last executing test programs: 7.244812028s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff0007058402000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)={0x84, &(0x7f0000003000)={0xc0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001100)={0x84, &(0x7f0000003100)={0xc0, 0x2, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) syz_usb_control_io(r0, &(0x7f0000002000), &(0x7f0000001200)) nanosleep(&(0x7f0000004000)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000004100), 0x0, 0x2) 6.686507882s ago: executing program 0 (id=6): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x4}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0c85512, &(0x7f0000000200)={{0x5}}) 6.074528628s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r4 = syz_open_dev$video(&(0x7f0000000800), 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r5 = syz_open_dev$video(&(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 5.373865205s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001221b00090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221b00000005010902a1010930150025643500456455006511750895018102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.346714066s ago: executing program 3 (id=7): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) read(r0, &(0x7f0000002000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001002005a"}}, 0xd) read(r0, &(0x7f0000003000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000004000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) (async) read(r0, &(0x7f0000005000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) (async) read(r0, &(0x7f0000006000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) (async) read(r0, &(0x7f0000007000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) (async) read(r0, &(0x7f0000008000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) (async) read(r0, &(0x7f0000009000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) (async) read(r0, &(0x7f000000a000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) (async) read(r0, &(0x7f000000b000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000c000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000d000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) (async) read(r0, &(0x7f000000e000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000f000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) (async) 5.021647754s ago: executing program 3 (id=8): syz_usb_connect(0x0, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04203000010000000109028500020100803209040000000101000009240100013f0001010c24020101020001000000000c24020201020001000000000c24020301020001000000000924050e03010203000924030f0101000e000904010000010200000904010101010200000724010f0101000b2402010102100180bb0009058105640001000007250101000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000400)) 3.940048372s ago: executing program 0 (id=9): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='+2 +3 -4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 3.346934807s ago: executing program 0 (id=10): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@mmap={0x0, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 2.563250386s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000500)="0000000000000000000000000000000001000000000000000000000001000000000000000100"/72) ioctl(r1, 0x40140921, &(0x7f0000000600)="0000000007000000000000000000000003000000") ioctl(r1, 0x400c0930, &(0x7f0000000700)='\x00'/12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/serialize_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1\x00', 0x2) 2.347486402s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/flowlabel_consistency\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0\x00', 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0x0, 0x4}, 0x20) 2.278718073s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/fs/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0: 127.0.0.1\n', 0x14) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2.01213047s ago: executing program 2 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk', 0x4) 1.873700614s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f00000001c0)="040e0401030c00", 0x7) write(r0, &(0x7f0000000200)="040e0c010310000000000060000000", 0xf) write(r0, &(0x7f0000000240)="040e0c010110000b00000b00000000", 0xf) write(r0, &(0x7f0000000280)="040e0a01091000aaaaaaaa10", 0xd) write(r0, &(0x7f00000002c0)="040e0c010320000010000000000000", 0xf) write(r0, &(0x7f0000000300)="040e0701022000000101", 0xa) write(r0, &(0x7f0000000340)="040e0c011c20000000000000000000", 0xf) write(r0, &(0x7f0000000400)="040e0c012f20000001000100010001", 0xf) write(r0, &(0x7f0000000440)="040e05013b200001", 0x8) 1.869777304s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r1, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r1, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/84) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 1.510498753s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100)='deflate\x00', 0x8) 1.332295677s ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', 0x41, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./merge/file\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="8000"/136], &(0x7f0000000300), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[], 0x0) 1.20828262s ago: executing program 2 (id=21): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) 1.099396583s ago: executing program 4 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) 989.209156ms ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='linear\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0), 0x0) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000480)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='3\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='acti', 0x4) 924.274268ms ago: executing program 0 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x10, &(0x7f0000000200)=@raw=[@generic={0x79, 0x6, 0x1, 0x70}, @generic={0xbf, 0x1, 0xa}, @generic={0x7, 0x1, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x8}, @generic={0xbf, 0x3, 0x6}, @generic={0x7, 0x3, 0x0, 0x0, 0xffffffe8}, @generic={0x85, 0x0, 0x0, 0x0, 0x4}, @generic={0x62, 0xa, 0x0, 0xfffc}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) 831.3132ms ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/257, 0x101, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000500)='1.1\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000700)='7:0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='active\x00', 0x7) 772.112091ms ago: executing program 0 (id=26): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) 525.898388ms ago: executing program 4 (id=27): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) read(r0, &(0x7f0000002000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001002005a"}}, 0xd) 298.455623ms ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 186.744026ms ago: executing program 4 (id=29): syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x2a}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x0, 0x1}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x1, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0xfff}]}, {{0x9, 0x5, 0x1, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0xfff}]}, {{0x9, 0x5, 0x82, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) 0s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.818267][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.839190][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. syzkaller login: [ 75.941280][ T4261] cgroup: Unknown subsys name 