last executing test programs: 17.430485975s ago: executing program 2 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='4', 0x1) 17.248022829s ago: executing program 2 (id=181): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f0000000200)={[{@background_gc_on}, {@inline_xattr}]}, 0x0, 0x551c, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/testfile\x00', 0x42, 0x1c0) syncfs(r0) fsetxattr(0xffffffffffffffff, &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000700)='val2\x00', 0x4, 0x0) 15.785415506s ago: executing program 2 (id=196): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000600), 0x1000) 15.071310814s ago: executing program 2 (id=201): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="01010101", 0x4) read(r0, &(0x7f00000001c0)=""/4, 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./myconfig/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0x0104', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) close(r4) symlinkat(&(0x7f0000000640)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='usbip-vudc.0', 0xc) close(r5) nanosleep(&(0x7f0000000740)={0x0, 0xbebc200}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000780), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x1, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000800), 0x2, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000880)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000009c0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000c40)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000d80)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000ec0)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000001000)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000001140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 14.702872973s ago: executing program 2 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd06, 0x0) 14.553971756s ago: executing program 2 (id=206): r0 = syz_usb_connect(0x0, 0x25, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='stm32g0-typec 0x35\n\x00', 0x14) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='stm32g0-typec 0x35\n\x00', 0x14) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='freeze\n\x00', 0x8) close(r3) 8.845541839s ago: executing program 4 (id=226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/infiniband_srp/srp-syz1-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) write(0xffffffffffffffff, &(0x7f0000000680)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/infiniband_srp/srp-syz2-1/add_target\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) 8.376015431s ago: executing program 4 (id=229): mkdir(&(0x7f0000000040)='./file2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='befs\x00', 0x0, 0x0) 8.285852583s ago: executing program 4 (id=231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/infiniband_srp/srp-syz1-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/infiniband_srp/srp-syz2-1/add_target\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) write(0xffffffffffffffff, &(0x7f0000000740)='id_ext=0000000000000001,ioc_guid=0000000000000001,dest=127.0.0.1:3260\x00', 0x44) 7.950985841s ago: executing program 4 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000280)="000ceefe00000000", 0x8, 0x1b) 7.808036955s ago: executing program 4 (id=237): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a40)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2) write$hidraw(r1, &(0x7f0000000400)='12345678', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/debug/hid/0005:057E:0306.0001/drm\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/debug/hid/0005:057E:0306.0002/drm\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/debug/hid/0005:057E:0306.0003/drm\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/debug/hid/0005:057E:0306.0004/drm\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/debug/hid/0005:057E:0306.0005/drm\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/debug/hid/0005:057E:0306.0006/drm\x00', 0x2, 0x0) 1.778300396s ago: executing program 0 (id=307): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='4', 0x1) write(r0, &(0x7f0000000540)='5', 0x1) 1.559893241s ago: executing program 0 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='0x1d6b\x00', 0x6) r5 = openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0x0104\x00', 0x6) r6 = openat(r3, &(0x7f0000000250)='bcdUSB\x00', 0x2, 0x0) write(r6, &(0x7f0000000290)='0x0210\x00', 0x6) mkdirat(r3, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r7 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='123456789\x00', 0xa) mkdirat(r3, &(0x7f00000004c0)='functions/uac2.usb0\x00', 0x1ff) mkdirat(r3, &(0x7f0000000500)='configs/c.1\x00', 0x1ff) r9 = openat(r3, &(0x7f0000000540)='configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/uac2.usb0\x00', r9, &(0x7f0000000700)='uac2.usb0\x00') r10 = openat(r3, &(0x7f0000000740)='UDC\x00', 0x2, 0x0) write(r10, &(0x7f0000000780)='usbip-vudc.0\x00', 0xc) write(r0, &(0x7f0000000880)='3\x00', 0x2) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3\n', 0x4}], 0x3) nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0) 1.524430462s ago: executing program 1 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/cpu/1/msr\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="000ceefe00000000", 0x8, 0x1b) 1.368287316s ago: executing program 3 (id=313): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') read(r0, &(0x7f0000000100)=""/1, 0x1000) close(r0) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1, 0x1000) 1.228024169s ago: executing program 3 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r0, 0x40186f40, &(0x7f00000001c0)="ffffffff00"/24) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_mnt/ubi0_0\x00', 0x2, 0x0) ioctl(r2, 0x40084f00, &(0x7f0000000780)="1000000000000000") write(r2, &(0x7f0000000700)="1234567890abcdef", 0x10) ioctl(r1, 0x40046f04, &(0x7f0000000800)='\x00\x00\x00\x00') 1.227799809s ago: executing program 1 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='dummy_udc.0\n', 0xc) 1.155035811s ago: executing program 1 (id=316): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000082, 0x0, 0x1}]}) 1.091895893s ago: executing program 1 (id=317): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a1\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='syzkaller0\n', 0xb) symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) bind$packet(r5, &(0x7f0000000540)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) bind$packet(r7, &(0x7f0000000600)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 974.810686ms ago: executing program 3 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000030000)="040000000000000000000000380100003801000000000000000000000200"/39) 907.009337ms ago: executing program 0 (id=319): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='username\x00', &(0x7f0000000280)='guest\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 717.594392ms ago: executing program 3 (id=320): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='4', 0x1) write(r0, &(0x7f0000000540)='5', 0x1) 587.477445ms ago: executing program 0 (id=321): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/platform/devices/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='4', 0x1) 420.035429ms ago: executing program 3 (id=322): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) close(r1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0) close(r2) 369.488431ms ago: executing program 0 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='2\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='none\x00', 0x4) 344.527091ms ago: executing program 1 (id=324): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') read(r0, &(0x7f0000000100)=""/1, 0x1000) close(r0) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1, 0x1000) 132.245917ms ago: executing program 0 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='dummy_udc.0\x00', 0xb) close(r2) 103.822937ms ago: executing program 1 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/cpu/1/msr\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="000ceefe00000000", 0x8, 0x1b) 103.103347ms ago: executing program 3 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d000000000001090224000100000000090400000103010200092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) ioctl(r1, 0x800448f1, &(0x7f0000000200)='\x00\x00\x00\x00') 0s ago: executing program 4 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r0, 0x40186f40, &(0x7f00000001c0)="ffffffff00"/24) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ubi/ubi0/chk_gen\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev_mnt/ubi0_0\x00', 0x2, 0x0) ioctl(r3, 0x40084f00, &(0x7f0000000780)="1000000000000000") write(r3, &(0x7f0000000700)="1234567890abcdef", 0x10) ioctl(r2, 0x40046f04, &(0x7f0000000800)='\x00\x00\x00\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 73.472378][ T4258] cgroup: Unknown subsys name 'net' [ 73.607048][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.088646][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.103427][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.111796][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.122474][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.133409][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.141957][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.150006][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.158812][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.167921][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.175583][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.179638][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.182770][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.190624][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.197512][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.205021][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.212099][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.218917][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.225347][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.232883][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.239723][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.247820][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.255088][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.267589][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.275904][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.284293][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.296453][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.308293][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.323073][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.337031][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.345401][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.354377][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.714930][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 77.758847][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 77.842316][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.909875][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 77.974940][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.982795][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.990804][ T4278] device bridge_slave_0 entered promiscuous mode [ 77.999215][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 78.024553][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.031761][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.039654][ T4278] device bridge_slave_1 entered promiscuous mode [ 78.089809][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.097255][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.106146][ T4284] device bridge_slave_0 entered promiscuous mode [ 78.142560][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.149776][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.160707][ T4284] device bridge_slave_1 entered promiscuous mode [ 78.182453][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.195746][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.206060][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.214103][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.237694][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.262045][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.269421][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.277721][ T4271] device bridge_slave_0 entered promiscuous mode [ 78.286172][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.293839][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.304809][ T4272] device bridge_slave_1 entered promiscuous mode [ 78.313802][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.332065][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.350757][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.358221][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.369181][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.396092][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.403352][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.411419][ T4286] device bridge_slave_0 entered promiscuous mode [ 78.426042][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.433304][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.441545][ T4286] device bridge_slave_1 entered promiscuous mode [ 78.467331][ T4284] team0: Port device team_slave_0 added [ 78.475748][ T4278] team0: Port device team_slave_0 added [ 78.497831][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.508930][ T4284] team0: Port device team_slave_1 added [ 78.517246][ T4278] team0: Port device team_slave_1 added [ 78.531549][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.542707][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.572298][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.584382][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.608916][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.616094][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.642828][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.663198][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.687592][ T4272] team0: Port device team_slave_0 added [ 78.694131][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.704439][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.731526][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.743154][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.750109][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.776327][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.801771][ T4272] team0: Port device team_slave_1 added [ 78.819022][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.826443][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.860711][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.882072][ T4271] team0: Port device team_slave_0 added [ 78.899605][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.906690][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.933587][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.947831][ T4286] team0: Port device team_slave_0 added [ 78.960061][ T4271] team0: Port device team_slave_1 added [ 78.974756][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.984165][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.011130][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.023569][ T4286] team0: Port device team_slave_1 added [ 79.089442][ T4284] device hsr_slave_0 entered promiscuous mode [ 79.096967][ T4284] device hsr_slave_1 entered promiscuous mode [ 79.111748][ T4278] device hsr_slave_0 entered promiscuous mode [ 79.118653][ T4278] device hsr_slave_1 entered promiscuous mode [ 79.126122][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.134474][ T4278] Cannot create hsr debugfs directory [ 79.141446][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.148701][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.175141][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.205111][ T4272] device hsr_slave_0 entered promiscuous mode [ 79.212418][ T4272] device hsr_slave_1 entered promiscuous mode [ 79.219180][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.226942][ T4272] Cannot create hsr debugfs directory [ 79.236936][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.244311][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.271019][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.282696][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.289789][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.316465][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.327601][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 79.334027][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 79.340451][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 79.365649][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.373384][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.401371][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 79.401386][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 79.414367][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.516123][ T4271] device hsr_slave_0 entered promiscuous mode [ 79.523538][ T4271] device hsr_slave_1 entered promiscuous mode [ 79.530237][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.537973][ T4271] Cannot create hsr debugfs directory [ 79.559768][ T4286] device hsr_slave_0 entered promiscuous mode [ 79.567144][ T4286] device hsr_slave_1 entered promiscuous mode [ 79.573867][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.582348][ T4286] Cannot create hsr debugfs directory [ 79.904811][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.916673][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.931307][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.945838][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.997962][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.014471][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.027319][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.064429][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.077343][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.106670][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.116442][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.147512][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.228667][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.239085][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.270674][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.284560][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.355585][ T4286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.368575][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.393786][ T4286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.431729][ T4286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.449752][ T4286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.465146][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.475820][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.483520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.494087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.518734][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.550341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.560463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.570670][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.578348][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.588442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.597217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.605855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.622013][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.638625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.650339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.663755][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.670928][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.688770][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.714064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.723656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.732591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.743974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.755077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.765612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.773042][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.782996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.791884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.800616][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.808087][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.816556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.826103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.863227][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.872620][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.887298][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.897529][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.908223][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.915701][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.924625][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.934647][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.944178][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.953071][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.963669][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.996916][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.006296][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.017918][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.025210][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.035467][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.044659][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.053423][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.063230][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.074824][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.084376][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.093947][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.112071][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.121599][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.129695][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.138716][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.149062][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.164382][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.176048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.187990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.204925][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.225916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.236213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.246964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.255839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.265276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.274986][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.282377][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.290683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.317308][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.339686][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.348557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.358235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.367660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.378976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.388407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.411074][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 81.417350][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 81.423935][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 81.441560][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.457455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.482329][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 81.483188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.488504][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 