last executing test programs:
15.209372028s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r0, &(0x7f00000005c0)='10\n\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='1\n\x00', 0x2) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/unlock_filesystem\x00', 0x2, 0x0)
write(r4, &(0x7f0000000640)='\n\x00', 0x1)
11.491923561s ago: executing program 1 (id=7):
unshare(0x40000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff)
mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='10\n', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000007c0)='10\n', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000240)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file1\x00', 0x42, 0x1ff)
rename(&(0x7f0000000580)='./mnt/file1\x00', &(0x7f00000005c0)='./mnt/file2\x00')
8.049594105s ago: executing program 3 (id=9):
r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40b113420000010000000109024a0001010080fa0904000008ffffff000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0)
syz_usb_ep_read(r0, 0x81, 0x10, &(0x7f0000000000))
syz_usb_ep_read(r0, 0x81, 0x10, &(0x7f0000000000))
syz_usb_ep_read(r0, 0x81, 0x10, &(0x7f0000000000))
syz_usb_ep_read(r0, 0x81, 0x10, &(0x7f0000000000))
syz_usb_ep_read(r0, 0x81, 0x10, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000201000008000100000000000500590001000000"], 0x24}}, 0x0)
5.749948037s ago: executing program 2 (id=10):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/doesnotexist\x00', 0x2, 0x0)
read(r0, &(0x7f0000000280)=""/5, 0x5)
5.575714237s ago: executing program 2 (id=11):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001221b00090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221b00000005010902a1010930150025643500456455006511750895018102c0"], 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
5.500297362s ago: executing program 0 (id=12):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='syz0\n\x00', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x0, 0x0)
5.295111801s ago: executing program 0 (id=13):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/i8042/resource\x00', 0x0, 0x0)
5.051319439s ago: executing program 0 (id=14):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000480)="5400000012000100"/21, 0x15)
4.927688336s ago: executing program 0 (id=15):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
nanosleep(&(0x7f0000000500)={0x5}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) (async)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7)
syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x42, 0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, 0x0, 0x200}}}}, 0x16)
4.404591978s ago: executing program 1 (id=16):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08', 0x87)
3.963932975s ago: executing program 1 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/netfilter/nf_conntrack_max\x00', 0x0, 0x0)
3.860393503s ago: executing program 0 (id=18):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0xf, "0f03000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
3.590288066s ago: executing program 1 (id=19):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0)
nanosleep(&(0x7f0000000200)={0x1}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0)
ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20)
ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64)
ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20)
ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20)
ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000002c0100"/88)
ioctl(r0, 0xc058560f, &(0x7f0000000800)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/88)
ioctl(r0, 0xc058560f, &(0x7f0000000900)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600000000000000002c0100"/88)
ioctl(r0, 0xc058560f, &(0x7f0000000a00)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700000000000000002c0100"/88)
ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20)
3.43980763s ago: executing program 3 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0_resize\x00', 0x1, 0x0)
2.766026649s ago: executing program 3 (id=21):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x6, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc1, 0x0, 0x4, "05000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc1, 0x2, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000001000)="0a000100010000000001")
syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000001100)="0b00020002000000000000")
syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000001200)="090003002000000000")
nanosleep(&(0x7f0000001300)={0x1}, 0x0)
2.084106602s ago: executing program 2 (id=22):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)='syz0\n\x00', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff)
mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x0, 0x0)
1.539502231s ago: executing program 2 (id=23):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000480)="5400000012000100"/23, 0x17)
963.427917ms ago: executing program 2 (id=24):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
409.456225ms ago: executing program 1 (id=25):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08', 0x87)
159.785207ms ago: executing program 2 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b40)='/bin/true\n\x00', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r2, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='8\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000a00)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0)
read(r5, &(0x7f0000000400), 0x64)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0)
read(r6, &(0x7f0000000400), 0x64)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0)
read(r7, &(0x7f0000000400), 0x64)
68.284326ms ago: executing program 1 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='disk\n', 0x5)
0s ago: executing program 0 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='vivid.0\x00', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='vimc.0\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='vim2m.0\x00', 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='vicodec.0\x00', 0xa)
syz_usb_connect(0x0, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ffffff40450580800a03010203010902200001010080320904000002ffffff000705810140000107050202400000"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000600)={0x2, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000700)=0x1)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts.