'net' [ 76.075489][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.691475][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.150465][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.162496][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.174848][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.183271][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.191448][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.199617][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.207283][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.215133][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.223577][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.231814][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.239715][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.247651][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.251477][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.256338][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.264188][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.273600][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.276857][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.285177][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.291686][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.298599][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.305223][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.329017][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.336645][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.343960][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.429311][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.437762][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.445455][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.453552][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.461282][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.468573][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.874096][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 79.928385][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 79.942539][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.004090][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.104369][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 80.123591][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.133764][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.142134][ T4280] device bridge_slave_0 entered promiscuous mode [ 80.157909][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.165183][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.173688][ T4280] device bridge_slave_1 entered promiscuous mode [ 80.197486][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.204746][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.213257][ T4282] device bridge_slave_0 entered promiscuous mode [ 80.233743][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.240953][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.249580][ T4282] device bridge_slave_1 entered promiscuous mode [ 80.289008][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.296144][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.307793][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.317985][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.339608][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.357687][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.365078][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.376863][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.402677][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.409986][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.417999][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.429659][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.463589][ T4280] team0: Port device team_slave_0 added [ 80.470076][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.477206][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.485907][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.494918][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.515658][ T4280] team0: Port device team_slave_1 added [ 80.550055][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.566166][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.573601][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.581942][ T4287] device bridge_slave_0 entered promiscuous mode [ 80.604477][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.628930][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.636424][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.644897][ T4287] device bridge_slave_1 entered promiscuous mode [ 80.654185][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.668514][ T4282] team0: Port device team_slave_0 added [ 80.675304][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.683235][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.709634][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.737620][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.748383][ T4282] team0: Port device team_slave_1 added [ 80.755207][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.763600][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.793067][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.806746][ T4273] team0: Port device team_slave_0 added [ 80.862824][ T4273] team0: Port device team_slave_1 added [ 80.871219][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.897248][ T4274] team0: Port device team_slave_0 added [ 80.911777][ T4280] device hsr_slave_0 entered promiscuous mode [ 80.919207][ T4280] device hsr_slave_1 entered promiscuous mode [ 80.935373][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.946545][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.953942][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.980316][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.994613][ T4274] team0: Port device team_slave_1 added [ 81.025854][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.032959][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.059512][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.071637][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.078619][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.105206][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.138403][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.145958][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.172206][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.189334][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.196327][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.225511][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.242801][ T4287] team0: Port device team_slave_0 added [ 81.257702][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.264791][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.291308][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.324786][ T4287] team0: Port device team_slave_1 added [ 81.392232][ T4282] device hsr_slave_0 entered promiscuous mode [ 81.399608][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 81.399662][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 81.408158][ T4282] device hsr_slave_1 entered promiscuous mode [ 81.412172][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 81.412412][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 81.433123][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.441316][ T4282] Cannot create hsr debugfs directory [ 81.450517][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.457605][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.464971][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.472934][ T4273] Cannot create hsr debugfs directory [ 81.490910][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.497927][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.524597][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.537235][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.544530][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.570960][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 81.577944][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.635452][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.642492][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.649739][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.657388][ T4274] Cannot create hsr debugfs directory [ 81.754670][ T4287] device hsr_slave_0 entered promiscuous mode [ 81.762413][ T4287] device hsr_slave_1 entered promiscuous mode [ 81.769278][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.776924][ T4287] Cannot create hsr debugfs directory [ 82.025342][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.065282][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.101938][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.135696][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.169621][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.179533][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.191253][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.203981][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.295095][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.338388][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.352407][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.363391][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.388386][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.429958][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.443682][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.457930][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.478249][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.496034][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.508161][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.521617][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.530687][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.567993][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.577661][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.589127][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.596437][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.608034][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.617584][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.626275][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.633589][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.671332][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.678581][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.697017][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.705756][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.714673][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.726207][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.735340][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.745490][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.754473][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.779922][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.789904][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.799706][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.813868][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.834559][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.844709][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.853718][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.860895][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.870921][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.879847][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.888301][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.904805][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.920757][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.940285][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.953855][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.963860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.978335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.006446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.025462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.037016][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.044222][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.097803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.149948][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.162420][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.173588][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.206887][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.215498][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.230105][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.246448][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.255804][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.272458][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.287603][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.301075][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.315364][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.327233][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.355946][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.375129][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.387088][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.408132][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.425625][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.462403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.478848][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 83.482123][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 83.484907][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 83.492024][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 83.503996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.519897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.534796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.543600][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.550844][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.560067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.569337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.578086][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.585331][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.594423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.602833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.639152][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 