81.504502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.532548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.545496][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554199][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.605479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.615119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.624904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.647374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.675717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.689916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.701305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.713115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.723317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.745527][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.778094][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.796613][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.805843][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.846495][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.858175][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.868975][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.888091][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.899521][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.909342][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.918934][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.942260][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.955460][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.963360][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.980476][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.990551][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.006249][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.013652][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.032769][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.048584][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.056214][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.082502][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.098676][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.116247][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.157392][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.177332][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.194261][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.212359][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.231578][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.252170][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.265702][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.292168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.331630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.339266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.358144][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.398147][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.419557][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.428055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.436707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.452910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.460645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.515555][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.555926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.599125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.647193][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.668240][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.693251][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.709432][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.720774][ T4284] device veth0_vlan entered promiscuous mode [ 82.750219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.772196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.815515][ T4278] device veth0_vlan entered promiscuous mode [ 82.840249][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.851699][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.879378][ T4284] device veth1_vlan entered promiscuous mode [ 82.908849][ T4278] device veth1_vlan entered promiscuous mode [ 82.931774][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.940347][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.960669][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.976237][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.044755][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.060149][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.084212][ T4284] device veth0_macvtap entered promiscuous mode [ 83.116240][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.134368][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.144360][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.173815][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.193711][ T4278] device veth0_macvtap entered promiscuous mode [ 83.208436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.219551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.229210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.237840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.246690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.271099][ T4284] device veth1_macvtap entered promiscuous mode [ 83.285039][ T4278] device veth1_macvtap entered promiscuous mode [ 83.322942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.338581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.348595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.358100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.376544][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.416918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.426238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.438795][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.452817][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.463881][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.476563][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.489965][ T4271] device veth0_vlan entered promiscuous mode [ 83.497013][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 83.503662][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 83.510692][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 83.525657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.535551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.545609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.555138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.565448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.571443][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 83.574939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.579539][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 83.592192][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.604083][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.615418][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.628341][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.661691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.669661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.681586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.690233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.700407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.709359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.718533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.727828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.740749][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753459][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.762640][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.774826][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.801720][ T4286] device veth0_vlan entered promiscuous mode [ 83.811508][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820601][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.836865][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.846480][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.859838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.873990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.885081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.895003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.904047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.913226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.921264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.931581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.945364][ T4271] device veth1_vlan entered promiscuous mode [ 83.961660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.976461][ T4272] device veth0_vlan entered promiscuous mode [ 84.018041][ T4286] device veth1_vlan entered promiscuous mode [ 84.075409][ T4272] device veth1_vlan entered promiscuous mode [ 84.145389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.159135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.179174][ T4272] device veth0_macvtap entered promiscuous mode [ 84.193925][ T4271] device veth0_macvtap entered promiscuous mode [ 84.226916][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.235981][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.247614][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.257159][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.279627][ T4271] device veth1_macvtap entered promiscuous mode [ 84.299948][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.305348][ T4286] device veth0_macvtap entered promiscuous mode [ 84.314415][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.327397][ T4272] device veth1_macvtap entered promiscuous mode [ 84.343284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.356671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.366581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.375180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.385125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.395089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.429718][ T4286] device veth1_macvtap entered promiscuous mode [ 84.439475][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.459862][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.470777][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.482117][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.494768][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.526055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.538677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.548290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.571294][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.579294][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.593540][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.606307][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.616824][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.627474][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.637589][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.648513][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.659975][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.675021][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.686978][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.697787][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.708402][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.718545][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.729407][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.739501][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.750290][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.763106][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.775491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.786425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.796191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.806253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.815486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.827309][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.838344][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.852880][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.864916][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.880790][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.890540][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.902144][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.912606][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.925255][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.935733][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.946869][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