0x320 [ 233.423617][ T5517] usb 9-1: not running at top speed; connect to a high speed hub [ 233.424874][ T7312] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.424904][ T7312] ? lock_chain_count+0x20/0x20 [ 233.424926][ T7312] ? ubifs_write_sb_node+0xb0/0xb0 [ 233.448513][ T7312] ? __phys_addr+0xb6/0x170 [ 233.453014][ T7312] ? __kasan_kmalloc_large+0x86/0xa0 [ 233.458312][ T7312] ? rcu_is_watching+0x11/0xa0 [ 233.463083][ T7312] ubifs_mount+0x26dc/0x6750 [ 233.467719][ T7312] ? inode_slab_ctor+0x20/0x20 [ 233.472483][ T7312] ? vfs_parse_fs_param+0x420/0x420 [ 233.477681][ T7312] legacy_get_tree+0xe6/0x180 [ 233.482373][ T7312] ? inode_slab_ctor+0x20/0x20 [ 233.487145][ T7312] vfs_get_tree+0x88/0x270 [ 233.491571][ T7312] do_new_mount+0x247/0xa40 [ 233.496092][ T7312] __se_sys_mount+0x2e3/0x3d0 [ 233.500785][ T7312] ? __x64_sys_mount+0xc0/0xc0 [ 233.505552][ T7312] ? __x64_sys_mount+0x1c/0xc0 [ 233.510303][ T7312] do_syscall_64+0x4c/0xa0 [ 233.513608][ T5517] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 233.514707][ T7312] ? clear_bhb_loop+0x30/0x80 [ 233.514730][ T7312] ? clear_bhb_loop+0x30/0x80 [ 233.514749][ T7312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.532605][ T5517] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 233.534844][ T7312] RIP: 0033:0x7f24c053b159 [ 233.534866][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.534879][ T7312] RSP: 002b:00007f24be772028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.534899][ T7312] RAX: ffffffffffffffda RBX: 00007f24c07c3090 RCX: 00007f24c053b159 [ 233.534913][ T7312] RDX: 0000200000000b00 RSI: 0000200000000900 RDI: 0000200000000a00 [ 233.534925][ T7312] RBP: 00007f24c05d2024 R08: 0000000000000000 R09: 0000000000000000 [ 233.534936][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.534946][ T7312] R13: 00007f24c07c3128 R14: 00007f24c07c3090 R15: 00007ffe2794bf98 [ 233.534971][ T7312] [ 233.551578][ T5517] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.563501][ T4238] psmouse serio3: Failed to enable mouse on [ 233.625708][ T5517] usb 9-1: Found UVC 1.00 device (0000:0000) [ 233.834720][ T7305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.743480][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 234.749543][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 235.063630][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 235.083534][ T5517] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 235.103536][ T5517] uvcvideo 9-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 235.112390][ T5517] uvcvideo 9-1:1.1: Failed to initialize the device (-5). [ 235.120216][ T5517] gspca_main: spca501-2.14.0 probing 0000:0000 [ 235.143569][ T5517] gspca_spca501: reg write: error -71 [ 235.148997][ T5517] spca501 9-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 235.156009][ T5517] spca501: probe of 9-1:1.0 failed with error -22 [ 235.168269][ T5517] usb 9-1: USB disconnect, device number 6 [ 236.823695][ T5517] Bluetooth: hci0: command 0x0419 tx timeout [ 236.823959][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 237.145010][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 237.223457][ T6639] block2mtd: error: cannot open device ./dev/ram0 [ 239.233564][ T5517] Bluetooth: hci2: command 0x040f tx timeout [ 240.366166][ T7309] block2mtd: error: cannot open device /dev/zram0 [ 240.374817][ T7310] dummy0 speed is unknown, defaulting to 1000 [ 240.459895][ T7334] lo speed is unknown, defaulting to 1000 [ 240.507854][ T7334] lo speed is unknown, defaulting to 1000 [ 240.514614][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.540176][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.573228][ T7334] lo speed is unknown, defaulting to 1000 [ 240.580321][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.605037][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.625106][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.664280][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.672668][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.739689][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.784188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.847688][ T7334] infiniband syz0: set down [ 240.858931][ T7334] infiniband syz0: added lo [ 240.869590][ T7183] device veth0_vlan entered promiscuous mode [ 240.932019][ T7334] infiniband syz0: Couldn't open port 1 [ 240.934957][ T7183] device veth1_vlan entered promiscuous mode [ 240.962014][ T4230] lo speed is unknown, defaulting to 1000 [ 240.989819][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.200997][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.274489][ T7334] RDS/IB: syz0: added [ 241.304468][ T7334] smc: adding ib device syz0 with port count 1 [ 241.336562][ T7334] smc: ib device syz0 port 1 has pnetid [ 241.590921][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 241.642793][ T4213] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.680152][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.690041][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.702407][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.712745][ T4175] lo speed is unknown, defaulting to 1000 [ 241.779119][ T7334] lo speed is unknown, defaulting to 1000 [ 241.832998][ T7183] device veth0_macvtap entered promiscuous mode [ 241.920837][ T4213] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.954780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.973192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.991872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.011105][ T4213] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.055665][ T7183] device veth1_macvtap entered promiscuous mode [ 242.110516][ T4213] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.137250][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.157952][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.168267][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.179418][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.193367][ T4175] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.211243][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.231383][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.242780][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.265493][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.288508][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.302900][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.321315][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.348516][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.380838][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.406833][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.428197][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.460043][ T7334] lo speed is unknown, defaulting to 1000 [ 242.463246][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 242.493709][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.508497][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.518859][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.539822][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.560256][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.582507][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.596012][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.607215][ T4175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 242.617356][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.629091][ T4175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 242.639606][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.650509][ T4175] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 242.659913][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.670374][ T4175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.679915][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.702998][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.713692][ T7369] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.715740][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.720753][ T7369] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.739023][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.751465][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.760028][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.784777][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.796675][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.806265][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.816537][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.836682][ T7334] lo speed is unknown, defaulting to 1000 [ 242.849529][ T7183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.871399][ T7183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.901246][ T7183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.921165][ T7183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.022267][ T7334] lo speed is unknown, defaulting to 1000 [ 243.156282][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.171206][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.182520][ T7310] device bridge_slave_0 entered promiscuous mode [ 243.193033][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.200255][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.209037][ T7310] device bridge_slave_1 entered promiscuous mode [ 243.231900][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.250711][ T7334] lo speed is unknown, defaulting to 1000 [ 243.280936][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.395016][ T7310] team0: Port device team_slave_0 added [ 243.406594][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.430055][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.448286][ T7310] team0: Port device team_slave_1 added [ 243.466052][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.527945][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.544621][ T27] INFO: task syz.0.118:4770 blocked for more than 143 seconds. [ 243.547473][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.556057][ T27] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.582284][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.604059][ T27] task:syz.0.118 state:D stack:25504 pid: 4770 ppid: 4188 flags:0x00004004 [ 243.654624][ T27] Call Trace: [ 243.666576][ T27] [ 243.697577][ T27] __schedule+0x11c3/0x4350 [ 243.702146][ T27] ? preempt_schedule+0xbc/0xd0 [ 243.723546][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 243.729770][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 243.743436][ T27] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 243.761972][ T27] ? release_firmware_map_entry+0x190/0x190 [ 243.768316][ T27] ? __might_sleep+0xf0/0xf0 [ 243.772920][ T27] ? load_image+0x410/0x410 [ 243.788784][ T27] schedule+0x11b/0x1e0 [ 243.793000][ T27] do_uevent+0x1df/0x480 [ 243.807721][ T27] ? kobject_uevent_env+0x36c/0x890 [ 243.812978][ T27] ? dlm_scand+0x230/0x230 [ 243.829877][ T27] ? init_wait_entry+0xd0/0xd0 [ 243.839401][ T27] ? kobject_uevent_env+0x36c/0x890 [ 243.851477][ T27] dlm_new_lockspace+0x1ca0/0x21a0 [ 243.861765][ T27] ? dlm_put_lockspace+0x60/0x60 [ 243.879732][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.888311][ T27] ? init_wait_entry+0xd0/0xd0 [ 243.893122][ T27] ? apparmor_capable+0x12c/0x190 [ 243.908251][ T27] ? bpf_lsm_capable+0x5/0x10 [ 243.912981][ T27] ? security_capable+0x85/0xb0 [ 243.928823][ T27] device_create_lockspace+0xc4/0x350 [ 243.940675][ T27] ? slab_free_freelist_hook+0xec/0x170 [ 243.952253][ T27] ? device_user_deadlock+0xd0/0xd0 [ 243.966781][ T27] ? device_write+0x779/0xea0 [ 243.971514][ T27] ? kfree+0xef/0x2a0 [ 243.981740][ T27] device_write+0x893/0xea0 [ 243.990248][ T27] ? device_read+0x1140/0x1140 [ 244.001599][ T27] vfs_write+0x304/0xd70 [ 244.009426][ T27] ? file_end_write+0x250/0x250 [ 244.020913][ T27] ? __fget_files+0x402/0x470 [ 244.030791][ T27] ? __fdget_pos+0x1e2/0x370 [ 244.051893][ T27] ? ksys_write+0x70/0x260 [ 244.056741][ T27] ksys_write+0x153/0x260 [ 244.061096][ T27] ? __ia32_sys_read+0x80/0x80 [ 244.076861][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 244.082114][ T27] do_syscall_64+0x4c/0xa0 [ 244.092083][ T27] ? clear_bhb_loop+0x30/0x80 [ 244.101264][ T27] ? clear_bhb_loop+0x30/0x80 [ 244.112175][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.122693][ T27] RIP: 0033:0x7fc8dffb8159 [ 244.133184][ T27] RSP: 002b:00007fc8de210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.152252][ T27] RAX: ffffffffffffffda RBX: 00007fc8e023ffa0 RCX: 00007fc8dffb8159 [ 244.171903][ T27] RDX: 0000000000000080 RSI: 00002000000004c0 RDI: 0000000000000008 [ 244.182368][ T27] RBP: 00007fc8e004f024 R08: 0000000000000000 R09: 0000000000000000 [ 244.203500][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.211522][ T27] R13: 00007fc8e0240038 R14: 00007fc8e023ffa0 R15: 00007ffcb82a19a8 [ 244.229576][ T27] [ 244.232734][ T27] [ 244.232734][ T27] Showing all locks held in the system: [ 244.241461][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.253405][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.277527][ T27] 3 locks held by kworker/u4:0/9: [ 244.299133][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.320414][ T27] #1: ffffc90000ce7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.341136][ T27] #2: ffffffff8d44d008 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 244.353010][ T27] 3 locks held by kworker/0:1/13: [ 244.368350][ T27] #0: ffff88802b36a938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.381357][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.403491][ T27] #1: ffffc90000d27d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.427170][ T7334] lo speed is unknown, defaulting to 1000 [ 244.427293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.468306][ T27] #2: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: finish_lock_switch+0x5b/0x290 [ 244.494373][ T27] 1 lock held by khungtaskd/27: [ 244.499262][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 