last executing test programs: 5.496965042s ago: executing program 2 (id=88): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000001c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0481c20001000000010902200001010080320904000002030000000705810310000a0705020310000a"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x5c, &(0x7f0000000200)={0x40, 0x4f, 0x4, "4f010203"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x40, 0x4d, 0x6, @random="4def0500"}, &(0x7f0000000400)={0x40, 0x50, 0x6, @random="500a0200"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.698385152s ago: executing program 1 (id=95): syz_usb_connect(0x3, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b3228000000000001090200000101000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000100)) 4.35704574s ago: executing program 3 (id=97): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b11300001010203010902200001010080fa0904000002ff0000000705010200020007058102000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.58096418s ago: executing program 2 (id=100): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e3, &(0x7f00000051c0)="$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") syz_open_dev$usbfs(&(0x7f0000000000), 0x21, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x22, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x23, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x24, 0x2) 3.369502765s ago: executing program 4 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='0000:00:01.0\x00', 0xd) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)='1\x00', 0x2) close(r8) 3.138024411s ago: executing program 4 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0xa4a7\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='123456789', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='Foo\x00', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='Bar\x00', 0x4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0), 0x0) close(r5) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0', 0xb) close(0xffffffffffffffff) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) write(r6, &(0x7f0000000a00)='test\x00', 0x5) 2.715475962s ago: executing program 3 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file_1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file_2\x00', 0x42, 0x1ff) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file_3\x00', 0x42, 0x1ff) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/file_4\x00', 0x42, 0x1ff) close(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/file_1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/file_2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file_3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file_4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/filler_1\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000380)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f00000003c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000400)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/filler_3\x00', 0x42, 0x1ff) 2.452030329s ago: executing program 3 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/policy/namespaces\x00', 0x1ed) 2.217024364s ago: executing program 1 (id=110): mkdir(&(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000500)='class\x00', 0x0, 0x0) openat(r1, &(0x7f0000000600)='i2c-dev\x00', 0x0, 0x0) 2.216560844s ago: executing program 4 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file_1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file_2\x00', 0x42, 0x1ff) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file_3\x00', 0x42, 0x1ff) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/file_4\x00', 0x42, 0x1ff) close(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/file_1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/file_2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file_3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file_4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/filler_1\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000380)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f00000003c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000400)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000440)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/filler_2\x00', 0x42, 0x1ff) write(r5, &(0x7f00000004c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000540)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/filler_3\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000600)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000640)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000680)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f00000006c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/filler_4\x00', 0x42, 0x1ff) write(r7, &(0x7f0000000740)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f0000000780)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f00000007c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.112042047s ago: executing program 3 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/ocfs2/node\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x1, 0x0) write(r5, 0x0, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='7777\n\x00', 0x5) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/node/node1/local\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='0\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x0, &(0x7f0000000700)="$eJzszrENAVAUBdDrLyASnUIYwA5GESWdiljJDiYwgg0UWs1XfArfABI5J3kvue827/I4Tc6zpA6T2tntD5vVtu3wl0qSUZJxkum85duydYNXf70f1+/59b8AAAAAAAAAwLeSRZ8/Ds8AAAD//9ZiI98=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x200) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 2.048407308s ago: executing program 1 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='0x0525', 0x6) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='\n', 0x1) 2.004975909s ago: executing program 0 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='0000:00:01.0\x00', 0xd) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)='1\x00', 0x2) close(r8) 1.804529025s ago: executing program 4 (id=115): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\x00', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='0000:00:01.0\x00', 0xd) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='1\x00', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f0000000640)='1\x00', 0x2) close(r9) 1.711687827s ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='0xa4a1', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='dummy_udc.0', 0xb) 1.652477908s ago: executing program 2 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') 1.532886442s ago: executing program 4 (id=118): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='4567\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='username\x00', &(0x7f0000000300)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='vers\x00', &(0x7f0000000400)='2.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.451002934s ago: executing program 1 (id=119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r1 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/c1/node\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/c1/node/node1/ipv4_address\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/c1/node/node1/ipv4_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='7777\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/c1/node/node1/num\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/cluster/c1/node/node1/local\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/c1/heartbeat\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/c1/heartbeat/r1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/cluster/c1/heartbeat/r1/block_bytes\x00', 0x1, 0x0) write(r4, &(0x7f0000001500)='512\x00', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/cluster/c1/heartbeat/r1/start_block\x00', 0x1, 0x0) write(r5, &(0x7f0000001700)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./config/cluster/c1/heartbeat/r1/blocks\x00', 0x1, 0x0) write(r6, &(0x7f0000001900)='1000\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/cluster/c1/heartbeat/r1/dev\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./dlm\x00', &(0x7f0000002300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./dlm/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002500)='./dlm/domain1/lock1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000002400)='./dlm/domain1\x00', 0x200) umount2(&(0x7f0000002200)='./dlm\x00', 0x2) 1.348644066s ago: executing program 0 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x64, 0x0, 0x64, 0x11, 0x0, @remote, @remote}, {0x4e22, 0x4e22, 0xa, 0x0, @opaque="1234"}}}}}, 0x0) 1.153904061s ago: executing program 0 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0xa4a7\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='123456789', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='Foo\x00', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='Bar\x00', 0x4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0), 0x0) close(r5) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0', 0xb) close(0xffffffffffffffff) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) write(r6, &(0x7f0000000a00)='test\x00', 0x5) 1.090626243s ago: executing program 4 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) 1.031139194s ago: executing program 3 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file0\x00', 0x0) 999.107685ms ago: executing program 2 (id=124): r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000080)) r1 = openat(r0, &(0x7f0000000400)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc020581c, &(0x7f0000000500)={0xb, 0x1}) 748.895061ms ago: executing program 3 (id=125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/c1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/c1/node\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/c1/node/node1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/c1/node/node1/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/c1/node/node1/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='7777\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/c1/node/node1/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/cluster/c1/node/node1/local\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/c1/heartbeat\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/c1/heartbeat/r1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/cluster/c1/heartbeat/r1/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000001500)='512\x00', 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/cluster/c1/heartbeat/r1/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000001700)='1\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./config/cluster/c1/heartbeat/r1/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000001900)='200\x00', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/cluster/c1/heartbeat/r1/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000001b00)='4\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./dlm\x00', &(0x7f0000002300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./dlm/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002500)='./dlm/domain1/lock1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000002400)='./dlm/domain1\x00', 0x200) 748.704721ms ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='0000:00:01.0\x00', 0xd) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000640)='1\x00', 0x2) close(r8) 720.129262ms ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/file_1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file_2\x00', 0x42, 0x1ff) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file_3\x00', 0x42, 0x1ff) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/file_4\x00', 0x42, 0x1ff) close(r3) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/file_1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/file_2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/file_3\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file_4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/filler_1\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000380)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f00000003c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000400)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r4, &(0x7f0000000440)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/filler_2\x00', 0x42, 0x1ff) write(r5, &(0x7f00000004c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000540)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r5, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/filler_3\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000600)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000640)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f0000000680)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r6, &(0x7f00000006c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt/filler_4\x00', 0x42, 0x1ff) write(r7, &(0x7f0000000740)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f0000000780)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) write(r7, &(0x7f0000000800)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 486.306148ms ago: executing program 2 (id=128): r0 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40081601020001000000010902350001010080320904000005ffffff00070581020002000705020200020007058302000200070504020002000705850340000100"], 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000001000)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x83, 0x4, &(0x7f0000001000)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x85, 0x4, &(0x7f0000001000)='\x00\x00\x00\x00') 276.991123ms ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='0x0525', 0x6) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='\n', 0x1) 217.975455ms ago: executing program 1 (id=130): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) ftruncate(0xffffffffffffffff, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) write(0xffffffffffffffff, &(0x7f0000001100)='md0\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r7, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r7, 0x40140921, &(0x7f0000001400)='\x00\x00\x00\x00\a\x00'/15) 0s ago: executing program 0 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x64, 0x0, 0x64, 0x11, 0x0, @remote, @remote}, {0x4e22, 0x4e22, 0xa, 0x0, @opaque="1234"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 61.758802][ T4260] cgroup: Unknown subsys name 'net' [ 61.882167][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.165715][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.589399][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.603430][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.611352][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.623177][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.631212][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.638710][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.645839][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.653620][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.661461][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.669017][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.675659][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.677429][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.692091][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.692152][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.700264][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.707437][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.715265][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.721056][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.728026][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.734525][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.742028][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.749020][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.756482][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.762566][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.769522][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.776534][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.784208][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.790657][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.806184][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.813749][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.165983][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 65.262390][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 65.346404][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.354822][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.362977][ T4273] device bridge_slave_0 entered promiscuous mode [ 65.381398][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 65.390816][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 65.399695][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.406758][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.414918][ T4273] device bridge_slave_1 entered promiscuous mode [ 65.437171][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 65.491980][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.518085][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.525175][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.533017][ T4277] device bridge_slave_0 entered promiscuous mode [ 65.542074][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.565531][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.575281][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.583177][ T4277] device bridge_slave_1 entered promiscuous mode [ 65.634315][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.645045][ T4273] team0: Port device team_slave_0 added [ 65.664547][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.675374][ T4273] team0: Port device team_slave_1 added [ 65.702709][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.710681][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.721979][ T4280] device bridge_slave_0 entered promiscuous mode [ 65.733460][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.741004][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.748838][ T4279] device bridge_slave_0 entered promiscuous mode [ 65.762716][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.769855][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.778195][ T4279] device bridge_slave_1 entered promiscuous mode [ 65.793339][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.800614][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.809241][ T4280] device bridge_slave_1 entered promiscuous mode [ 65.820617][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.827988][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.835707][ T4278] device bridge_slave_0 entered promiscuous mode [ 65.851999][ T4277] team0: Port device team_slave_0 added [ 65.872670][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.879829][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.905972][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.917989][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.925067][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.933357][ T4278] device bridge_slave_1 entered promiscuous mode [ 65.941756][ T4277] team0: Port device team_slave_1 added [ 65.952771][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.968143][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.975121][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.001576][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.030757][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.043923][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.072903][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.096372][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.122346][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.129559][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.155545][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.168183][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.182266][ T4279] team0: Port device team_slave_0 added [ 66.196641][ T4273] device hsr_slave_0 entered promiscuous mode [ 66.203545][ T4273] device hsr_slave_1 entered promiscuous mode [ 66.211387][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.221302][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.247634][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.265174][ T4279] team0: Port device team_slave_1 added [ 66.283074][ T4280] team0: Port device team_slave_0 added [ 66.307738][ T4278] team0: Port device team_slave_0 added [ 66.322741][ T4280] team0: Port device team_slave_1 added [ 66.348558][ T4278] team0: Port device team_slave_1 added [ 66.355406][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.362872][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.388970][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.404820][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.412137][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.438240][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.450477][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.459537][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.488348][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.521112][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.528329][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.554328][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.581342][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.589239][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.615657][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.641669][ T4277] device hsr_slave_0 entered promiscuous mode [ 66.649094][ T4277] device hsr_slave_1 entered promiscuous mode [ 66.655740][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.663684][ T4277] Cannot create hsr debugfs directory [ 66.684225][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.695023][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.721259][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.750145][ T4279] device hsr_slave_0 entered promiscuous mode [ 66.757010][ T4279] device hsr_slave_1 entered promiscuous mode [ 66.763508][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.771598][ T4279] Cannot create hsr debugfs directory [ 66.798352][ T4280] device hsr_slave_0 entered promiscuous mode [ 66.805362][ T4280] device hsr_slave_1 entered promiscuous mode [ 66.811998][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.819842][ T4280] Cannot create hsr debugfs directory [ 66.854651][ T4278] device hsr_slave_0 entered promiscuous mode [ 66.861787][ T4278] device hsr_slave_1 entered promiscuous mode [ 66.868512][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.876071][ T4278] Cannot create hsr debugfs directory [ 66.907632][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 66.907641][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 66.913840][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 66.920035][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 66.926143][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 67.182384][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.192107][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.216902][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.233964][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.272707][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.281427][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.291716][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.302782][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.367771][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.387678][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.398806][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.408870][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.495043][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.537610][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.548079][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.556662][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.580034][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.591611][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.612966][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.625314][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.649865][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.667880][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.699163][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.713330][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.729256][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.739955][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.748231][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.755896][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.775513][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.792100][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.801408][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.811310][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.818612][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.829643][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.839043][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.855827][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.864734][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.874191][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.883248][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.890385][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.899281][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.909190][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.919900][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.945918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.955976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.965320][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.972461][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.981628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.991541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.000173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.009617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.019849][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.027001][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.035600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.043799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.070809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.081495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.091035][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.098286][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.107890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.118648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.127171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.135683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.144567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.153984][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.161121][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.170062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.179162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.188077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.197239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.205811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.215301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.235712][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.247559][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.256386][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.284149][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.295269][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.303869][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.313744][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.322465][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.332706][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.341304][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.375025][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.385964][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.398658][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.407625][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.416120][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.425194][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.434364][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.442883][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.452472][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.460949][