.960556][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.973243][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.984469][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.990992][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.999372][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.003454][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.020663][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.031156][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.041752][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.051773][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.062684][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.079992][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.091475][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.098654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.108596][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.117182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.126532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.135913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.144936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.152973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.163168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.174287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.184986][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.194780][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.204651][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.215386][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.229982][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.239021][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.258302][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.268090][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.286179][ T4286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.295655][ T4286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.305589][ T4286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.314657][ T4286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.561742][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 85.567906][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 85.574370][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 85.635151][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.644397][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 85.650452][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 85.692007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.710618][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.710665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.735189][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.746379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.768515][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.778768][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.800107][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.820014][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.845150][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.866521][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.914315][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.934968][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.957219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.974677][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.995976][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.003460][ T4371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.014494][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.061890][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.213896][ T22] usb 1-1: Dual-Role OTG device on HNP port [ 86.229152][ T22] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 86.242717][ T4377] loop0: detected capacity change from 0 to 64 [ 86.249850][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.293173][ T4362] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.302052][ T4377] block2mtd: erasesize must be a divisor of device size [ 86.331431][ T22] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 86.344410][ T4377] UBIFS error (pid: 4377): cannot open "ubi0:testvol", error -19 [ 86.361618][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.534033][ T4362] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 86.551421][ T4362] usb 4-1: can't read configurations, error -71 [ 86.590387][ T4379] i2c_designware pcspkr: error -ENXIO: IRQ index 0 not found [ 86.606146][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 86.609775][ T4383] loop1: detected capacity change from 0 to 256 [ 86.627315][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.794147][ T4381] svc: failed to register nfsdv3 RPC service (errno 111). [ 86.852848][ T4381] svc: failed to register nfsaclv3 RPC service (errno 111). [ 87.171733][ T14] cfg80211: failed to load regulatory.db [ 87.198535][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.440467][ T130] smpboot: CPU 1 is now offline [ 87.658654][ T4398] x86: Booting SMP configuration: [ 87.733807][ T4398] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 88.089727][ T27] usbhid 5-1:1.0: can't add hid device: -71 [ 88.112765][ T27] usbhid: probe of 5-1:1.0 failed with error -71 [ 88.182089][ T27] usb 5-1: USB disconnect, device number 2 [ 88.197626][ T4368] udevd[4368]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory [ 88.219035][ T4362] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.342747][ T4413] DRIVER=virtio-pci [ 88.342747][ T4413] PCI_CLASS=0000 [ 88.342747][ T4413] PCI_ID=1AF4:1004 [ 88.342747][ T4413] PCI_SUBSYS_ID=1AF4:0008 [ 88.342747][ T4413] PCI_SLOT_NAME=0000:00:03.0 [ 88.342747][ T4413] MODALIAS=pci:v00001AF4d00001004sv00001AF4sd00000008bc00sc00i00 [ 88.433989][ T4362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.466595][ T4362] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.513539][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.539049][ T4362] usb 3-1: config 0 descriptor?? [ 88.894355][ T4427] loop0: detected capacity change from 0 to 64 [ 88.965687][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.992949][ T4362] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 89.165805][ T14] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 89.191080][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.205434][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.272381][ T14] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 004 [ 89.280769][ T4322] usb 3-1: USB disconnect, device number 2 [ 89.287955][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.332185][ T4429] fido_id[4429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 89.459279][ T14] (null): failure setting delay to 10us [ 89.466216][ T14] i2c-tiny-usb: probe of 4-1:1.0 failed with error -5 [ 89.512917][ T14] usb 4-1: USB disconnect, device number 4 [ 89.528924][ T4421] loop1: detected capacity change from 0 to 40427 [ 89.547853][ T4421] ======================================================= [ 89.547853][ T4421] WARNING: The mand mount option has been deprecated and [ 89.547853][ T4421] and is ignored by this kernel. Remove the mand [ 89.547853][ T4421] option from the mount to silence this warning. [ 89.547853][ T4421] ======================================================= [ 89.774664][ T4421] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 89.815581][ T4421] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.890691][ T4421] F2FS-fs (loop1): invalid crc value [ 90.009997][ T4421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.388945][ T4421] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.447114][ T4421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.575344][ T4454] f2fs_ckpt-7:1: attempt to access beyond end of device [ 90.575344][ T4454] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.691118][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.726505][ T4322] nintendo 0005:057E:2007.0002: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 90.811101][ T4362] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.903379][ T14] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.926480][ T14] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 90.949468][ T4477] ubi0: attaching mtd0 [ 90.954683][ T14] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.967862][ T4477] ubi0: scanning is finished [ 90.973649][ T4477] ubi0: empty MTD device detected [ 90.981875][ T14] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 90.996842][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.011952][ T4362] usb 5-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 91.026335][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.042846][ T14] usb 4-1: Product: syz [ 91.055293][ T14] usb 4-1: Manufacturer: syz [ 91.060286][ T14] usb 4-1: SerialNumber: syz [ 91.074200][ T4477] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.087021][ T4468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.095893][ T4468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.105978][ T4477] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.116503][ T4477] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.127548][ T4477] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 91.135667][ T4477] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.143289][ T4477] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.152007][ T4477] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 58502513 [ 91.164552][ T4477] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.177807][ T4479] ubi0: background thread "ubi_bgt0d" started, PID 4479 [ 91.365417][ T4362] usb 5-1: USB disconnect, device number 3 [ 91.918156][ T4290] Bluetooth: hci1: hardware error 0x00 [ 91.971798][ T4277] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 91.978809][ T4277] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 91.986129][ T4277] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 91.993224][ T4277] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 92.023930][ T4277] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 92.074096][ T4277] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 92.136847][ T14] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:0a:95:81:86:33 [ 92.163022][ T14] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 92.180445][ T14] usb 4-1: USB disconnect, device number 5 [ 92.490632][ T4492] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 92.536160][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.546218][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.554537][ T4492] CIFS: Attempting to mount \\127.0.0.1\share [ 92.566174][ T4492] CIFS: VFS: Error connecting to socket. Aborting operation. [ 92.574592][ T4492] CIFS: VFS: cifs_mount failed w/return code = -111 [ 92.731061][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.841014][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 92.859820][ T4322] nintendo 0005:057E:2007.0002: using factory cal for left stick [ 92.900970][ T4362] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.913828][ T14] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.936028][ T14] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 92.956940][ T14] usb 4-1: config 1 interface 0 has no altsetting 0 [ 92.978260][ T14] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 92.997877][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.016637][ T14] usb 4-1: Product: syz [ 93.021107][ T14] usb 4-1: Manufacturer: syz [ 93.026213][ T14] usb 4-1: SerialNumber: syz [ 93.054040][ T4468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.067299][ T4468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.104920][ T4362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.125635][ T4362] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 93.146404][ T4362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.170063][ T4362] usb 2-1: config 0 descriptor?? [ 93.521916][ T4507] ubi: mtd0 is already attached to ubi0 [ 93.603299][ T4362] usbhid 2-1:0.0: can't add hid device: -71 [ 93.610732][ T4362] usbhid: probe of 2-1:0.0 failed with error -71 [ 93.631076][ T4362] usb 2-1: USB disconnect, device number 2 [ 93.795750][ T4505] loop0: detected capacity change from 0 to 40427 [ 93.823382][ T4505] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 93.840341][ T4505] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.863661][ T4505] F2FS-fs (loop0): invalid crc value [ 93.883906][ T4505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.958144][ T4505] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.972620][ T4505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.023959][ T4511] f2fs_ckpt-7:0: attempt to access beyond end of device [ 94.023959][ T4511] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.121063][ T4277] Bluetooth: hci1: command 0x1003 tx timeout [ 94.127311][ T4290] Bluetooth: hci1: Opcode 0x1009 failed: -110 [ 94.347307][ T14] rtl8150 4-1:1.0: couldn't reset the device [ 94.366486][ T14] rtl8150: probe of 4-1:1.0 failed with error -5 [ 94.388849][ T4517] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 94.400301][ T14] usb 4-1: USB disconnect, device number 6 [ 94.901249][ T4533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.51'. [ 94.920955][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 94.928926][ T4322] nintendo 0005:057E:2007.0002: using factory cal for right stick [ 95.060180][ T4543] ubi: mtd0 is already attached to ubi0 [ 95.115961][ T4320] smpboot: CPU 1 is now offline [ 95.126986][ T4545] x86: Booting SMP configuration: [ 95.141004][ T4545] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 95.251002][ T4362] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.330952][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.432957][ T4362] usb 4-1: config index 0 descriptor too short (expected 68, got 50) [ 95.452250][ T4362] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 95.490983][ T4362] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 95.520984][ T4362] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.537069][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.566442][ T4320] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 95.581545][ T4362] usb 4-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 0.00 [ 95.607651][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.626949][ T4362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.640567][ T4320] usb 5-1: config 0 descriptor?? [ 95.874914][ T4362] usb 4-1: USB disconnect, device number 7 [ 95.889673][ T4549] loop0: detected capacity change from 0 to 40427 [ 95.900603][ T4549] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 95.908973][ T4549] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.919090][ T4549] F2FS-fs (loop0): invalid crc value [ 95.930059][ T4549] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.970504][ T4549] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.977851][ T4549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.000583][ T4559] f2fs_ckpt-7:0: attempt to access beyond end of device [ 96.000583][ T4559] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.077382][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 96.084751][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 96.096459][ T4320] usb 5-1: USB disconnect, device number 4 [ 96.423011][ T4567] loop0: detected capacity change from 0 to 64 [ 96.448137][ T4567] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.464299][ T4567] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.473458][ T4569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.65'. [ 96.482965][ T4567] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.495884][ T4567] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 97.021116][ T4362] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.081298][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 97.089554][ T4322] nintendo 0005:057E:2007.0002: Failed to read left stick cal, using defaults; e=-110 [ 97.146632][ T4593] netlink: 48 bytes leftover after parsing attributes in process `syz.4.77'. [ 97.223914][ T4362] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 97.270535][ T4362] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.298339][ T4362] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.343900][ T4362] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 97.368582][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.398586][ T4362] usb 4-1: Product: syz [ 97.424587][ T4362] usb 4-1: Manufacturer: syz [ 97.441743][ T4362] usb 4-1: SerialNumber: syz [ 97.460753][ T4579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.527194][ T4585] loop1: detected capacity change from 0 to 40427 [ 97.544173][ T4585] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 97.561386][ T4585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.590990][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.599142][ T4585] F2FS-fs (loop1): invalid crc value [ 97.626587][ T4585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.687735][ T4585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.708666][ T4579] usb usb2: selecting invalid altsetting 1 [ 97.714860][ T4585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.741677][ T4362] usb 4-1: USB disconnect, device number 8 [ 97.781022][ T4602] f2fs_ckpt-7:1: attempt to access beyond end of device [ 97.781022][ T4602] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.792699][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.817473][ T4320] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 97.837336][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.861483][ T4320] usb 5-1: config 0 descriptor?? [ 98.023863][ T4601] loop0: detected capacity change from 0 to 32768 [ 98.102773][ T4601] JBD2: Ignoring recovery information on journal [ 98.180527][ T4601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.304390][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 98.310643][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.351291][ T4320] usb 5-1: USB disconnect, device number 5 [ 98.400746][ T4612] using random self ethernet address [ 98.425819][ T4612] using random host ethernet address [ 98.448142][ T26] audit: type=1800 audit(1786998285.679:2): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.83" name="ifname" dev="configfs" ino=35238 res=0 errno=0 [ 98.474918][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 98.845376][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.874924][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.955022][ T4634] CIFS: Attempting to mount \\127.0.0.1\share [ 98.965489][ T4634] CIFS: VFS: Error connecting to socket. Aborting operation. [ 98.976862][ T4634] CIFS: VFS: cifs_mount failed w/return code = -111 [ 99.079972][ T4637] loop4: detected capacity change from 0 to 64 [ 99.241102][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 99.249130][ T4322] nintendo 0005:057E:2007.0002: Failed to read right stick cal, using defaults; e=-110 [ 99.313209][ T4320] libceph: mon0 (1)127.0.0.1:6789 protocol error, garbage tag during connect [ 99.552146][ T4362] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 99.630980][ T4320] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.812956][ T4362] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 99.823030][ T4320] usb 5-1: not running at top speed; connect to a high speed hub [ 99.833918][ T4320] usb 5-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.00 [ 99.843924][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 99.852171][ T4320] usb 5-1: Product: syz [ 99.856532][ T4320] usb 5-1: Manufacturer: syz [ 99.864705][ T4320] ums-datafab 5-1:1.0: USB Mass Storage device detected [ 99.875042][ T4320] ums-datafab 5-1:1.0: This device (07c4,a000,0000 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 99.875042][ T4320] Please send a copy of this message to and [ 99.902704][ T4320] scsi host1: usb-storage 5-1:1.0 [ 100.037813][ T4645] ceph: No mds server is up or the cluster is laggy [ 100.045798][ T4320] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 100.307201][ T4654] ceph: No mds server is up or the cluster is laggy [ 100.343524][ T4362] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 100.416627][ T4671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 100.468454][ T4673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.477504][ T4673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.926322][ T4323] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS [ 100.941458][ T4323] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0000 PQ: 0 ANSI: 0 CCS [ 100.960202][ T4323] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 100.970532][ T4323] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 101.321054][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 101.332561][ T4322] nintendo 0005:057E:2007.0002: using factory cal for IMU [ 102.188273][ T4685] loop0: detected capacity change from 0 to 32768 [ 102.214604][ T4685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.105 (4685) [ 102.263537][ T4685] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.276170][ T4699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 102.286133][ T4685] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 102.307053][ T4685] BTRFS info (device loop0): using free space tree [ 102.355657][ T4333] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 102.377127][ T4685] BTRFS error (device loop0): failed to load root extent [ 102.455979][ T4685] BTRFS error (device loop0): open_ctree failed: -22 [ 102.766020][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.775309][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.954843][ T4727] usb 5-1: USB disconnect, device number 6 [ 102.994275][ T33] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 102.999797][ T11] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 103.023091][ T33] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 103.027412][ T11] sd 1:0:0:0: [sdb] Sense not available. [ 103.040470][ T11] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 103.046437][ T33] sd 1:0:0:1: [sdc] Sense not available. [ 103.054679][ T11] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 103.060610][ T33] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 103.060695][ T11] sd 1:0:0:0: [sdb] Write Protect is off [ 103.076834][ T33] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 103.083319][ T11] sd 1:0:0:0: [sdb] Asking for cache data failed [ 103.084723][ T33] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 103.099412][ T11] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 103.118162][ T33] sd 1:0:0:1: [sdc] Asking for cache data failed [ 103.125222][ T33] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 103.128471][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 103.159207][ T33] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 103.211021][ T4725] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.273567][ T4742] vidtv vidtv.0: Successfully removed vidtv [ 103.401052][ T4322] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 103.409064][ T4322] nintendo 0005:057E:2007.0002: Failed to read IMU cal, using defaults; ret=-110 [ 103.419588][ T4322] nintendo 0005:057E:2007.0002: Unable to read IMU calibration data [ 103.428583][ T4725] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 103.438098][ T4725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.449976][ T4725] usb-storage 4-1:1.0: USB Mass Storage device detected [ 103.458490][ T4725] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 103.467768][ T4725] scsi host1: usb-storage 4-1:1.0 [ 103.511071][ T4727] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.702480][ T4727] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 103.713382][ T4727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.728538][ T4727] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 104.133022][ T4727] mos7840: probe of ttyUSB0 failed with error -5 [ 104.209707][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.265127][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.274052][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.481168][ T4322] nintendo 0005:057E:2007.0002: Failed to set report mode; ret=-110 [ 105.489623][ T4322] nintendo 0005:057E:2007.0002: Failed to initialize controller; ret=-110 [ 105.507957][ T4322] nintendo 0005:057E:2007.0002: probe - fail = -110 [ 105.515169][ T4322] nintendo: probe of 0005:057E:2007.0002 failed with error -110 [ 105.712903][ T4322] usb 5-1: USB disconnect, device number 7 [ 105.747579][ T4322] mos7840 5-1:1.0: device disconnected [ 105.873870][ T26] audit: type=1800 audit(1786998293.099:3): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.126" name="ifname" dev="configfs" ino=35869 res=0 errno=0 [ 106.019269][ T4777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.071769][ T4777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.089417][ T4768] fido_id[4768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.511107][ T4747] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 106.711686][ T4747] usb 4-1: device firmware changed [ 106.721427][ T4322] usb 4-1: USB disconnect, device number 9 [ 106.771120][ T4725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.973024][ T4725] usb 3-1: config index 0 descriptor too short (expected 92, got 74) [ 106.988758][ T4725] usb 3-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 0.00 [ 107.005299][ T4322] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.015986][ T4725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.025109][ T4725] usb 3-1: Product: syz [ 107.029418][ T4725] usb 3-1: Manufacturer: syz [ 107.034553][ T4725] usb 3-1: SerialNumber: syz [ 107.059167][ T4725] digi_acceleport 3-1:1.0: Digi 2 port USB adapter converter detected [ 107.145720][ T4725] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 107.173265][ T4725] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 107.201311][ T4322] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00 [ 107.221526][ T4725] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 107.241942][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.261106][ T4362] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.467068][ T4362] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.514605][ T4362] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.543058][ T4362] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 107.569460][ T4362] usb 5-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 107.584230][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.593127][ T4362] usb 5-1: Product: syz [ 107.603900][ T4362] usb 5-1: Manufacturer: syz [ 107.614389][ T4362] usb 5-1: SerialNumber: syz [ 107.655567][ T4322] r8152-cfgselector 4-1: reset high-speed USB device number 10 using dummy_hcd [ 107.674293][ T4800] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.705432][ T4800] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.725759][ T4800] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.777008][ T4362] af9005: boot packet bulk message failed: -71 (252/0) [ 107.789520][ T4362] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 107.855487][ T4362] usb 5-1: Direct firmware load for af9005.fw failed with error -2 [ 107.867030][ T4362] usb 5-1: Falling back to sysfs fallback for: af9005.fw [ 107.875524][ T4819] usbip-vudc usbip-vudc.0: gadget not bound [ 107.886805][ T4819] usbip-vudc usbip-vudc.0: gadget not bound [ 108.231926][ T4322] r8152-cfgselector 4-1: device descriptor read/all, error -71 [ 109.073145][ T4322] r8152 4-1:1.0: USB reset failed, errno=-19 [ 109.095154][ T4322] r8152-cfgselector 4-1: Unknown version 0x0000 [ 109.125484][ T4322] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 109.206697][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.225970][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.264349][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.285668][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.571747][ T4322] libceph: mon0 (2)127.0.0.1:3300 socket closed (con state V2_BANNER_PREFIX) [ 109.638390][ T4844] CIFS: Attempting to mount \\127.0.0.1\share [ 109.648093][ T4844] CIFS: VFS: Error connecting to socket. Aborting operation. [ 109.656358][ T4844] CIFS: VFS: cifs_mount failed w/return code = -111 [ 109.722565][ T4846] usbip-vudc usbip-vudc.0: gadget not bound [ 109.729490][ T4846] usbip-vudc usbip-vudc.0: gadget not bound [ 109.862515][ T4322] libceph: mon0 (2)127.0.0.1:3300 socket error on write [ 109.872789][ T4848] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.885910][ T4848] svc: failed to register nfsaclv3 RPC service (errno 111). [ 110.100672][ T4855] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 110.246386][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.255545][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.272792][ T4322] usb 1-1: USB disconnect, device number 2 [ 110.380182][ T4840] ceph: No mds server is up or the cluster is laggy [ 110.388173][ T4727] libceph: mon0 (2)127.0.0.1:3300 socket error on write [ 110.443135][ T4728] usb 3-1: USB disconnect, device number 3 [ 110.480320][ T4728] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 110.537472][ T4728] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 110.588778][ T4728] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 110.631143][ T4728] digi_acceleport 3-1:1.0: device disconnected [ 110.943598][ T4874] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 3088 at bInterval 1 > max ISOC 1023, may drop data! [ 110.994379][ T4880] lo speed is unknown, defaulting to 1000 [ 111.005153][ T4874] configfs-gadget.g1 gadget.32: FS Capture: Req. wMaxPacketSize 3088 at bInterval 1 > max ISOC 1023, may drop data! [ 111.021525][ T4877] CIFS: Attempting to mount \\127.0.0.1\share [ 111.029173][ T4879] usbip-vudc usbip-vudc.0: gadget not bound [ 111.035683][ T4880] lo speed is unknown, defaulting to 1000 [ 111.043830][ T4877] CIFS: VFS: Error connecting to socket. Aborting operation. [ 111.052670][ T4879] usbip-vudc usbip-vudc.0: gadget not bound [ 111.066294][ T4880] lo speed is unknown, defaulting to 1000 [ 111.091165][ T4877] CIFS: VFS: cifs_mount failed w/return code = -111 [ 111.119029][ T4883] lo speed is unknown, defaulting to 1000 [ 111.166818][ T4884] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.278833][ T4884] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 111.489111][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 111.514556][ T4880] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.527396][ T26] audit: type=1800 audit(1786998298.759:4): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.165" name="ifname" dev="configfs" ino=36520 res=0 errno=0 [ 111.533027][ T4883] lo speed is unknown, defaulting to 1000 [ 111.576798][ T4880] lo speed is unknown, defaulting to 1000 [ 111.595813][ T4883] lo speed is unknown, defaulting to 1000 [ 111.616753][ T4880] lo speed is unknown, defaulting to 1000 [ 111.642579][ T4880] lo speed is unknown, defaulting to 1000 [ 111.651249][ T4728] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.680639][ T4880] lo speed is unknown, defaulting to 1000 [ 111.760476][ T4880] lo speed is unknown, defaulting to 1000 [ 111.814893][ T4887] rdma_rxe: rxe_register_device failed with error -23 [ 111.851693][ T4728] usb 1-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 111.874423][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.908738][ T4887] rdma_rxe: failed to add veth0 [ 111.914614][ T4728] usb 1-1: Product: syz [ 111.929370][ T4728] usb 1-1: Manufacturer: syz [ 112.054002][ T4914] loop1: detected capacity change from 0 to 512 [ 112.140764][ T4914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.166845][ T4914] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.251251][ T4322] lo speed is unknown, defaulting to 1000 [ 112.260452][ T4883] infiniband syz0: set active [ 112.274369][ T4883] infiniband syz0: added lo [ 112.290304][ T4883] rdma_rxe: unable to create cq [ 112.304086][ T4883] infiniband syz0: Couldn't create ib_mad CQ [ 112.341432][ T4883] infiniband syz0: Couldn't open port 1 [ 112.390732][ T4728] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:046D:C299.0003/input/input5 [ 112.417670][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 112.424929][ T4883] RDS/IB: syz0: added [ 112.429605][ T4883] smc: adding ib device syz0 with port count 1 [ 112.451189][ T4883] smc: ib device syz0 port 1 has pnetid [ 112.469526][ T4725] lo speed is unknown, defaulting to 1000 [ 112.496798][ T4883] lo speed is unknown, defaulting to 1000 [ 112.524785][ T4728] logitech 0003:046D:C299.0003: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.0-1/input0 [ 112.565463][ T4728] logitech 0003:046D:C299.0003: Force feedback support for Logitech Gaming Wheels [ 112.871082][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.959938][ T4883] lo speed is unknown, defaulting to 1000 [ 113.083023][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.110982][ T4322] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 113.148137][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.180349][ T4322] usb 3-1: config 0 descriptor?? [ 113.224328][ T4883] lo speed is unknown, defaulting to 1000 [ 113.402502][ T4932] usbip-vudc usbip-vudc.0: Device already connected [ 113.429355][ T4933] usbip_vudc: v_rx exit with error -32 [ 113.533331][ T4883] lo speed is unknown, defaulting to 1000 [ 113.599212][ T4322] usbhid 3-1:0.0: can't add hid device: -71 [ 113.606608][ T4322] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.623151][ T4322] usb 3-1: USB disconnect, device number 4 [ 113.713019][ T4728] usb 1-1: USB disconnect, device number 3 [ 113.723647][ T4883] lo speed is unknown, defaulting to 1000 [ 114.338542][ T4948] usbip_vudc: v_rx exit with error -32 [ 114.824784][ T4965] usbip-vudc usbip-vudc.0: Device already connected [ 114.871329][ T4967] usbip_vudc: v_rx exit with error -32 [ 115.269261][ T4955] loop2: detected capacity change from 0 to 40427 [ 115.303815][ T4955] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 115.320169][ T4955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.349968][ T4955] F2FS-fs (loop2): invalid crc value [ 115.382307][ T4955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.519098][ T4955] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.540953][ T4955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.611625][ T4982] f2fs_ckpt-7:2: attempt to access beyond end of device [ 115.611625][ T4982] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.691044][ T4991] usbip_vudc: v_rx exit with error -32 [ 116.031143][ T5004] usbip-vudc usbip-vudc.0: Device already connected [ 116.096037][ T5005] usbip_vudc: v_rx exit with error -32 [ 116.501107][ T5015] siw: device registration error -23 [ 116.542873][ T5018] rdma_rxe: rxe_register_device failed with error -23 [ 116.568682][ T5018] rdma_rxe: failed to add lo [ 116.587799][ T5015] siw: device registration error -23 [ 116.618887][ T5015] rdma_rxe: rxe_register_device failed with error -23 [ 116.646456][ T5015] rdma_rxe: failed to add veth0 [ 116.716546][ T5018] ib_srp: QP creation failed for dev syz1: -22 [ 116.791427][ T5015] scsi host2: ib_srp: Connection 0/2 to 127.0.0.1 failed [ 117.440945][ T4728] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.450997][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.635308][ T4728] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 117.645972][ T4322] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.660957][ T4728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 117.669172][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.689847][ T4728] usb 3-1: Product: syz [ 117.694237][ T4322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.703513][ T4728] usb 3-1: Manufacturer: syz [ 117.721169][ T4728] i2c-tiny-usb 3-1:1.0: version 0.00 found at bus 003 address 005 [ 117.729302][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.763728][ T4322] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.780956][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.799820][ T4322] usb 1-1: Product: syz [ 117.804390][ T4322] usb 1-1: Manufacturer: syz [ 117.824135][ T4322] cdc_wdm 1-1:1.0: skipping garbage [ 117.829410][ T4322] cdc_wdm 1-1:1.0: skipping garbage [ 117.860766][ T4322] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 117.877396][ T4322] cdc_wdm 1-1:1.0: Unknown control protocol [ 118.178925][ T5040] PM: suspend entry (s2idle) [ 118.232287][ T5038] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 118.353046][ T5040] Filesystems sync: 0.163 seconds [ 118.900495][ T5013] loop3: detected capacity change from 0 to 262144 [ 118.922031][ T5013] BTRFS: device fsid 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d devid 1 transid 8 /dev/loop3 scanned by syz.3.199 (5013) [ 118.970725][ T5013] BTRFS info (device