83.645638][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.659971][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.673939][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.681193][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.713510][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.723404][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.741974][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.749202][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.763887][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.775277][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.807082][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.818319][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.830086][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.870317][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.879619][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.896933][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.908107][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.925066][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.936103][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.950921][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.966582][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.976896][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.991139][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.001332][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.010875][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.020105][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.043801][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.062024][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.082949][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.107858][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.146161][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.154699][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.163441][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.173104][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.182280][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.198122][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.207170][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.215486][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.236292][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.273196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.282373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.296465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.325097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.346647][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.390430][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.409597][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.430056][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.437211][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.459696][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.475195][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.499384][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.506552][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.543516][ T4280] device veth0_vlan entered promiscuous mode [ 84.602993][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.619561][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.639647][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.648321][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.658520][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.670750][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.679092][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.699875][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.710762][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.740518][ T4280] device veth1_vlan entered promiscuous mode [ 84.759456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.767638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.786643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.797373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.806810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.816428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.827452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.874134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.887455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.897191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.906653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.925305][ T4273] device veth0_vlan entered promiscuous mode [ 84.944770][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.979602][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.988255][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.010588][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.021088][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.030806][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.041236][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.061779][ T4280] device veth0_macvtap entered promiscuous mode [ 85.078186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.089128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.104527][ T4273] device veth1_vlan entered promiscuous mode [ 85.122494][ T4280] device veth1_macvtap entered promiscuous mode [ 85.141067][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.216380][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.238339][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.259827][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.267385][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.278141][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.307335][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.325061][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.341169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.355430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.373027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.384917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.417159][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433427][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444793][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.458406][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.480332][ T4273] device veth0_macvtap entered promiscuous mode [ 85.487749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.509807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.542300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.558924][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 85.560383][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 85.564988][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 85.571385][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 85.600934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.620893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.632972][ T4274] device veth0_vlan entered promiscuous mode [ 85.647253][ T4273] device veth1_macvtap entered promiscuous mode [ 85.672666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.686441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.719182][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 85.739187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.775087][ T4274] device veth1_vlan entered promiscuous mode [ 85.836971][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.855197][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.868189][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.899123][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.907439][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.934826][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.944253][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.954346][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.963664][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.983841][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.994573][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.008604][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.020892][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.047888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.072546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.089915][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.104393][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.115195][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.130580][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.158839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.167588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.186650][ T4274] device veth0_macvtap entered promiscuous mode [ 86.241404][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.256581][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.300676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.314952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.324015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.333807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.351653][ T4274] device veth1_macvtap entered promiscuous mode [ 86.401771][ T4282] device veth0_vlan entered promiscuous mode [ 86.424334][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.435848][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.446461][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.457561][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.469948][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.479772][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.487908][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.497028][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.506744][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.515906][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.526355][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.535224][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.571557][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.582286][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.593896][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.605085][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.616641][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.631028][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.643245][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.650543][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.660027][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.668166][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.677168][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.699681][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.707629][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.721952][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.745262][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.755204][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.766900][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783544][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.813788][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.849804][ T4282] device veth1_vlan entered promiscuous mode [ 86.879113][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.886977][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.904601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.913416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.938579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.953563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.964320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.980876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.994632][ T4287] device veth0_vlan entered promiscuous mode [ 87.057419][ T4287] device veth1_vlan entered promiscuous mode [ 87.081652][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.100696][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.120285][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.147000][ T4282] device veth0_macvtap entered promiscuous mode [ 87.184133][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.227470][ T4282] device veth1_macvtap entered promiscuous mode [ 87.290197][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.306216][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.321134][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.331397][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.344953][ T4287] device veth0_macvtap entered promiscuous mode [ 87.366282][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.379918][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.406805][ T4287] device veth1_macvtap entered promiscuous mode [ 87.420238][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.435240][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.447827][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.460677][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.471625][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.482730][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.495012][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.514436][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.523770][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.533405][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.549006][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.569479][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.577366][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.590863][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.606868][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.617815][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.635117][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.645161][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 87.645198][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 87.645223][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 87.667356][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 87.682463][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.694367][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.726914][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.741172][ T4318] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 87.767039][ T4318] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 87.780852][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.799843][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 87.806386][ T4318] usb 3-1: Product: syz [ 87.807512][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.814995][ T4318] usb 3-1: Manufacturer: syz [ 87.823765][ T4318] usb 3-1: SerialNumber: syz [ 87.852755][ T4318] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 87.858596][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.866046][ T4318] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 87.885855][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.897889][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.908382][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.919231][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.930255][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.941578][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.972632][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.986726][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.033715][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.061757][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.094500][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.104531][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.115885][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.126782][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.137463][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.147408][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.161515][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.169068][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.175270][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.190573][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.201280][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.211035][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.221525][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.232615][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.241809][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.250788][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260030][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.297940][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.316980][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.326880][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.336450][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.391186][ T14] usb 1-1: not running at top speed; connect to a high speed hub [ 88.409371][ T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 88.428387][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.436757][ T14] usb 1-1: Product: syz [ 88.451098][ T14] usb 1-1: Manufacturer: syz [ 88.455784][ T14] usb 1-1: SerialNumber: syz [ 88.483501][ T4318] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 88.629222][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.637207][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.661185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.673026][ T4366] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 88.715411][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.723746][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.734341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.788580][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.815331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.848161][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.878028][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.905868][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.926829][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.307296][ T4320] logitech-hidpp-device 0005:046D:B012.0001: Device not connected [ 89.409354][ T4321] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.438906][ T4358] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.619053][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 89.630196][ T4358] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 89.646276][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.656682][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.670534][ T4358] usb 5-1: config 0 descriptor?? [ 89.675979][ T4321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.689505][ T4321] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.696550][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.710185][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.724078][ T14] usb 1-1: 1:1: cannot set freq 48000 to ep 0x81 [ 89.738519][ T4321] usb 2-1: config 0 descriptor?? [ 89.784918][ T14] usb 1-1: USB disconnect, device number 2 [ 89.925658][ T4319] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 1.00 [ 89.946228][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.103551][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.204613][ T4321] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5 [ 90.222579][ T4358] corsair-psu 0003:1B1C:1C03.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.4-1/input0 [ 90.317536][ T4358] corsair-psu 0003:1B1C:1C03.0002: unable to initialize device (-38) [ 90.341072][ T4321] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Mouse [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 90.359497][ T4358] corsair-psu: probe of 0003:1B1C:1C03.0002 failed with error -38 [ 90.843601][ T4401] svc: failed to register lockdv1 RPC service (errno 111). [ 90.852634][ T4401] lockd_up: makesock failed, error=-111 [ 90.937633][ T4318] em28xx 3-1:1.0: read from i2c device at 0xa0 failed with unknown error (status=254) [ 90.963850][ T4318] em28xx 3-1:1.0: board has no eeprom [ 91.219959][ T4319] usb 4-1: 1:1: cannot set freq 48000 to ep 0x81 [ 91.277875][ T4319] usb 4-1: USB disconnect, device number 2 [ 91.319009][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.448820][ T4318] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 91.457527][ T4318] em28xx 3-1:1.0: dvb set to bulk mode. [ 91.466158][ T4368] usb 2-1: USB disconnect, device number 2 [ 91.476308][ T4318] em28xx 3-1:1.0: Binding DVB extension [ 91.514300][ T4321] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 91.527229][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.553360][ T4395] udevd[4395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.587314][ T4321] usb 1-1: Product: syz [ 91.597459][ T4321] usb 1-1: Manufacturer: syz [ 91.602967][ T4321] usb 1-1: SerialNumber: syz [ 91.642749][ T4321] gspca_main: spca500-2.14.0 probing 046d:0900 [ 91.801022][ T1178] cfg80211: failed to load regulatory.db [ 91.947179][ T4408] md: serialize_policy is only effective for raid1 [ 92.159960][ T4321] gspca_spca500: reg write: error -32 [ 92.165979][ T4413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 92.192436][ T4321] gspca_spca500: reg write: error -32 [ 92.212580][ T4321] gspca_spca500: reg write: error -32 [ 92.230509][ T4321] gspca_spca500: reg write: error -32 [ 92.255084][ T4321] gspca_spca500: reg write: error -32 [ 92.285729][ T1178] usb 5-1: USB disconnect, device number 2 [ 92.294539][ T4321] gspca_spca500: reg write: error -32 [ 92.311096][ T4320] usb 3-1: USB disconnect, device number 2 [ 92.318646][ T4318] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 92.327501][ T4318] zl10353_read_register: readreg error (reg=127, ret==-5) [ 92.338825][ T4321] gspca_spca500: reg write: error -32 [ 92.348079][ T4320] em28xx 3-1:1.0: Disconnecting em28xx [ 92.361056][ T4318] em28xx 3-1:1.0: frontend initialization failed [ 92.377290][ T4321] gspca_spca500: reg write: error -32 [ 92.384452][ T4318] em28xx 3-1:1.0: Remote control support is not available for this card. [ 92.413777][ T4321] gspca_spca500: reg write: error -32 [ 92.419224][ T4320] em28xx 3-1:1.0: Closing input extension [ 92.443025][ T4321] gspca_spca500: reg write: error -32 [ 92.462567][ T4320] em28xx 3-1:1.0: Freeing device [ 92.475612][ T4321] gspca_spca500: reg write: error -32 [ 92.505195][ T4321] gspca_spca500: reg write: error -32 [ 92.531399][ T26] audit: type=1800 audit(1785894682.989:2): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14" name="zoned" dev="configfs" ino=34969 res=0 errno=0 [ 92.540542][ T4321] gspca_spca500: reg write: error -32 [ 92.594841][ T4321] gspca_spca500: reg write: error -32 [ 92.621414][ T4321] videodev: could not get a free minor [ 92.631384][ T26] audit: type=1800 audit(1785894683.039:3): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14" name="memory_backed" dev="configfs" ino=34973 res=0 errno=0 [ 92.654750][ T4321] gspca_main: video_register_device err -23 [ 92.685087][ T4321] spca500: probe of 1-1:1.0 failed with error -23 [ 92.697986][ T4286] Bluetooth: hci5: unexpected event for opcode 0x202f [ 92.705536][ T4286] Bluetooth: hci5: unexpected event for opcode 0x203b [ 92.783036][ T26] audit: type=1800 audit(1785894683.039:4): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14" name="zone_nr_conv" dev="configfs" ino=34974 res=0 errno=0 [ 92.872282][ T4320] usb 1-1: USB disconnect, device number 3 [ 92.892965][ T26] audit: type=1800 audit(1785894683.349:5): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="attr_allow_any_host" dev="configfs" ino=34056 res=0 errno=0 [ 92.920739][ T26] audit: type=1800 