244.523475][ T27] 3 locks held by kworker/1:2/1108: [ 244.528710][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.573466][ T27] #1: ffffc90004a07d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.623012][ T27] #2: ffff888023b1c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x283/0x3380 [ 244.653162][ T27] 2 locks held by getty/3942: [ 244.664044][ T27] #0: ffff88814c964098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 244.688670][ T7334] lo speed is unknown, defaulting to 1000 [ 244.698099][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 244.723447][ T27] 2 locks held by kworker/1:3/4175: [ 244.728691][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.753709][ T27] #1: ffffc900012dfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.770511][ T27] 3 locks held by kworker/u5:5/4199: [ 244.783455][ T27] #0: ffff88802023b138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.803969][ T27] #1: ffffc90002fbfd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.833203][ T27] #2: ffff8880641c13f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xa4/0x12a0 [ 244.849133][ T27] 4 locks held by kworker/u4:5/4213: [ 244.854917][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.865620][ T27] #1: ffffc9000304fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.875846][ T27] #2: ffffffff8d4410d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 244.879671][ T7334] lo speed is unknown, defaulting to 1000 [ 244.886393][ T27] #3: ffffffff8c3238f0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 244.901936][ T27] 3 locks held by kworker/1:6/4238: [ 244.907600][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 244.918900][ T27] #1: ffffc900031afd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 244.938676][ T27] #2: ffff88807d440240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x283/0x3380 [ 244.956711][ T27] 1 lock held by syz.0.118/4770: [ 244.961864][ T27] #0: ffffffff963c9aa8 (&ls_lock){+.+.}-{3:3}, at: dlm_new_lockspace+0xab/0x21a0 [ 244.971515][ T27] 1 lock held by dlm_recoverd/4774: [ 244.983708][ T27] #0: ffff88807a98ccb8 (&ls->ls_in_recovery){+.+.}-{3:3}, at: dlm_recoverd+0xa9/0x19e0 [ 245.003510][ T27] 3 locks held by syz-executor/5271: [ 245.008832][ T27] #0: ffff888077b093f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 245.031673][ T27] #1: ffff888077b08478 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x408/0x1020 [ 245.041692][ T27] #2: ffffffff8d593488 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 245.063943][ T27] 3 locks held by syz.7.384/6733: [ 245.069003][ T27] #0: ffff888063ac5c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 245.078692][ T27] #1: ffff888029120460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 245.088003][ T27] #2: ffffffff8c5717a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x60/0x9e0 [ 245.097321][ T27] 1 lock held by syz-executor/7183: [ 245.100260][ T7334] lo speed is unknown, defaulting to 1000 [ 245.102521][ T27] #0: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 245.158698][ T27] 5 locks held by syz.8.402/7334: [ 245.165447][ T27] 3 locks held by syz.2.388/7369: [ 245.170479][ T27] #0: ffff888096d853f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 245.193388][ T27] #1: ffff888096d84478 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x408/0x1020 [ 245.203259][ T27] #2: ffffffff8d593488 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 245.273386][ T27] [ 245.275763][ T27] ============================================= [ 245.275763][ T27] [ 245.304151][ T27] NMI backtrace for cpu 0 [ 245.308519][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 245.315726][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.325786][ T27] Call Trace: [ 245.329074][ T27] [ 245.332008][ T27] dump_stack_lvl+0x188/0x250 [ 245.336709][ T27] ? show_regs_print_info+0x20/0x20 [ 245.341917][ T27] ? load_image+0x410/0x410 [ 245.346425][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 245.351809][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 245.356939][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 245.361887][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 245.368049][ T27] ? _printk+0xda/0x130 [ 245.372217][ T27] ? load_image+0x410/0x410 [ 245.376731][ T27] ? load_image+0x410/0x410 [ 245.381241][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 245.387324][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 245.393308][ T27] watchdog+0xe1b/0xe60 [ 245.397474][ T27] kthread+0x42e/0x520 [ 245.401634][ T27] ? hungtask_pm_notify+0x40/0x40 [ 245.406659][ T27] ? kthread_blkcg+0xd0/0xd0 [ 245.411253][ T27] ret_from_fork+0x1f/0x30 [ 245.415684][ T27] [ 245.419191][ T27] Sending NMI from CPU 0 to CPUs 1: [ 245.424509][ C1] NMI backtrace for cpu 1 [ 245.424520][ C1] CPU: 1 PID: 7183 Comm: syz-executor Not tainted syzkaller #0 [ 245.424534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.424543][ C1] RIP: 0010:debug_check_no_obj_freed+0x12e/0x520 [ 245.424565][ C1] Code: ef e8 46 0d 00 00 48 ba 00 00 00 00 00 fc ff df ff c3 4c 89 f5 4d 85 f6 0f 84 2e 03 00 00 49 89 ec 49 c1 ec 03 41 80 3c 14 00 <74> 12 48 89 ef e8 48 2d d1 fd 48 ba 00 00 00 00 00 fc ff df 4c 8b [ 245.424577][ C1] RSP: 0018:ffffc90004c57710 EFLAGS: 00000046 [ 245.424591][ C1] RAX: 1ffff1100f34ea00 RBX: 0000000000000003 RCX: 0000000000000001 [ 245.424600][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90004c57600 [ 245.424610][ C1] RBP: ffff88802c414460 R08: 0000000000000003 R09: 0000000000000004 [ 245.424620][ C1] R10: dffffc0000000000 R11: fffff5200098aec0 R12: 1ffff1100588288c [ 245.424630][ C1] R13: ffff888091e2d000 R14: ffff88802c414460 R15: ffff88809635b290 [ 245.424641][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 245.424653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.424663][ C1] CR2: 00005612a03a8950 CR3: 000000007d506000 CR4: 00000000003506e0 [ 245.424677][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.424685][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.424694][ C1] Call Trace: [ 245.424698][ C1] [ 245.424708][ C1] free_unref_page_prepare+0x237/0x6c0 [ 245.424728][ C1] free_unref_page+0x8f/0x2a0 [ 245.424743][ C1] ? __might_sleep+0xf0/0xf0 [ 245.424758][ C1] ? mark_free_pages+0x310/0x310 [ 245.424777][ C1] ? __free_pages+0x95/0x1a0 [ 245.424792][ C1] __vunmap+0x8e0/0xa80 [ 245.424805][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 245.424821][ C1] ? _raw_spin_unlock+0x40/0x40 [ 245.424836][ C1] ? kcov_open+0x80/0x80 [ 245.424850][ C1] kcov_close+0x27/0x50 [ 245.424862][ C1] __fput+0x212/0x8c0 [ 245.424881][ C1] task_work_run+0x125/0x1a0 [ 245.424898][ C1] do_exit+0x635/0x2110 [ 245.424915][ C1] ? put_task_struct+0x80/0x80 [ 245.424927][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.424949][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 245.424964][ C1] do_group_exit+0x12c/0x2f0 [ 245.424976][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.424993][ C1] get_signal+0x7eb/0x12e0 [ 245.425016][ C1] arch_do_signal_or_restart+0xe6/0x12a0 [ 245.425037][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 245.425055][ C1] ? get_sigframe_size+0x10/0x10 [ 245.425079][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 245.425094][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 245.425107][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 245.425121][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 245.425136][ C1] do_syscall_64+0x58/0xa0 [ 245.425147][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.425161][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.425176][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.425191][ C1] RIP: 0033:0x7fb8952ce98e [ 245.425202][ C1] Code: Unable to access opcode bytes at RIP 0x7fb8952ce964. [ 245.425208][ C1] RSP: 002b:00007ffe859f6de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 245.425223][ C1] RAX: 0000000000000020 RBX: 000055558d5cd500 RCX: 00007fb8952ce98e [ 245.425232][ C1] RDX: 0000000000000020 RSI: 00007fb8960c4670 RDI: 0000000000000005 [ 245.425241][ C1] RBP: 0000000000000001 R08: 00007ffe859f6e64 R09: 000000000000000c [ 245.425249][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 245.425258][ C1] R13: 00007ffe859f6ecc R14: 00007fb8960c4670 R15: 0000000000000000 [ 245.425274][ C1] [ 245.543091][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 245.789078][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 245.796257][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.806293][ T27] Call Trace: [ 245.809575][ T27] [ 245.812502][ T27] dump_stack_lvl+0x188/0x250 [ 245.817171][ T27] ? show_regs_print_info+0x20/0x20 [ 245.822352][ T27] ? load_image+0x410/0x410 [ 245.826845][ T27] panic+0x2f8/0x850 [ 245.830722][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 245.836338][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 245.840842][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 245.846387][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 245.852600][ T27] watchdog+0xe5a/0xe60 [ 245.856752][ T27] kthread+0x42e/0x520 [ 245.860803][ T27] ? hungtask_pm_notify+0x40/0x40 [ 245.865809][ T27] ? kthread_blkcg+0xd0/0xd0 [ 245.870382][ T27] ret_from_fork+0x1f/0x30 [ 245.874791][ T27] [ 245.878028][ T27] Kernel Offset: disabled [ 245.882356][ T27] Rebooting in 86400 seconds..