loop3): first mount of filesystem 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d [ 118.982076][ T5013] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 118.991587][ T5013] BTRFS info (device loop3): using free space tree [ 119.078521][ T5013] BTRFS info (device loop3): enabling ssd optimizations [ 119.383372][ T4278] BTRFS info (device loop3): last unmount of filesystem 7d22f6b8-9c5a-477d-9e45-049f0dda9b8d [ 119.693896][ T26] audit: type=1800 audit(1786998306.929:5): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="idVendor" dev="configfs" ino=37155 res=0 errno=0 [ 119.743226][ T26] audit: type=1800 audit(1786998306.929:6): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="idProduct" dev="configfs" ino=37156 res=0 errno=0 [ 119.772748][ T26] audit: type=1800 audit(1786998306.929:7): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="bcdUSB" dev="configfs" ino=37157 res=0 errno=0 [ 119.808111][ T26] audit: type=1800 audit(1786998306.929:8): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="serialnumber" dev="configfs" ino=37158 res=0 errno=0 [ 119.838029][ T26] audit: type=1800 audit(1786998306.939:9): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="UDC" dev="configfs" ino=37159 res=0 errno=0 [ 119.961547][ T4728] (null): failure reading functionality [ 119.982857][ T4728] i2c i2c-1: failure reading functionality [ 120.024417][ T4728] i2c i2c-1: connected i2c-tiny-usb device [ 120.173042][ T5040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.185416][ T5040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.214530][ T5072] CIFS: Attempting to mount \\127.0.0.1\share [ 120.241511][ T5040] Bluetooth: hci0: Suspend notifier action (3) failed: -4 [ 120.260027][ T5072] CIFS: VFS: Error connecting to socket. Aborting operation. [ 120.279269][ T5040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.297822][ T5072] CIFS: VFS: cifs_mount failed w/return code = -111 [ 120.312699][ T5040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.359545][ T5040] Bluetooth: hci2: Suspend notifier action (3) failed: -4 [ 120.394550][ T5040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.427326][ T5040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.441146][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.478681][ T5040] Bluetooth: hci3: Suspend notifier action (3) failed: -4 [ 120.496403][ T5074] usbip-vudc usbip-vudc.0: Device already connected [ 120.521052][ T5075] usbip_vudc: v_rx exit with error -32 [ 120.532629][ T5040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.589641][ T5079] usbip_vudc: v_rx exit with error -32 [ 120.590438][ T5040] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 120.669111][ T5040] Bluetooth: hci4: Suspend notifier action (3) failed: -4 [ 121.731058][ T5066] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.912416][ T5066] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 121.922651][ T5066] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 121.935906][ T5066] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 121.955283][ T5066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.970980][ T5066] usb 4-1: Product: syz [ 121.977421][ T5066] usb 4-1: Manufacturer: syz [ 121.982342][ T5066] usb 4-1: SerialNumber: syz [ 122.007911][ T5096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.021314][ T5096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.040335][ T5066] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 122.063862][ T5066] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 122.075579][ T5098] siw: device registration error -23 [ 122.086579][ T5098] rdma_rxe: rxe_register_device failed with error -23 [ 122.094638][ T5098] rdma_rxe: failed to add lo [ 122.100450][ T5098] siw: device registration error -23 [ 122.107073][ T5098] rdma_rxe: rxe_register_device failed with error -23 [ 122.114340][ T5098] rdma_rxe: failed to add veth0 [ 122.128257][ T5098] ib_srp: QP creation failed for dev syz1: -22 [ 122.198512][ T5098] scsi host1: ib_srp: Connection 0/2 to 127.0.0.1 failed [ 122.281086][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.321464][ T5066] usb 4-1: USB disconnect, device number 11 [ 122.337856][ T5066] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 122.351810][ T5066] garmin_gps 4-1:1.0: device disconnected [ 122.441190][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.537955][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 122.600914][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.713135][ T5112] usbip-vudc usbip-vudc.0: Device already connected [ 122.721183][ T5113] usbip_vudc: v_rx exit with error -32 [ 122.798690][ T5117] usbip_vudc: v_rx exit with error -32 [ 122.897298][ T5120] siw: device registration error -23 [ 122.926825][ T5120] rdma_rxe: rxe_register_device failed with error -23 [ 122.941348][ T5120] rdma_rxe: failed to add lo [ 122.952127][ T5120] siw: device registration error -23 [ 122.969008][ T5120] rdma_rxe: rxe_register_device failed with error -23 [ 122.977725][ T5120] rdma_rxe: failed to add veth0 [ 123.025043][ T5120] ib_srp: QP creation failed for dev syz1: -22 [ 123.062122][ T5127] scsi host2: ib_srp: Connection 0/2 to 127.0.0.1 failed [ 123.117107][ T5120] ib_srp: QP creation failed for dev syz2: -22 [ 123.444800][ T5139] siw: device registration error -23 [ 123.461717][ T5139] rdma_rxe: rxe_register_device failed with error -23 [ 123.470954][ T5038] usb 1-1: device descriptor read/64, error -110 [ 123.486446][ T5139] rdma_rxe: failed to add lo [ 123.491768][ T5139] siw: device registration error -23 [ 123.509053][ T5139] rdma_rxe: rxe_register_device failed with error -23 [ 123.522638][ T5139] rdma_rxe: failed to add veth0 [ 123.540763][ T5139] ib_srp: QP creation failed for dev syz1: -22 [ 123.622263][ T5147] ib_srp: QP creation failed for dev syz2: -22 [ 123.741170][ T5038] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 123.857219][ T4728] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 123.869225][ T4728] wiimote 0005:057E:0306.0004: New device registered [ 123.901306][ T5038] usb 1-1: device descriptor read/64, error -32 [ 124.170938][ T5038] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 124.189190][ T5167] ubi: mtd0 is already attached to ubi0 [ 124.211177][ T5038] usb 1-1: device descriptor read/8, error -32 [ 124.265772][ T26] audit: type=1800 audit(1786998311.499:10): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="idVendor" dev="configfs" ino=37558 res=0 errno=0 [ 124.287323][ T26] audit: type=1800 audit(1786998311.499:11): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="idProduct" dev="configfs" ino=37559 res=0 errno=0 [ 124.310732][ T26] audit: type=1800 audit(1786998311.499:12): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="bcdUSB" dev="configfs" ino=37560 res=0 errno=0 [ 124.330962][ T26] audit: type=1800 audit(1786998311.499:13): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="serialnumber" dev="configfs" ino=37561 res=0 errno=0 [ 124.351729][ T26] audit: type=1800 audit(1786998311.499:14): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="UDC" dev="configfs" ino=37562 res=0 errno=0 [ 124.372729][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 124.430537][ T5172] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(6) [ 124.487354][ T5038] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 124.521103][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 124.521572][ T5038] usb 1-1: device descriptor read/8, error -32 [ 124.579466][ T5176] usbip-vudc usbip-vudc.0: Device already connected [ 124.587661][ T5177] usbip_vudc: v_rx exit with error -32 [ 124.654373][ T4322] usb 1-1: USB disconnect, device number 4 [ 124.666416][ T5038] cdc_wdm 1-1:1.0: Error resume submitting int urb - -19 [ 124.674391][ T5157] wiimote 0005:057E:0306.0004: Device removed [ 124.681113][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 124.834829][ T5183] usbip_vudc: v_rx exit with error -32 [ 124.848780][ T5186] siw: device registration error -23 [ 124.884634][ T5186] rdma_rxe: rxe_register_device failed with error -23 [ 124.918131][ T5186] rdma_rxe: failed to add lo [ 124.923116][ T4728] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 124.945997][ T5189] siw: device registration error -23 [ 124.984126][ T5186] rdma_rxe: rxe_register_device failed with error -23 [ 124.997120][ T4728] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 125.029567][ T5186] rdma_rxe: failed to add veth0 [ 125.049261][ T5189] ib_srp: QP creation failed for dev syz1: -22 [ 125.076242][ T4728] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 125.124420][ T5186] ib_srp: QP creation failed for dev syz2: -22 [ 125.189119][ T4728] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input6 [ 125.403677][ T5204] ubi: mtd0 is already attached to ubi0 [ 125.415033][ T26] audit: type=1800 audit(1786998312.649:15): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.253" name="ifname" dev="configfs" ino=37648 res=0 errno=0 [ 125.509238][ T5211] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(6) [ 125.694930][ T5219] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.841447][ T5225] usbip-vudc usbip-vudc.0: Device already connected [ 125.849293][ T5223] usbip_vudc: v_rx exit with error -32 [ 125.956024][ T26] audit: type=1800 audit(1786998313.189:16): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="idVendor" dev="configfs" ino=37646 res=0 errno=0 [ 126.012290][ T26] audit: type=1800 audit(1786998313.189:17): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="idProduct" dev="configfs" ino=37647 res=0 errno=0 [ 126.030995][ T5233] usbip_vudc: v_rx exit with error -32 [ 126.042330][ T26] audit: type=1800 audit(1786998313.189:18): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="bcdUSB" dev="configfs" ino=37687 res=0 errno=0 [ 126.074873][ T26] audit: type=1800 audit(1786998313.189:19): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="serialnumber" dev="configfs" ino=37688 res=0 errno=0 [ 126.098540][ T26] audit: type=1800 audit(1786998313.199:20): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="UDC" dev="configfs" ino=37649 res=0 errno=0 [ 126.301282][ T5242] rdma_rxe: already configured on lo [ 126.314291][ T5242] rdma_rxe: rxe_register_device failed with error -23 [ 126.329146][ T5242] rdma_rxe: failed to add veth0 [ 126.359151][ T5242] ib_srp: QP creation failed for dev syz1: -22 [ 126.414876][ T5247] ib_srp: QP creation failed for dev syz2: -22 [ 126.629263][ T5255] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(6) [ 126.649592][ T5258] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.819631][ T5260] ubi: mtd0 is already attached to ubi0 [ 126.853274][ T5263] usbip-vudc usbip-vudc.0: Device already connected [ 126.861590][ T5265] usbip-vudc usbip-vudc.0: Device already connected [ 126.868698][ T5264] usbip_vudc: v_rx exit with error -32 [ 127.139396][ T26] audit: type=1800 audit(1786998314.369:21): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.274" name="ifname" dev="configfs" ino=37870 res=0 errno=0 [ 127.197592][ T26] audit: type=1800 audit(1786998314.429:22): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.276" name="idVendor" dev="configfs" ino=37868 res=0 errno=0 [ 127.227217][ T5283] siw: device registration error -23 [ 127.248932][ T26] audit: type=1800 audit(1786998314.429:23): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.276" name="idProduct" dev="configfs" ino=37869 res=0 errno=0 [ 127.254871][ T5283] rdma_rxe: rxe_register_device failed with error -23 [ 127.312293][ T26] audit: type=1800 audit(1786998314.429:24): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.276" name="bcdUSB" dev="configfs" ino=37879 res=0 errno=0 [ 127.333497][ T5288] siw: device registration error -23 [ 127.344715][ T5283] rdma_rxe: failed to add lo [ 127.355615][ T5288] rdma_rxe: rxe_register_device failed with error -23 [ 127.391554][ T5288] rdma_rxe: failed to add veth0 [ 127.432623][ T5283] ib_srp: QP creation failed for dev syz1: -22 [ 127.508607][ T5288] ib_srp: QP creation failed for dev syz2: -22 [ 127.780670][ T5300] device-mapper: ioctl: Invalid ioctl structure: name ache, dev 635f796d00000000 [ 127.875020][ T5304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 128.016604][ T5309] usbip_vudc: v_rx exit with error -32 [ 128.238222][ T5320] ubi: mtd0 is already