audit(1785894683.369:6): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="addr_trtype" dev="configfs" ino=34064 res=0 errno=0 [ 92.947829][ T26] audit: type=1800 audit(1785894683.399:7): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="addr_traddr" dev="configfs" ino=34065 res=0 errno=0 [ 92.970954][ T26] audit: type=1800 audit(1785894683.409:8): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="addr_trsvcid" dev="configfs" ino=34066 res=0 errno=0 [ 92.998214][ T26] audit: type=1800 audit(1785894683.419:9): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="addr_adrfam" dev="configfs" ino=34067 res=0 errno=0 [ 93.000467][ T4426] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 93.085812][ T4432] overlayfs: failed to resolve './work': -2 [ 93.099200][ T1178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.188327][ T53] nvmet: connect request for invalid subsystem testn! [ 93.199290][ T4429] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testn" [ 93.219238][ T4429] nvme nvme0: failed to connect queue: 0 ret=16770 [ 93.297755][ T4436] MTD: Couldn't look up './dev/mtdblock0': -2 [ 93.307740][ T1178] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 93.317616][ T1178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 93.330289][ T1178] usb 2-1: Product: syz [ 93.334534][ T1178] usb 2-1: Manufacturer: syz [ 93.353283][ T1178] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 93.478772][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.632029][ T4443] loop0: detected capacity change from 0 to 128 [ 93.671752][ T4320] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 93.697075][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.705213][ T4321] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 93.788485][ T4320] usb 3-1: NFC: intf ffff8880754f9000 id ffffffff8d419540 [ 93.893764][ T4320] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 93.957627][ T4320] logitech-hidpp-device 0005:046D:B012.0005: Device not connected [ 94.066018][ T26] audit: type=1800 audit(1785894684.519:10): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.28" name="zoned" dev="configfs" ino=35022 res=0 errno=0 [ 94.090300][ T4320] usb 3-1: USB disconnect, device number 3 [ 94.098786][ T26] audit: type=1800 audit(1785894684.519:11): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.28" name="memory_backed" dev="configfs" ino=35023 res=0 errno=0 [ 94.128996][ T4320] usb 3-1: NFC: intf ffff8880754f9000 [ 94.463966][ T1178] videodev: could not get a free minor [ 94.469713][ T1178] sur40 2-1:1.0: Unable to register video subdevice. [ 94.476597][ T1178] sur40: probe of 2-1:1.0 failed with error -23 [ 94.511270][ T3638] ================================================================== [ 94.519423][ T3638] BUG: KASAN: use-after-free in string+0x204/0x290 [ 94.525996][ T3638] Read of size 1 at addr ffff888028812c92 by task udevd/3638 [ 94.533589][ T3638] [ 94.535970][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 94.543000][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.553116][ T3638] Call Trace: [ 94.556437][ T3638] [ 94.559410][ T3638] dump_stack_lvl+0x188/0x24e [ 94.564147][ T3638] ? __lock_acquire+0x7c40/0x7c40 [ 94.569228][ T3638] ? show_regs_print_info+0x12/0x12 [ 94.574482][ T3638] ? load_image+0x410/0x410 [ 94.579039][ T3638] ? __virt_addr_valid+0x467/0x540 [ 94.584208][ T3638] ? string+0x204/0x290 [ 94.588501][ T3638] print_report+0xa8/0x210 [ 94.593011][ T3638] kasan_report+0x10b/0x140 [ 94.597575][ T3638] ? string+0x204/0x290 [ 94.601789][ T3638] string+0x204/0x290 [ 94.605829][ T3638] vsnprintf+0x10db/0x1c20 [ 94.610325][ T3638] add_uevent_var+0x1cd/0x460 [ 94.615055][ T3638] ? __mutex_trylock_common+0x15c/0x260 [ 94.620658][ T3638] ? kobject_uevent_env+0x890/0x890 [ 94.625907][ T3638] ? rcu_is_watching+0x11/0xa0 [ 94.630732][ T3638] ? trace_contention_end+0x5f/0x170 [ 94.636073][ T3638] input_dev_uevent+0x16a/0xa10 [ 94.640978][ T3638] ? of_device_uevent+0xd7/0x290 [ 94.645972][ T3638] dev_uevent+0x4d6/0x740 [ 94.650365][ T3638] ? dev_uevent_name+0xa0/0xa0 [ 94.655194][ T3638] uevent_show+0x1a8/0x320 [ 94.659762][ T3638] dev_attr_show+0x50/0xb0 [ 94.664241][ T3638] sysfs_kf_seq_show+0x349/0x4b0 [ 94.669240][ T3638] ? device_get_ownership+0xa0/0xa0 [ 94.674503][ T3638] seq_read_iter+0x460/0xc50 [ 94.679157][ T3638] vfs_read+0x471/0x960 [ 94.683374][ T3638] ? kernel_read+0x1e0/0x1e0 [ 94.688033][ T3638] ? __x64_sys_newfstat+0x19a/0x220 [ 94.693300][ T3638] ? do_sys_openat2+0x20a/0x4f0 [ 94.698208][ T3638] ? __fdget_pos+0x2b5/0x360 [ 94.702866][ T3638] ksys_read+0x14d/0x260 [ 94.703983][ T14] usb 2-1: USB disconnect, device number 3 [ 94.707158][ T3638] ? vfs_write+0x9a0/0x9a0 [ 94.717456][ T3638] ? lockdep_hardirqs_on+0x94/0x140 [ 94.722741][ T3638] do_syscall_64+0x4c/0xa0 [ 94.727216][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 94.731983][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 94.736729][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.742689][ T3638] RIP: 0033:0x7f00428a7407 [ 94.747173][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 94.759967][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 94.766814][ T3638] RSP: 002b:00007ffdc9c121c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 94.781574][ T3638] RAX: ffffffffffffffda RBX: 00007f0043091880 RCX: 00007f00428a7407 [ 94.789699][ T3638] RDX: 0000000000001000 RSI: 000055b4767e38a0 RDI: 000000000000000c [ 94.797722][ T3638] RBP: 00007f00429efff0 R08: 0000000000000000 R09: 0000000000000000 [ 94.805747][ T3638] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 94.813860][ T3638] R13: 00007f00429efea0 R14: 0000000000000000 R15: 000055b4767c17a0 [ 94.821933][ T3638] [ 94.825001][ T3638] [ 94.827365][ T3638] Allocated by task 1178: [ 94.831729][ T3638] kasan_set_track+0x4b/0x70 [ 94.836376][ T3638] __kasan_kmalloc+0x8e/0xa0 [ 94.841019][ T3638] sur40_probe+0x164/0xf10 [ 94.845484][ T3638] usb_probe_interface+0x5be/0xae0 [ 94.850655][ T3638] really_probe+0x24a/0xb40 [ 94.855213][ T3638] __driver_probe_device+0x1f5/0x390 [ 94.860551][ T3638] driver_probe_device+0x4f/0x420 [ 94.865634][ T3638] __device_attach_driver+0x2c6/0x510 [ 94.871061][ T3638] bus_for_each_drv+0x184/0x210 [ 94.875972][ T3638] __device_attach+0x2a7/0x480 [ 94.880807][ T3638] bus_probe_device+0xba/0x1d0 [ 94.885628][ T3638] device_add+0xbcf/0x1050 [ 94.890139][ T3638] usb_set_configuration+0x19d5/0x2030 [ 94.895650][ T3638] usb_generic_driver_probe+0x89/0x150 [ 94.901179][ T3638] usb_probe_device+0x126/0x250 [ 94.906081][ T3638] really_probe+0x24a/0xb40 [ 94.910661][ T3638] __driver_probe_device+0x1f5/0x390 [ 94.915996][ T3638] driver_probe_device+0x4f/0x420 [ 94.921064][ T3638] __device_attach_driver+0x2c6/0x510 [ 94.926491][ T3638] bus_for_each_drv+0x184/0x210 [ 94.931382][ T3638] __device_attach+0x2a7/0x480 [ 94.936187][ T3638] bus_probe_device+0xba/0x1d0 [ 94.940994][ T3638] device_add+0xbcf/0x1050 [ 94.945500][ T3638] usb_new_device+0xa01/0x15e0 [ 94.950313][ T3638] hub_event+0x2b2f/0x5200 [ 94.954782][ T3638] process_one_work+0x8ab/0x1160 [ 94.959772][ T3638] worker_thread+0xaf5/0x12a0 [ 94.964496][ T3638] kthread+0x29d/0x330 [ 94.968609][ T3638] ret_from_fork+0x1f/0x30 [ 94.973120][ T3638] [ 94.975484][ T3638] Freed by task 1178: [ 94.979507][ T3638] kasan_set_track+0x4b/0x70 [ 94.984177][ T3638] kasan_save_free_info+0x27/0x40 [ 94.989248][ T3638] ____kasan_slab_free+0x126/0x1f0 [ 94.994408][ T3638] slab_free_freelist_hook+0x133/0x1b0 [ 94.999916][ T3638] __kmem_cache_free+0xb6/0x200 [ 95.004821][ T3638] sur40_probe+0x8a2/0xf10 [ 95.009290][ T3638] usb_probe_interface+0x5be/0xae0 [ 95.014452][ T3638] really_probe+0x24a/0xb40 [ 