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.477891][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.499932][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.515634][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.524331][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.543504][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.553619][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.579462][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.616621][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.665702][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.688189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.696697][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.717919][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.732068][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.753439][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.760645][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.774822][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.821060][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.838049][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.848102][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.857940][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.865069][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.903103][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.922581][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.943803][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.968568][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.987222][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 68.987237][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 68.987261][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 68.993238][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 68.999682][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 69.039862][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.067701][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.086228][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.095268][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.106353][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.115415][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.124578][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.133806][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.140970][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.150079][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.157738][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.165218][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.174150][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.182781][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.190325][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.199084][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.206541][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.214726][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.222827][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.242564][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.273602][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.284320][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.300850][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.310275][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.319571][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.327990][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.336187][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.343792][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.351452][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.360265][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.369081][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.377896][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.386595][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.408648][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.428374][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.438149][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.499632][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.516347][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.538996][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.548536][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.564014][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.572974][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.583034][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.591434][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.600230][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.609214][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.617656][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.625987][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.633955][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.643313][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.660689][ T4279] device veth0_vlan entered promiscuous mode [ 69.677645][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.686444][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.735873][ T4279] device veth1_vlan entered promiscuous mode [ 69.766522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.782291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.804143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.828591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.836520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.865307][ T4273] device veth0_vlan entered promiscuous mode [ 69.889918][ T4277] device veth0_vlan entered promiscuous mode [ 69.908962][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.922574][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.956167][ T4277] device veth1_vlan entered promiscuous mode [ 69.967441][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.975641][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.985798][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.000844][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.011922][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.021768][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.056220][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.072364][ T4273] device veth1_vlan entered promiscuous mode [ 70.107934][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.116123][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.139986][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.156453][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.166627][ T4279] device veth0_macvtap entered promiscuous mode [ 70.203996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.217843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.226043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.235951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.246532][ T4279] device veth1_macvtap entered promiscuous mode [ 70.257505][ T4277] device veth0_macvtap entered promiscuous mode [ 70.279832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.288127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.296673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.305884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.332491][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.343102][ T4277] device veth1_macvtap entered promiscuous mode [ 70.360593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.377562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.386534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.401031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.415193][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.428334][ T4273] device veth0_macvtap entered promiscuous mode [ 70.448432][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.455760][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.470335][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.479129][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.496761][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.510490][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.522752][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.532832][ T4273] device veth1_macvtap entered promiscuous mode [ 70.543200][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.568973][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578130][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.587552][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.604077][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.616419][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.629710][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.643690][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.654167][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.671445][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.690703][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.702287][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.721443][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.730626][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.744021][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.755565][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.766593][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.775278][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.821654][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.830914][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.840059][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.849810][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.861346][ T4278] device veth0_vlan entered promiscuous mode [ 70.868904][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.881552][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.891781][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.902430][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.914280][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.942758][ T4278] device veth1_vlan entered promiscuous mode [ 70.950839][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.959306][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.972013][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.980942][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.993523][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.004676][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.015814][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.029086][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.040655][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.052117][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.066969][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 71.077483][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 71.077500][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 71.083493][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 71.095654][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 71.102800][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.121666][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.136193][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.148524][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.157888][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166604][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.175635][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.204152][ T4280] device veth0_vlan entered promiscuous mode [ 71.216396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.229040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.240195][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246705][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.250800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.261107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.282733][ T4280] device veth1_vlan entered promiscuous mode [ 71.302017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.368679][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.376677][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.384431][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.398522][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.413706][ T4278] device veth0_macvtap entered promiscuous mode [ 71.423104][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.431349][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.440105][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.449572][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.458766][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.490320][ T4278] device veth1_macvtap entered promiscuous mode [ 71.501203][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.509459][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.518742][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.533071][ T4280] device veth0_macvtap entered promiscuous mode [ 71.542947][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.560753][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.570365][ T4280] device veth1_macvtap entered promiscuous mode [ 71.591001][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.605508][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.615480][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.627521][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.637563][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.648704][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.660112][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.675667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.684314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.695846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.704019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.718102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.731101][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.739198][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.747116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.767342][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.784585][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.794767][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.807779][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.818076][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.828882][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.842796][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.872085][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.884144][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.895859][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.908889][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.918597][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.928808][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948296][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.966409][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.987976][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.002114][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.011466][ T4357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.014439][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.047975][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.061940][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.073604][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.090230][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.111129][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.120163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.131620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.138583][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.160830][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.161912][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.180223][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.189377][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.200562][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.215195][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.226728][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.247255][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.257521][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.268992][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.281104][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.291730][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.300627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.308936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.321387][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.348234][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.368275][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383220][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.397027][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563923][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.594282][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.640584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.648044][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.655968][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.689879][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.744323][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.766929][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.767380][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.774481][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.814475][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.845674][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.976545][ T4371] loop2: detected capacity change from 0 to 256 [ 73.134055][ T4371] using random self ethernet address [ 73.150418][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 73.150436][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 73.156436][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 73.156461][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 73.163046][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 73.180723][ T4371] using random host ethernet address [ 73.231096][ T4377] o2cb: This node has not been configured. [ 73.241557][ T4384] CIFS: Attempting to mount \\127.0.0.1\share [ 73.253175][ T4384] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.262089][ T4384] CIFS: VFS: cifs_mount failed w/return code = -111 [ 73.271869][ T4377] o2cb: Cluster check failed. Fix errors before retrying. [ 73.320016][ T4377] (syz.1.7,4377,0):user_dlm_register:674 ERROR: status = -22 [ 73.347115][ T4377] (syz.1.7,4377,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 73.466135][ T4397] o2cb: Local heartbeat has not been started. [ 73.492340][ T4397] o2cb: Cluster check failed. Fix errors before retrying. [ 73.505809][ T4397] (syz.4.12,4397,1):user_dlm_register:674 ERROR: status = -22 [ 73.556221][ T4397] (syz.4.12,4397,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 73.671819][ T4407] jffs2: notice: (4407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.724775][ T4409] using random self ethernet address [ 73.744678][ T4409] using random host ethernet address [ 73.792846][ T4409] usb0: HOST MAC 16:20:5f:2e:9a:e5 [ 73.801450][ T4409] usb0: MAC 52:8d:c9:71:be:77 [ 74.035680][ T4418] using random self ethernet address [ 74.046540][ T4418] using random host ethernet address [ 74.086990][ T4321] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.145328][ T4418] usb1: HOST MAC 5e:79:db:48:cd:fa [ 74.224368][ T4418] usb1: MAC 16:6d:4a:09:31:ec [ 74.331386][ T4432] CIFS: Attempting to mount \\127.0.0.1\share [ 74.359237][ T4432] CIFS: VFS: Error connecting to socket. Aborting operation. [ 74.372408][ T4432] CIFS: VFS: cifs_mount failed w/return code = -111 [ 74.466910][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.513692][ T4442] o2cb: Local heartbeat has not been started. [ 74.528235][ T4442] o2cb: Cluster check failed. Fix errors before retrying. [ 74.545492][ T4442] (syz.3.25,4442,0):user_dlm_register:674 ERROR: status = -22 [ 74.561032][ T4442] (syz.3.25,4442,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 74.679162][ T22] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 74.709402][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.733410][ T22] usb 2-1: Product: syz [ 74.743338][ T22] usb 2-1: Manufacturer: syz [ 74.763192][ T22] usb 2-1: SerialNumber: syz [ 74.768088][ T4321] usb 1-1: device descriptor read/64, error -71 [ 74.821158][ T22] usb 2-1: USB2VGA dongle found at address 2 [ 74.843919][ T22] usb 2-1: Allocated 8 output buffers [ 74.984123][ T4458] jffs2: notice: (4458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.047145][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.228874][ T4321] usb 1-1: device descriptor read/all, error -71 [ 75.244234][ T4321] usb usb1-port1: attempt power cycle [ 75.521975][ T4481] loop0: detected capacity change from 0 to 32768 [ 75.578560][ T4487] CIFS: Attempting to mount \\127.0.0.1\share [ 75.585452][ T4483] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 2 [ 75.608809][ T4487] CIFS: VFS: Error connecting to socket. Aborting operation. [ 75.617819][ T4487] CIFS: VFS: cifs_mount failed w/return code = -111 [ 75.624595][ T4483] (syz.4.35,4483,0):o2hb_bio_end_io:491 ERROR: IO Error 10 [ 75.628117][ T4483] (syz.4.35,4483,0):o2hb_region_dev_store:1823 ERROR: status = -5 [ 75.700645][ T4481] o2cb: Local heartbeat has not been started. [ 75.739810][ T4481] o2cb: Cluster check failed. Fix errors before retrying. [ 75.762055][ T4481] (syz.4.35,4481,0):user_dlm_register:674 ERROR: status = -22 [ 75.779970][ T4481] (syz.4.35,4481,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 75.847440][ T4364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.909330][ T4493] o2cb: Local heartbeat has not been started. [ 75.915460][ T4493] o2cb: Cluster check failed. Fix errors before retrying. [ 75.985186][ T4493] (syz.0.39,4493,0):user_dlm_register:674 ERROR: status = -22 [ 76.015615][ T4493] (syz.0.39,4493,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 76.041037][ T22] usb 2-1: Failed to early initialize device [ 76.047639][ T4364] usb 4-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice= 1.00 [ 76.100274][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.125170][ T22] usb 2-1: USB disconnect, device number 2 [ 76.147431][ T4364] usb 4-1: Product: syz [ 76.180325][ T4364] usb 4-1: Manufacturer: syz [ 76.197026][ T4364] usb 4-1: SerialNumber: syz [ 76.236214][ T4364] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 76.425091][ T4513] jffs2: notice: (4513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.674372][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.748871][ T4364] gspca_sn9c20x: Write register 1000 failed -110 [ 76.759257][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.768008][ T4364] gspca_sn9c20x: Device initialization failed [ 76.792630][ T4364] gspca_sn9c20x: probe of 4-1:1.0 failed with error -110 [ 76.814369][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.872440][ T4321] usb 1-1: Dual-Role OTG device on HNP port [ 76.883709][ T4321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 6.01 [ 76.922557][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.935175][ T4536] jffs2: notice: (4536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.983061][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 76.998971][ T4321] usb 1-1: bad CDC descriptors [ 77.078580][ T4542] o2cb: Local heartbeat has not been started. [ 77.084880][ T4542] o2cb: Cluster check failed. Fix errors before retrying. [ 77.092658][ T4321] rndis_host 1-1:1.1 usb2: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 5e:79:db:48:cd:fa [ 77.097399][ T4542] (syz.4.53,4542,0):user_dlm_register:674 ERROR: status = -22 [ 77.118979][ T4542] (syz.4.53,4542,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 77.294700][ T4550] No source specified [ 77.462610][ T4321] usb 4-1: USB disconnect, device number 2 [ 77.538584][ T4558] jffs2: notice: (4558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.886875][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 77.982869][ T4579] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 78.030422][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 78.105857][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 78.143594][ T7] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 78.165214][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 78.234216][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.256160][ T4589] o2cb: Local heartbeat has not been started. [ 78.274322][ T4592] nvmet: adding nsid 1 to subsystem test_subsystem [ 78.282058][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 512, setting to 64 [ 78.282980][ T4589] o2cb: Cluster check failed. Fix errors before retrying. [ 78.303553][ T4592] nvmet: failed to open file ./img: (-22) [ 78.306891][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 78.312262][ T4589] (syz.2.65,4589,1):user_dlm_register:674 ERROR: status = -22 [ 78.333587][ T4592] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 78.345207][ T7] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 1.00 [ 78.353131][ T4589] (syz.2.65,4589,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 78.390284][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.406879][ T7] usb 2-1: Product: syz [ 78.411091][ T7] usb 2-1: Manufacturer: syz [ 78.453298][ T7] usb 2-1: SerialNumber: syz [ 78.482896][ T4563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.506721][ T4563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.541185][ T4322] nvmet: connect request for invalid subsystem test_subsystem! [ 78.561783][ T4563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.572866][ T4592] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test_subsystem" [ 78.603912][ T7] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 78.625487][ T4603] No source specified [ 78.801680][ T4610] jffs2: notice: (4610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.159917][ T22] usb 1-1: USB disconnect, device number 5 [ 79.173939][ T22] rndis_host 1-1:1.1 usb2: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 79.364384][ T4635] CIFS: Attempting to mount \\127.0.0.1\share [ 79.380602][ T4635] CIFS: VFS: Error connecting to socket. Aborting operation. [ 79.398355][ T4635] CIFS: VFS: cifs_mount failed w/return code = -111 [ 79.602172][ T4640] o2cb: Local heartbeat has not been started. [ 79.622193][ T4643] loop0: detected capacity change from 0 to 32768 [ 79.640045][ T4640] o2cb: Cluster check failed. Fix errors before retrying. [ 79.667680][ T4640] (syz.4.79,4640,0):user_dlm_register:674 ERROR: status = -22 [ 79.669462][ T4643] loop2: detected capacity change from 0 to 32768 [ 79.676613][ T4640] (syz.4.79,4640,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 79.724877][ T4643] loop3: detected capacity change from 0 to 32768 [ 80.276058][ T4663] jffs2: notice: (4663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.354788][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.363538][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.390933][ T4667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.665327][ T2313] pvrusb2: Failed to submit write-control URB status=-2 [ 80.666154][ T4678] CIFS: Attempting to mount \\127.0.0.1\share [ 80.690097][ T7] usb 2-1: USB disconnect, device number 3 [ 80.703588][ T2313] pvrusb2: Device being rendered inoperable [ 80.726998][ T4322] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 80.754463][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 80.785129][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 80.944075][ T4322] usb 3-1: not running at top speed; connect to a high speed hub [ 80.961730][ T4322] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 80.980435][ T4686] o2cb: Local heartbeat has not been started. [ 81.004156][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.012931][ T4686] o2cb: Cluster check failed. Fix errors before retrying. [ 81.025378][ T4686] (syz.4.93,4686,0):user_dlm_register:674 ERROR: status = -22 [ 81.048727][ T4691] loop0: detected capacity change from 0 to 32768 [ 81.054507][ T4686] (syz.4.93,4686,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 81.089191][ T4691] loop2: detected capacity change from 0 to 32768 [ 81.115368][ T4691] loop3: detected capacity change from 0 to 32768 [ 81.347059][ T4364] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.454499][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.487749][ T4322] input input5: Device does not respond to id packet M [ 81.504826][ T4678] CIFS: VFS: cifs_mount failed w/return code = -112 [ 81.536024][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.549327][ T4364] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 81.551961][ T4322] input input5: Device does not respond to id packet P [ 81.573263][ T4364] usb 2-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 0.00 [ 81.586386][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.594384][ T4322] input input5: Device does not respond to id packet B [ 81.612256][ T4364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.612665][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.626998][ T4322] input input5: Device does not respond to id packet N [ 81.658498][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.675130][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.705479][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.736518][ T4322] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 81.743306][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.764125][ T4322] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 81.818380][ T4322] usb 3-1: USB disconnect, device number 2 [ 81.824261][ C0] iforce 3-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 81.931773][ T7] usb 4-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 1.00 [ 81.947304][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.955481][ T7] usb 4-1: Product: syz [ 81.960121][ T7] usb 4-1: Manufacturer: syz [ 81.964808][ T7] usb 4-1: SerialNumber: syz [ 82.003081][ T7] dw2102: su3000_identify_state [ 82.021038][ T7] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 82.044755][ T7] dw2102: su3000_power_ctrl: 1, initialized 0 [ 82.386571][ T7] dvb-usb: bulk message failed: -71 (2/0) [ 82.412775][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.445421][ T7] dvbdev: DVB: registering new adapter (TechnoTrend TT-connect S2-4600) [ 82.473140][ T7] usb 4-1: media controller created [ 82.494998][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.513093][ T7] dw2102: i2c transfer failed. [ 82.533960][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.541223][ T7] dw2102: i2c transfer failed. [ 82.562811][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.569192][ T7] dw2102: i2c transfer failed. [ 82.600902][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.623246][ T7] dw2102: i2c transfer failed. [ 82.652108][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.661955][ T7] dw2102: i2c transfer failed. [ 82.682263][ T7] dvb-usb: bulk message failed: -71 (6/0) [ 82.696724][ T7] dw2102: i2c transfer failed. [ 82.707788][ T7] dvb-usb: MAC address: 02:02:02:02:02:02 [ 82.744735][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.801377][ T7] dvb-usb: bulk message failed: -71 (3/0) [ 82.810638][ T7] dw2102: command 0x0e transfer failed. [ 82.830330][ T7] dvb-usb: bulk message failed: -71 (3/0) [ 82.846062][ T7] dw2102: command 0x0e transfer failed. [ 82.882703][ T4322] usb 2-1: USB disconnect, device number 4 [ 83.043912][ T4747] jffs2: notice: (4747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.050463][ T4724] loop2: detected capacity change from 0 to 32768 [ 83.082929][ T4748] o2cb: Local heartbeat has not been started. [ 83.103687][ T4748] o2cb: Cluster check failed. Fix errors before retrying. [ 83.143201][ T4748] (syz.0.106,4748,1):user_dlm_register:674 ERROR: status = -22 [ 83.156338][ T4724] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.100 (4724) [ 83.177644][ T4748] (syz.0.106,4748,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 83.178365][ T7] dvb-usb: bulk message failed: -71 (3/0) [ 83.208047][ T7] dw2102: command 0x0e transfer failed. [ 83.238246][ T7] dvb-usb: bulk message failed: -71 (3/0) [ 83.253016][ T7] dw2102: command 0x0e transfer failed. [ 83.253142][ T4724] BTRFS info (device loop2): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 83.267697][ T7] dvb-usb: bulk message failed: -71 (1/0) [ 83.290839][ T7] dw2102: command 0x51 transfer failed. [ 83.307021][ T4724] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.316238][ T7] dvb-usb: bulk message failed: -71 (5/0) [ 83.322992][ T4724] BTRFS info (device loop2): using free space tree [ 83.337058][ T7] dw2102: i2c probe for address 0x68 failed. [ 83.351692][ T7] dvb-usb: bulk message failed: -71 (5/0) [ 83.376865][ T7] dw2102: i2c probe for address 0x69 failed. [ 83.383705][ T7] dvb-usb: bulk message failed: -71 (5/0) [ 83.405043][ T7] dw2102: i2c probe for address 0x6a failed. [ 83.411712][ T7] dw2102: probing for demodulator failed. Is the external power switched on? [ 83.421362][ T7] dvb-usb: no frontend was attached by 'TechnoTrend TT-connect S2-4600' [ 83.517033][ T7] rc_core: IR keymap rc-tt-1500 not found [ 83.526823][ T7] Registered IR keymap rc-empty [ 83.558921][ T7] rc rc0: TechnoTrend TT-connect S2-4600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 83.585469][ T7] input: TechnoTrend TT-connect S2-4600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 83.589294][ T4775] jffs2: notice: (4775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.648183][ T7] dvb-usb: schedule remote query interval to 250 msecs. [ 83.684949][ T7] dw2102: su3000_power_ctrl: 0, initialized 1 [ 83.701794][ T7] dvb-usb: TechnoTrend TT-connect S2-4600 successfully initialized and connected. [ 83.716017][ T7] usb 4-1: USB disconnect, device number 3 [ 83.827015][ T4724] BTRFS info (device loop2): enabling ssd optimizations [ 83.896097][ T7] dvb-usb: TechnoTrend TT-connect S2-4600 successfully deinitialized and disconnected. [ 84.021113][ T4279] BTRFS info (device loop2): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 84.327237][ T4800] CIFS: Attempting to mount \\127.0.0.1\share [ 84.383646][ T4800] CIFS: VFS: Error connecting to socket. Aborting operation. [ 84.444748][ T4800] CIFS: VFS: cifs_mount failed w/return code = -111 [ 84.497042][ T4798] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.508899][ T4806] o2cb: Local heartbeat has not been started. [ 84.563715][ T4806] o2cb: Cluster check failed. Fix errors before retrying. [ 84.622360][ T4806] (syz.1.119,4806,1):user_dlm_register:674 ERROR: status = -22 [ 84.689421][ T4806] (syz.1.119,4806,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 84.696490][ T4798] usb 1-1: Dual-Role OTG device on HNP port [ 84.705867][ T4798] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 6.01 [ 84.746391][ T4798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.767027][ T4819] 9pnet_virtio: no channels available for device syz [ 84.783970][ T4820] vhci_hcd vhci_hcd.0: remove, state 4 [ 84.792396][ T4798] usb 1-1: bad CDC descriptors [ 84.850593][ T4820] usb usb34: USB disconnect, device number 1 [ 84.864518][ T4798] rndis_host 1-1:1.1 usb2: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 5e:79:db:48:cd:fa [ 85.000274][ T57] vhci_hcd: stop threads [ 85.022616][ T57] vhci_hcd: release socket [ 85.030368][ T4827] loop0: detected capacity change from 0 to 32768 [ 85.056061][ T57] vhci_hcd: disconnect device [ 85.085347][ T57] vhci_hcd: stop threads [ 85.093751][ T57] vhci_hcd: release socket [ 85.098520][ T57] vhci_hcd: disconnect device [ 85.103536][ T57] vhci_hcd: stop threads [ 85.108774][ T57] vhci_hcd: release socket [ 85.118669][ T57] vhci_hcd: disconnect device [ 85.129528][ T57] vhci_hcd: stop threads [ 85.134828][ T4833] jffs2: notice: (4833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.153053][ T57] vhci_hcd: release socket [ 85.161901][ T4834] o2cb: Local heartbeat has not been started. [ 85.171075][ T57] vhci_hcd: disconnect device [ 85.174380][ T4834] o2cb: Cluster check failed. Fix errors before retrying. [ 85.181505][ T57] vhci_hcd: stop threads [ 85.188662][ T57] vhci_hcd: release socket [ 85.215869][ T57] vhci_hcd: disconnect device [ 85.226621][ T57] vhci_hcd: stop threads [ 85.233834][ T57] vhci_hcd: release socket [ 85.245765][ T57] vhci_hcd: disconnect device [ 85.249424][ T4834] (syz.3.125,4834,0):user_dlm_register:674 ERROR: status = -22 [ 85.252919][ T57] vhci_hcd: stop threads [ 85.269047][ T57] vhci_hcd: release socket [ 85.273634][ T57] vhci_hcd: disconnect device [ 85.289948][ T57] vhci_hcd: stop threads [ 85.314708][ T57] vhci_hcd: release socket [ 85.314902][ T4834] (syz.3.125,4834,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 85.324848][ T57] vhci_hcd: disconnect device [ 85.343580][ T4820] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 85.375497][ T4820] vhci_hcd vhci_hcd.0: remove, state 4 [ 85.412635][ T4820] usb usb33: USB disconnect, device number 1 [ 85.499627][ T4328] vhci_hcd: stop threads [ 85.503922][ T4328] vhci_hcd: release socket [ 85.520149][ T4328] vhci_hcd: disconnect device [ 85.526501][ T4328] vhci_hcd: stop threads [ 85.534619][ T4328] vhci_hcd: release socket [ 85.541563][ T4798] usb 1-1: USB disconnect, device number 6 [ 85.545599][ T4328] vhci_hcd: disconnect device [ 85.554794][ T4850] loop2: detected capacity change from 0 to 32768 [ 85.557037][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.562245][ T4798] rndis_host 1-1:1.1 usb2: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 85.574307][ T4328] vhci_hcd: stop threads [ 85.583076][ T4328] vhci_hcd: release socket [ 85.588812][ T4850] loop3: detected capacity change from 0 to 32768 [ 85.612202][ T4820] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 85.650536][ T4328] vhci_hcd: disconnect device [ 85.673831][ T4328] ================================================================== [ 85.681942][ T4328] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7c40 [ 85.689263][ T4328] Read of size 8 at addr ffff8881467e88f0 by task kworker/u4:6/4328 [ 85.697249][ T4328] [ 85.699605][ T4328] CPU: 1 PID: 4328 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 85.707162][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.717232][ T4328] Workqueue: usbip_event event_handler [ 85.722729][ T4328] Call Trace: [ 85.726025][ T4328] [ 85.728970][ T4328] dump_stack_lvl+0x188/0x24e [ 85.733667][ T4328] ? __lock_acquire+0x7c40/0x7c40 [ 85.738705][ T4328] ? show_regs_print_info+0x12/0x12 [ 85.743926][ T4328] ? load_image+0x410/0x410 [ 85.748449][ T4328] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 85.753929][ T4328] ? __virt_addr_valid+0x188/0x540 [ 85.759104][ T4328] ? __virt_addr_valid+0x467/0x540 [ 85.764240][ T4328] ? __lock_acquire+0x107/0x7c40 [ 85.769194][ T4328] print_report+0xa8/0x210 [ 85.773632][ T4328] kasan_report+0x10b/0x140 [ 85.778162][ T4328] ? __lock_acquire+0x107/0x7c40 [ 85.783125][ T4328] __lock_acquire+0x107/0x7c40 [ 85.787936][ T4328] ? __sched_text_start+0x8/0x8 [ 85.792821][ T4328] ? prb_read_valid+0x60/0x60 [ 85.798174][ T4328] ? llist_add_batch+0x12b/0x180 [ 85.803853][ T4328] ? preempt_schedule+0xbc/0xd0 [ 85.808742][ T4328] ? verify_lock_unused+0x140/0x140 [ 85.813979][ T4328] ? preempt_schedule_common+0xa5/0xd0 [ 85.819474][ T4328] ? preempt_schedule+0xbc/0xd0 [ 85.824351][ T4328] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 85.829755][ T4328] ? __irq_work_queue_local+0x12c/0x190 [ 85.835335][ T4328] ? irq_work_queue+0xb8/0x140 [ 85.840148][ T4328] ? __wake_up_klogd+0xd9/0x100 [ 85.845020][ T4328] lock_acquire+0x1bb/0x4a0 [ 85.849543][ T4328] ? event_handler+0x2a5/0x460 [ 85.854323][ T4328] ? lock_chain_count+0x20/0x20 [ 85.859197][ T4328] ? read_lock_is_recursive+0x10/0x10 [ 85.864592][ T4328] _raw_spin_lock_irqsave+0xb0/0x100 [ 85.869893][ T4328] ? event_handler+0x2a5/0x460 [ 85.874665][ T4328] ? _raw_spin_lock+0x40/0x40 [ 85.879354][ T4328] ? vhci_shutdown_connection+0x3d5/0x580 [ 85.885114][ T4328] event_handler+0x2a5/0x460 [ 85.889715][ T4328] ? process_one_work+0x7b4/0x1160 [ 85.894847][ T4328] process_one_work+0x8ab/0x1160 [ 85.899810][ T4328] ? worker_detach_from_pool+0x240/0x240 [ 85.905461][ T4328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.910505][ T4328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.916072][ T4328] ? wq_worker_running+0x97/0x190 [ 85.921126][ T4328] worker_thread+0xaf5/0x12a0 [ 85.925826][ T4328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.931742][ T4328] kthread+0x29d/0x330 [ 85.942693][ T4328] ? worker_clr_flags+0x1a0/0x1a0 [ 85.947831][ T4328] ? kthread_blkcg+0xd0/0xd0 [ 85.952447][ T4328] ret_from_fork+0x1f/0x30 [ 85.956912][ T4328] [ 85.959941][ T4328] [ 85.962274][ T4328] Allocated by task 1: [ 85.966350][ T4328] kasan_set_track+0x4b/0x70 [ 85.970963][ T4328] __kasan_kmalloc+0x8e/0xa0 [ 85.975568][ T4328] __kmalloc+0xb3/0x240 [ 85.979739][ T4328] __usb_create_hcd+0x5f/0x830 [ 85.984512][ T4328] vhci_hcd_probe+0xff/0x370 [ 85.989099][ T4328] platform_probe+0x137/0x1c0 [ 85.993773][ T4328] really_probe+0x24a/0xb40 [ 85.998266][ T4328] __driver_probe_device+0x1f5/0x390 [ 86.003539][ T4328] driver_probe_device+0x4f/0x420 [ 86.008548][ T4328] __device_attach_driver+0x2c6/0x510 [ 86.013905][ T4328] bus_for_each_drv+0x184/0x210 [ 86.018740][ T4328] __device_attach+0x2a7/0x480 [ 86.023491][ T4328] bus_probe_device+0xba/0x1d0 [ 86.028253][ T4328] device_add+0xbcf/0x1050 [ 86.032687][ T4328] platform_device_add+0x4bf/0x830 [ 86.037800][ T4328] vhci_hcd_init+0x3c7/0x4f1 [ 86.042387][ T4328] do_one_initcall+0x257/0x800 [ 86.047149][ T4328] do_initcall_level+0x13d/0x1ed [ 86.052074][ T4328] do_initcalls+0x4b/0x8a [ 86.056419][ T4328] kernel_init_freeable+0x401/0x5ab [ 86.061631][ T4328] kernel_init+0x19/0x1b0 [ 86.065948][ T4328] ret_from_fork+0x1f/0x30 [ 86.070358][ T4328] [ 86.072666][ T4328] Freed by task 4820: [ 86.076625][ T4328] kasan_set_track+0x4b/0x70 [ 86.081210][ T4328] kasan_save_free_info+0x27/0x40 [ 86.086218][ T4328] ____kasan_slab_free+0x126/0x1f0 [ 86.091318][ T4328] slab_free_freelist_hook+0x133/0x1b0 [ 86.096764][ T4328] __kmem_cache_free+0xb6/0x200 [ 86.101602][ T4328] vhci_hcd_remove+0xe0/0x100 [ 86.106264][ T4328] platform_remove+0x92/0xe0 [ 86.110847][ T4328] device_release_driver_internal+0x47d/0x7c0 [ 86.116900][ T4328] unbind_store+0x2e2/0x300 [ 86.121400][ T4328] kernfs_fop_write_iter+0x3a0/0x520 [ 86.126668][ T4328] vfs_write+0x482/0x9a0 [ 86.130897][ T4328] ksys_write+0x14d/0x260 [ 86.135214][ T4328] do_syscall_64+0x4c/0xa0 [ 86.139615][ T4328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.145494][ T4328] [ 86.147808][ T4328] The buggy address belongs to the object at ffff8881467e8000 [ 86.147808][ T4328] which belongs to the cache kmalloc-8k of size 8192 [ 86.161846][ T4328] The buggy address is located 2288 bytes inside of [ 86.161846][ T4328] 8192-byte region [ffff8881467e8000, ffff8881467ea000) [ 86.175283][ T4328] [ 86.177592][ T4328] The buggy address belongs to the physical page: [ 86.183995][ T4328] page:ffffea000519fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1467e8 [ 86.194239][ T4328] head:ffffea000519fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 86.202545][ T4328] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 86.210599][ T4328] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017442280 [ 86.219167][ T4328] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 86.227743][ T4328] page dumped because: kasan: bad access detected [ 86.234155][ T4328] page_owner tracks the page as allocated [ 86.239855][ T4328] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11771006424, free_ts 0 [ 86.259557][ T4328] post_alloc_hook+0x173/0x1a0 [ 86.264317][ T4328] get_page_from_freelist+0x206b/0x2180 [ 86.269851][ T4328] __alloc_pages+0x1ec/0x4f0 [ 86.274430][ T4328] alloc_page_interleave+0x24/0x1e0 [ 86.279620][ T4328] alloc_slab_page+0x5d/0x180 [ 86.284282][ T4328] new_slab+0x87/0x2d0 [ 86.288336][ T4328] ___slab_alloc+0xbc5/0x1240 [ 86.292996][ T4328] __kmem_cache_alloc_node+0x126/0x270 [ 86.298437][ T4328] __kmalloc+0xa3/0x240 [ 86.302578][ T4328] __usb_create_hcd+0x5f/0x830 [ 86.307327][ T4328] vhci_hcd_probe+0xff/0x370 [ 86.311907][ T4328] platform_probe+0x137/0x1c0 [ 86.316571][ T4328] really_probe+0x24a/0xb40 [ 86.321061][ T4328] __driver_probe_device+0x1f5/0x390 [ 86.326327][ T4328] driver_probe_device+0x4f/0x420 [ 86.331333][ T4328] __device_attach_driver+0x2c6/0x510 [ 86.336686][ T4328] page_owner free stack trace missing [ 86.342049][ T4328] [ 86.344356][ T4328] Memory state around the buggy address: [ 86.349972][ T4328] ffff8881467e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.358015][ T4328] ffff8881467e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.366056][ T4328] >ffff8881467e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.374094][ T4328] ^ [ 86.381821][ T4328] ffff8881467e8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.389862][ T4328] ffff8881467e8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.397901][ T4328] ================================================================== [ 86.409184][ T4328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.416372][ T4328] CPU: 1 PID: 4328 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 86.423919][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.433983][ T4328] Workqueue: usbip_event event_handler [ 86.439442][ T4328] Call Trace: [ 86.442710][ T4328] [ 86.445630][ T4328] dump_stack_lvl+0x188/0x24e [ 86.450304][ T4328] ? memcpy+0x3c/0x60 [ 86.454276][ T4328] ? show_regs_print_info+0x12/0x12 [ 86.459466][ T4328] ? load_image+0x410/0x410 [ 86.463959][ T4328] panic+0x2d3/0x710 [ 86.467841][ T4328] ? __lock_acquire+0x7c40/0x7c40 [ 86.472856][ T4328] ? bpf_jit_dump+0xd0/0xd0 [ 86.477347][ T4328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.483225][ T4328] ? _raw_spin_unlock+0x40/0x40 [ 86.488062][ T4328] check_panic_on_warn+0x80/0xa0 [ 86.492986][ T4328] ? __lock_acquire+0x107/0x7c40 [ 86.497912][ T4328] end_report+0x66/0x110 [ 86.502144][ T4328] kasan_report+0x118/0x140 [ 86.506635][ T4328] ? __lock_acquire+0x107/0x7c40 [ 86.511566][ T4328] __lock_acquire+0x107/0x7c40 [ 86.516327][ T4328] ? __sched_text_start+0x8/0x8 [ 86.521179][ T4328] ? prb_read_valid+0x60/0x60 [ 86.525848][ T4328] ? llist_add_batch+0x12b/0x180 [ 86.530778][ T4328] ? preempt_schedule+0xbc/0xd0 [ 86.535623][ T4328] ? verify_lock_unused+0x140/0x140 [ 86.540818][ T4328] ? preempt_schedule_common+0xa5/0xd0 [ 86.546268][ T4328] ? preempt_schedule+0xbc/0xd0 [ 86.551110][ T4328] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 86.556474][ T4328] ? __irq_work_queue_local+0x12c/0x190 [ 86.562038][ T4328] ? irq_work_queue+0xb8/0x140 [ 86.566802][ T4328] ? __wake_up_klogd+0xd9/0x100 [ 86.571648][ T4328] lock_acquire+0x1bb/0x4a0 [ 86.576143][ T4328] ? event_handler+0x2a5/0x460 [ 86.580979][ T4328] ? lock_chain_count+0x20/0x20 [ 86.585820][ T4328] ? read_lock_is_recursive+0x10/0x10 [ 86.591185][ T4328] _raw_spin_lock_irqsave+0xb0/0x100 [ 86.596455][ T4328] ? event_handler+0x2a5/0x460 [ 86.601210][ T4328] ? _raw_spin_lock+0x40/0x40 [ 86.605884][ T4328] ? vhci_shutdown_connection+0x3d5/0x580 [ 86.611601][ T4328] event_handler+0x2a5/0x460 [ 86.616180][ T4328] ? process_one_work+0x7b4/0x1160 [ 86.621280][ T4328] process_one_work+0x8ab/0x1160 [ 86.626208][ T4328] ? worker_detach_from_pool+0x240/0x240 [ 86.631833][ T4328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.636847][ T4328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.642379][ T4328] ? wq_worker_running+0x97/0x190 [ 86.647396][ T4328] worker_thread+0xaf5/0x12a0 [ 86.652067][ T4328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.661637][ T4328] kthread+0x29d/0x330 [ 86.665697][ T4328] ? worker_clr_flags+0x1a0/0x1a0 [ 86.670728][ T4328] ? kthread_blkcg+0xd0/0xd0 [ 86.675336][ T4328] ret_from_fork+0x1f/0x30 [ 86.679767][ T4328] [ 86.683028][ T4328] Kernel Offset: disabled [ 86.687345][ T4328] Rebooting in 86400 seconds..