attached to ubi0 [ 128.274973][ T5322] siw: device registration error -23 [ 128.303058][ T5322] rdma_rxe: rxe_register_device failed with error -23 [ 128.310153][ T5322] rdma_rxe: failed to add lo [ 128.328579][ T5322] siw: device registration error -23 [ 128.337817][ T5324] nvmet: adding nsid 1 to subsystem testsubsys [ 128.345926][ T5322] rdma_rxe: rxe_register_device failed with error -23 [ 128.359012][ T5322] rdma_rxe: failed to add veth0 [ 128.382261][ T5322] ib_srp: QP creation failed for dev syz1: -22 [ 128.460239][ T4341] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3a084b95-bc45-4153-8a19-024969e6e7c9. [ 128.477837][ T5330] ib_srp: QP creation failed for dev syz2: -22 [ 128.512013][ T5324] nvme nvme0: creating 2 I/O queues. [ 128.567899][ T5324] nvme nvme0: new ctrl: "testsubsys" [ 128.830459][ T5340] device-mapper: ioctl: Invalid ioctl structure: name ache, dev 635f796d00000000 [ 128.900536][ T5342] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.083237][ T5347] usbip_vudc: v_rx exit with error -32 [ 129.317357][ T5358] ubi: mtd0 is already attached to ubi0 [ 129.550958][ T5370] siw: device registration error -23 [ 129.568114][ T5370] rdma_rxe: rxe_register_device failed with error -23 [ 129.591967][ T5370] rdma_rxe: failed to add lo [ 129.606646][ T5370] siw: device registration error -23 [ 129.628643][ T5370] rdma_rxe: rxe_register_device failed with error -23 [ 129.668628][ T5370] rdma_rxe: failed to add veth0 [ 129.725760][ T5370] ib_srp: QP creation failed for dev syz1: -22 [ 129.759753][ T5374] ib_srp: QP creation failed for dev syz2: -22 [ 129.981149][ T5384] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.091363][ T5389] usbip_vudc: v_rx exit with error -32 [ 130.469302][ T5404] ubi: mtd0 is already attached to ubi0 [ 130.614836][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 130.614853][ T26] audit: type=1800 audit(1786998317.849:38): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.317" name="ifname" dev="configfs" ino=38258 res=0 errno=0 [ 130.917295][ T5424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.248013][ T5433] usbip_vudc: v_rx exit with error -32 [ 131.689997][ T5445] ================================================================== [ 131.704328][ T5445] BUG: KASAN: slab-out-of-bounds in reg_fixed_voltage_probe+0xa8b/0xd30 [ 131.712845][ T5445] Read of size 4 at addr ffff88802717edac by task syz.0.325/5445 [ 131.720697][ T5445] [ 131.723082][ T5445] CPU: 0 PID: 5445 Comm: syz.0.325 Not tainted syzkaller #0 [ 131.730490][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.740676][ T5445] Call Trace: [ 131.744007][ T5445] [ 131.746973][ T5445] dump_stack_lvl+0x188/0x24e [ 131.751887][ T5445] ? __lock_acquire+0x7c40/0x7c40 [ 131.756970][ T5445] ? show_regs_print_info+0x12/0x12 [ 131.762469][ T5445] ? load_image+0x410/0x410 [ 131.767376][ T5445] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 131.773122][ T5445] ? __virt_addr_valid+0x188/0x540 [ 131.778457][ T5445] ? __virt_addr_valid+0x467/0x540 [ 131.783928][ T5445] ? reg_fixed_voltage_probe+0xa8b/0xd30 [ 131.789694][ T5445] print_report+0xa8/0x210 [ 131.794150][ T5445] kasan_report+0x10b/0x140 [ 131.798900][ T5445] ? reg_fixed_voltage_probe+0xa8b/0xd30 [ 131.805459][ T5445] reg_fixed_voltage_probe+0xa8b/0xd30 [ 131.811307][ T5445] ? of_regulator_bulk_get_all+0x5c0/0x5c0 [ 131.817344][ T5445] ? is_acpi_device_node+0x22/0x60 [ 131.822473][ T5445] ? acpi_dev_pm_attach+0xe7/0x290 [ 131.828027][ T5445] platform_probe+0x137/0x1c0 [ 131.832726][ T5445] ? platform_uevent+0xb0/0xb0 [ 131.837765][ T5445] really_probe+0x24a/0xb40 [ 131.842280][ T5445] ? pm_runtime_barrier+0x147/0x1c0 [ 131.847660][ T5445] __driver_probe_device+0x1f5/0x390 [ 131.852956][ T5445] device_driver_attach+0xd9/0x1c0 [ 131.858428][ T5445] bind_store+0x33b/0x380 [ 131.863022][ T5445] ? mutex_lock_nested+0x10/0x10 [ 131.868150][ T5445] ? unbind_store+0x300/0x300 [ 131.872833][ T5445] ? __virt_addr_valid+0x188/0x540 [ 131.878106][ T5445] ? __virt_addr_valid+0x467/0x540 [ 131.883345][ T5445] ? sysfs_kf_write+0x183/0x2a0 [ 131.888432][ T5445] ? sysfs_kf_read+0x350/0x350 [ 131.893352][ T5445] kernfs_fop_write_iter+0x3a0/0x520 [ 131.899318][ T5445] vfs_write+0x482/0x9a0 [ 131.903696][ T5445] ? file_end_write+0x250/0x250 [ 131.908776][ T5445] ? __fget_files+0x3fc/0x460 [ 131.913493][ T5445] ? __fdget_pos+0x2ae/0x360 [ 131.918553][ T5445] ? ksys_write+0x70/0x260 [ 131.923117][ T5445] ksys_write+0x14d/0x260 [ 131.927642][ T5445] ? __ia32_sys_read+0x80/0x80 [ 131.932946][ T5445] ? lockdep_hardirqs_on+0x94/0x140 [ 131.938675][ T5445] do_syscall_64+0x4c/0xa0 [ 131.943804][ T5445] ? clear_bhb_loop+0x60/0xb0 [ 131.948581][ T5445] ? clear_bhb_loop+0x60/0xb0 [ 131.953634][ T5445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.960066][ T5445] RIP: 0033:0x7fa08199e0d9 [ 131.964489][ T5445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.984466][ T5445] RSP: 002b:00007fa0827a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.993086][ T5445] RAX: ffffffffffffffda RBX: 00007fa081c25fa0 RCX: 00007fa08199e0d9 [ 132.001246][ T5445] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003 [ 132.009262][ T5445] RBP: 00007fa081a35024 R08: 0000000000000000 R09: 0000000000000000 [ 132.017271][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.025439][ T5445] R13: 00007fa081c26038 R14: 00007fa081c25fa0 R15: 00007ffcf3868198 [ 132.033602][ T5445] [ 132.036704][ T5445] [ 132.039032][ T5445] Allocated by task 1: [ 132.043192][ T5445] kasan_set_track+0x4b/0x70 [ 132.047798][ T5445] __kasan_kmalloc+0x8e/0xa0 [ 132.052407][ T5445] __kmalloc_node_track_caller+0xb0/0x240 [ 132.058329][ T5445] kmemdup+0x27/0x60 [ 132.062243][ T5445] platform_device_add_data+0x2a/0xa0 [ 132.068101][ T5445] dummy_hcd_init+0x766/0x1167 [ 132.073142][ T5445] do_one_initcall+0x257/0x800 [ 132.078307][ T5445] do_initcall_level+0x13d/0x1ed [ 132.083441][ T5445] do_initcalls+0x4b/0x8a [ 132.087894][ T5445] kernel_init_freeable+0x401/0x5ab [ 132.093137][ T5445] kernel_init+0x19/0x1b0 [ 132.097712][ T5445] ret_from_fork+0x1f/0x30 [ 132.102747][ T5445] [ 132.105092][ T5445] The buggy address belongs to the object at ffff88802717ed98 [ 132.105092][ T5445] which belongs to the cache kmalloc-8 of size 8 [ 132.118914][ T5445] The buggy address is located 12 bytes to the right of [ 132.118914][ T5445] 8-byte region [ffff88802717ed98, ffff88802717eda0) [ 132.132714][ T5445] [ 132.135141][ T5445] The buggy address belongs to the physical page: [ 132.141656][ T5445] page:ffffea00009c5f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2717e [ 132.152105][ T5445] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 132.160564][ T5445] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888017441280 [ 132.169346][ T5445] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000 [ 132.178121][ T5445] page dumped because: kasan: bad access detected [ 132.184576][ T5445] page_owner tracks the page as allocated [ 132.190400][ T5445] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 9678260297, free_ts 9623161580 [ 132.208133][ T5445] post_alloc_hook+0x173/0x1a0 [ 132.213093][ T5445] get_page_from_freelist+0x206b/0x2180 [ 132.218838][ T5445] __alloc_pages+0x1ec/0x4f0 [ 132.223569][ T5445] alloc_page_interleave+0x24/0x1e0 [ 132.228804][ T5445] alloc_slab_page+0x5d/0x180 [ 132.233503][ T5445] new_slab+0x87/0x2d0 [ 132.237671][ T5445] ___slab_alloc+0xbc5/0x1240 [ 132.242353][ T5445] __kmem_cache_alloc_node+0x126/0x270 [ 132.247813][ T5445] __kmalloc_node_track_caller+0xa0/0x240 [ 132.253630][ T5445] kvasprintf+0xe8/0x1a0 [ 132.257902][ T5445] kobject_set_name_vargs+0x5d/0x110 [ 132.263304][ T5445] dev_set_name+0xdf/0x130 [ 132.267906][ T5445] wiphy_new_nm+0x799/0x1a00 [ 132.272586][ T5445] ieee80211_alloc_hw_nm+0x38d/0x1e80 [ 132.277965][ T5445] mac80211_hwsim_new_radio+0x143/0x4cd0 [ 132.283693][ T5445] init_mac80211_hwsim+0x598/0x737 [ 132.288909][ T5445] page last free stack trace: [ 132.293607][ T5445] free_unref_page_prepare+0x8e5/0x9e0 [ 132.299288][ T5445] free_unref_page+0x2e/0x3f0 [ 132.304136][ T5445] __vunmap+0x874/0xa40 [ 132.308317][ T5445] free_work+0x56/0x80 [ 132.312539][ T5445] process_one_work+0x8ab/0x1160 [ 132.317502][ T5445] worker_thread+0xaf5/0x12a0 [ 132.322191][ T5445] kthread+0x29d/0x330 [ 132.326264][ T5445] ret_from_fork+0x1f/0x30 [ 132.330718][ T5445] [ 132.333087][ T5445] Memory state around the buggy address: [ 132.338763][ T5445] ffff88802717ec80: 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 06 [ 132.346836][ T5445] ffff88802717ed00: fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc [ 132.354934][ T5445] >ffff88802717ed80: fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc [ 132.363386][ T5445] ^ [ 132.368853][ T5445] ffff88802717ee00: fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc [ 132.377237][ T5445] ffff88802717ee80: fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc [ 132.386045][ T5445] ================================================================== [ 132.447718][ T5451] ubi: mtd0 is already attached to ubi0 [ 132.464274][ T5445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.471692][ T5445] CPU: 0 PID: 5445 Comm: syz.0.325 Not tainted syzkaller #0 [ 132.479274][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.489877][ T5445] Call Trace: [ 132.493300][ T5445] [ 132.496530][ T5445] dump_stack_lvl+0x188/0x24e [ 132.501329][ T5445] ? memcpy+0x3c/0x60 [ 132.505943][ T5445] ? show_regs_print_info+0x12/0x12 [ 132.511373][ T5445] ? load_image+0x410/0x410 [ 132.516699][ T5445] panic+0x2d3/0x710 [ 132.521329][ T5445] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.527767][ T5445] ? bpf_jit_dump+0xd0/0xd0 [ 132.533239][ T5445] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 132.539308][ T5445] ? _raw_spin_unlock+0x40/0x40 [ 132.544278][ T5445] check_panic_on_warn+0x80/0xa0 [ 132.549698][ T5445] ? reg_fixed_voltage_probe+0xa8b/0xd30 [ 132.555401][ T5445] end_report+0x66/0x110 [ 132.559877][ T5445] kasan_report+0x118/0x140 [ 132.564490][ T5445] ? reg_fixed_voltage_probe+0xa8b/0xd30 [ 132.570432][ T5445] reg_fixed_voltage_probe+0xa8b/0xd30 [ 132.576228][ T5445] ? of_regulator_bulk_get_all+0x5c0/0x5c0 [ 132.582671][ T5445] ? is_acpi_device_node+0x22/0x60 [ 132.587881][ T5445] ? acpi_dev_pm_attach+0xe7/0x290 [ 132.593084][ T5445] platform_probe+0x137/0x1c0 [ 132.597860][ T5445] ? platform_uevent+0xb0/0xb0 [ 132.602716][ T5445] really_probe+0x24a/0xb40 [ 132.607242][ T5445] ? pm_runtime_barrier+0x147/0x1c0 [ 132.612533][ T5445] __driver_probe_device+0x1f5/0x390 [ 132.617828][ T5445] device_driver_attach+0xd9/0x1c0 [ 132.623040][ T5445] bind_store+0x33b/0x380 [ 132.627378][ T5445] ? mutex_lock_nested+0x10/0x10 [ 132.632416][ T5445] ? unbind_store+0x300/0x300 [ 132.637185][ T5445] ? __virt_addr_valid+0x188/0x540 [ 132.643722][ T5445] ? __virt_addr_valid+0x467/0x540 [ 132.648956][ T5445] ? sysfs_kf_write+0x183/0x2a0 [ 132.654006][ T5445] ? sysfs_kf_read+0x350/0x350 [ 132.658784][ T5445] kernfs_fop_write_iter+0x3a0/0x520 [ 132.664431][ T5445] vfs_write+0x482/0x9a0 [ 132.668692][ T5445] ? file_end_write+0x250/0x250 [ 132.673556][ T5445] ? __fget_files+0x3fc/0x460 [ 132.678339][ T5445] ? __fdget_pos+0x2ae/0x360 [ 132.683049][ T5445] ? ksys_write+0x70/0x260 [ 132.687482][ T5445] ksys_write+0x14d/0x260 [ 132.691830][ T5445] ? __ia32_sys_read+0x80/0x80 [ 132.696630][ T5445] ? lockdep_hardirqs_on+0x94/0x140 [ 132.701851][ T5445] do_syscall_64+0x4c/0xa0 [ 132.706456][ T5445] ? clear_bhb_loop+0x60/0xb0 [ 132.711403][ T5445] ? clear_bhb_loop+0x60/0xb0 [ 132.716105][ T5445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.722113][ T5445] RIP: 0033:0x7fa08199e0d9 [ 132.726565][ T5445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.747154][ T5445] RSP: 002b:00007fa0827a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.755668][ T5445] RAX: ffffffffffffffda RBX: 00007fa081c25fa0 RCX: 00007fa08199e0d9 [ 132.764025][ T5445] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003 [ 132.772088][ T5445] RBP: 00007fa081a35024 R08: 0000000000000000 R09: 0000000000000000 [ 132.780608][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.790356][ T5445] R13: 00007fa081c26038 R14: 00007fa081c25fa0 R15: 00007ffcf3868198 [ 132.798467][ T5445] [ 132.801714][ T5445] Kernel Offset: disabled [ 132.806413][ T5445] Rebooting in 86400 seconds..