95.019008][ T3638] __driver_probe_device+0x1f5/0x390 [ 95.024348][ T3638] driver_probe_device+0x4f/0x420 [ 95.029437][ T3638] __device_attach_driver+0x2c6/0x510 [ 95.034900][ T3638] bus_for_each_drv+0x184/0x210 [ 95.039802][ T3638] __device_attach+0x2a7/0x480 [ 95.044618][ T3638] bus_probe_device+0xba/0x1d0 [ 95.049430][ T3638] device_add+0xbcf/0x1050 [ 95.053892][ T3638] usb_set_configuration+0x19d5/0x2030 [ 95.059393][ T3638] usb_generic_driver_probe+0x89/0x150 [ 95.064897][ T3638] usb_probe_device+0x126/0x250 [ 95.069844][ T3638] really_probe+0x24a/0xb40 [ 95.074402][ T3638] __driver_probe_device+0x1f5/0x390 [ 95.079830][ T3638] driver_probe_device+0x4f/0x420 [ 95.084906][ T3638] __device_attach_driver+0x2c6/0x510 [ 95.090331][ T3638] bus_for_each_drv+0x184/0x210 [ 95.095225][ T3638] __device_attach+0x2a7/0x480 [ 95.100076][ T3638] bus_probe_device+0xba/0x1d0 [ 95.104897][ T3638] device_add+0xbcf/0x1050 [ 95.109368][ T3638] usb_new_device+0xa01/0x15e0 [ 95.114182][ T3638] hub_event+0x2b2f/0x5200 [ 95.118650][ T3638] process_one_work+0x8ab/0x1160 [ 95.123633][ T3638] worker_thread+0xaf5/0x12a0 [ 95.128355][ T3638] kthread+0x29d/0x330 [ 95.132469][ T3638] ret_from_fork+0x1f/0x30 [ 95.136947][ T3638] [ 95.139310][ T3638] The buggy address belongs to the object at ffff888028812000 [ 95.139310][ T3638] which belongs to the cache kmalloc-4k of size 4096 [ 95.153411][ T3638] The buggy address is located 3218 bytes inside of [ 95.153411][ T3638] 4096-byte region [ffff888028812000, ffff888028813000) [ 95.166911][ T3638] [ 95.169271][ T3638] The buggy address belongs to the physical page: [ 95.175735][ T3638] page:ffffea0000a20400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28810 [ 95.185933][ T3638] head:ffffea0000a20400 order:3 compound_mapcount:0 compound_pincount:0 [ 95.194304][ T3638] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 95.202339][ T3638] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017442140 [ 95.210968][ T3638] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 95.219606][ T3638] page dumped because: kasan: bad access detected [ 95.226074][ T3638] page_owner tracks the page as allocated [ 95.231834][ T3638] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3651, tgid 3651 (udevd), ts 37463442215, free_ts 37429496459 [ 95.251878][ T3638] post_alloc_hook+0x173/0x1a0 [ 95.256740][ T3638] get_page_from_freelist+0x206b/0x2180 [ 95.262338][ T3638] __alloc_pages+0x1ec/0x4f0 [ 95.266974][ T3638] alloc_slab_page+0x5d/0x180 [ 95.271698][ T3638] new_slab+0x87/0x2d0 [ 95.275811][ T3638] ___slab_alloc+0xbc5/0x1240 [ 95.280534][ T3638] __kmem_cache_alloc_node+0x126/0x270 [ 95.286035][ T3638] __kmalloc+0xa3/0x240 [ 95.290246][ T3638] tomoyo_realpath_from_path+0xe2/0x5c0 [ 95.295840][ T3638] tomoyo_path2_perm+0x2cc/0x880 [ 95.300849][ T3638] tomoyo_path_rename+0x14b/0x1a0 [ 95.305922][ T3638] security_path_rename+0x168/0x200 [ 95.311154][ T3638] do_renameat2+0x691/0xc80 [ 95.315728][ T3638] __x64_sys_rename+0x82/0x90 [ 95.320460][ T3638] do_syscall_64+0x4c/0xa0 [ 95.324920][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.330855][ T3638] page last free stack trace: [ 95.335558][ T3638] free_unref_page_prepare+0x8e5/0x9e0 [ 95.341153][ T3638] free_unref_page+0x2e/0x3f0 [ 95.345879][ T3638] __unfreeze_partials+0x188/0x1e0 [ 95.351026][ T3638] put_cpu_partial+0x17c/0x250 [ 95.355824][ T3638] qlist_free_all+0x76/0xe0 [ 95.360371][ T3638] kasan_quarantine_reduce+0x144/0x160 [ 95.365878][ T3638] __kasan_slab_alloc+0x1e/0x80 [ 95.370786][ T3638] slab_post_alloc_hook+0x4b/0x490 [ 95.375946][ T3638] kmem_cache_alloc+0x18b/0x2f0 [ 95.380845][ T3638] vm_area_alloc+0x20/0xe0 [ 95.385301][ T3638] mmap_region+0xcbc/0x1c50 [ 95.389846][ T3638] do_mmap+0x9ce/0x10d0 [ 95.394043][ T3638] vm_mmap_pgoff+0x1c1/0x2d0 [ 95.398776][ T3638] do_syscall_64+0x4c/0xa0 [ 95.403434][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.409413][ T3638] [ 95.411775][ T3638] Memory state around the buggy address: [ 95.417442][ T3638] ffff888028812b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.425561][ T3638] ffff888028812c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.433656][ T3638] >ffff888028812c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.441763][ T3638] ^ [ 95.446385][ T3638] ffff888028812d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.454480][ T3638] ffff888028812d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.462585][ T3638] ================================================================== [ 95.487875][ T4320] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 95.521374][ T3638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.528650][ T3638] CPU: 1 PID: 3638 Comm: udevd Not tainted syzkaller #0 [ 95.535643][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.545747][ T3638] Call Trace: [ 95.549071][ T3638] [ 95.552045][ T3638] dump_stack_lvl+0x188/0x24e [ 95.556776][ T3638] ? memcpy+0x3c/0x60 [ 95.560830][ T3638] ? show_regs_print_info+0x12/0x12 [ 95.566094][ T3638] ? load_image+0x410/0x410 [ 95.570654][ T3638] panic+0x2d3/0x710 [ 95.574639][ T3638] ? bpf_jit_dump+0xd0/0xd0 [ 95.579198][ T3638] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 95.585232][ T3638] ? _raw_spin_unlock+0x40/0x40 [ 95.590143][ T3638] ? print_memory_metadata+0x314/0x400 [ 95.595657][ T3638] check_panic_on_warn+0x80/0xa0 [ 95.600625][ T3638] ? string+0x204/0x290 [ 95.604807][ T3638] end_report+0x66/0x110 [ 95.609084][ T3638] kasan_report+0x118/0x140 [ 95.613628][ T3638] ? string+0x204/0x290 [ 95.617809][ T3638] string+0x204/0x290 [ 95.621826][ T3638] vsnprintf+0x10db/0x1c20 [ 95.626267][ T3638] add_uevent_var+0x1cd/0x460 [ 95.630976][ T3638] ? __mutex_trylock_common+0x15c/0x260 [ 95.636549][ T3638] ? kobject_uevent_env+0x890/0x890 [ 95.641773][ T3638] ? rcu_is_watching+0x11/0xa0 [ 95.646596][ T3638] ? trace_contention_end+0x5f/0x170 [ 95.651921][ T3638] input_dev_uevent+0x16a/0xa10 [ 95.656834][ T3638] ? of_device_uevent+0xd7/0x290 [ 95.661801][ T3638] dev_uevent+0x4d6/0x740 [ 95.666164][ T3638] ? dev_uevent_name+0xa0/0xa0 [ 95.670960][ T3638] uevent_show+0x1a8/0x320 [ 95.675411][ T3638] dev_attr_show+0x50/0xb0 [ 95.679856][ T3638] sysfs_kf_seq_show+0x349/0x4b0 [ 95.684827][ T3638] ? device_get_ownership+0xa0/0xa0 [ 95.690061][ T3638] seq_read_iter+0x460/0xc50 [ 95.694685][ T3638] vfs_read+0x471/0x960 [ 95.698873][ T3638] ? kernel_read+0x1e0/0x1e0 [ 95.703490][ T3638] ? __x64_sys_newfstat+0x19a/0x220 [ 95.708716][ T3638] ? do_sys_openat2+0x20a/0x4f0 [ 95.713596][ T3638] ? __fdget_pos+0x2b5/0x360 [ 95.718213][ T3638] ksys_read+0x14d/0x260 [ 95.722491][ T3638] ? vfs_write+0x9a0/0x9a0 [ 95.726943][ T3638] ? lockdep_hardirqs_on+0x94/0x140 [ 95.732171][ T3638] do_syscall_64+0x4c/0xa0 [ 95.736712][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 95.741415][ T3638] ? clear_bhb_loop+0x60/0xb0 [ 95.746123][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.752068][ T3638] RIP: 0033:0x7f00428a7407 [ 95.756590][ T3638] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 95.776223][ T3638] RSP: 002b:00007ffdc9c121c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 95.784662][ T3638] RAX: ffffffffffffffda RBX: 00007f0043091880 RCX: 00007f00428a7407 [ 95.792654][ T3638] RDX: 0000000000001000 RSI: 000055b4767e38a0 RDI: 000000000000000c [ 95.800642][ T3638] RBP: 00007f00429efff0 R08: 0000000000000000 R09: 0000000000000000 [ 95.808646][ T3638] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 95.816647][ T3638] R13: 00007f00429efea0 R14: 0000000000000000 R15: 000055b4767c17a0 [ 95.824647][ T3638] [ 95.828270][ T3638] Kernel Offset: disabled [ 95.832604][ T3638] Rebooting in 86400 seconds..