[ 90.743110][ T5580] cgroup: Unknown subsys name 'net'
[ 91.007546][ T5580] cgroup: Unknown subsys name 'cpuset'
[ 91.079966][ T5580] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 91.733604][ T201] cfg80211: failed to load regulatory.db
[ 93.024176][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.738834][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.764479][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 95.792486][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 95.822434][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 95.828207][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.837494][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 95.843432][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 95.844854][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 95.849623][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 95.861838][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 95.865922][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 95.868365][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 95.869681][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 95.872707][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.889184][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 95.892473][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.898930][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 95.918711][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.921420][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 95.930529][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 97.961163][ T5604] Bluetooth: hci3: command tx timeout
[ 98.119569][ T4910] Bluetooth: hci2: command tx timeout
[ 98.120777][ T5604] Bluetooth: hci1: command tx timeout
[ 98.199534][ T5604] Bluetooth: hci0: command tx timeout
[ 98.239779][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.240327][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.240907][ T5600] bridge_slave_0: entered allmulticast mode
[ 98.243644][ T5600] bridge_slave_0: entered promiscuous mode
[ 98.302043][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.302291][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.302547][ T5602] bridge_slave_0: entered allmulticast mode
[ 98.305049][ T5602] bridge_slave_0: entered promiscuous mode
[ 98.311200][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.312057][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.312908][ T5600] bridge_slave_1: entered allmulticast mode
[ 98.321949][ T5600] bridge_slave_1: entered promiscuous mode
[ 98.376242][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.376529][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.376959][ T5602] bridge_slave_1: entered allmulticast mode
[ 98.379815][ T5602] bridge_slave_1: entered promiscuous mode
[ 98.545715][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.546582][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.546938][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.547772][ T5601] bridge_slave_0: entered allmulticast mode
[ 98.552206][ T5601] bridge_slave_0: entered promiscuous mode
[ 98.611385][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.616977][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.617556][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.617817][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.618255][ T5601] bridge_slave_1: entered allmulticast mode
[ 98.631363][ T5601] bridge_slave_1: entered promiscuous mode
[ 98.740173][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.781043][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.781328][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.781507][ T5599] bridge_slave_0: entered allmulticast mode
[ 98.784009][ T5599] bridge_slave_0: entered promiscuous mode
[ 98.860511][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.860848][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.861052][ T5599] bridge_slave_1: entered allmulticast mode
[ 98.863640][ T5599] bridge_slave_1: entered promiscuous mode
[ 98.908519][ T5600] team0: Port device team_slave_0 added
[ 98.920083][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.949789][ T5602] team0: Port device team_slave_0 added
[ 98.954786][ T5600] team0: Port device team_slave_1 added
[ 98.959187][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.995735][ T5602] team0: Port device team_slave_1 added
[ 99.040529][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.115418][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.143271][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.143288][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.143308][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.148655][ T5601] team0: Port device team_slave_0 added
[ 99.211601][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.211614][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.211634][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.214020][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.214031][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.214051][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.218338][ T5601] team0: Port device team_slave_1 added
[ 99.305815][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.305872][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.305961][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.379136][ T5599] team0: Port device team_slave_0 added
[ 99.418707][ T5599] team0: Port device team_slave_1 added
[ 99.430746][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.430758][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.430784][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.511101][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.511114][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.511134][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.612391][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.612404][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.612424][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.672791][ T5600] hsr_slave_0: entered promiscuous mode
[ 99.674652][ T5600] hsr_slave_1: entered promiscuous mode
[ 99.686276][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.686308][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.686387][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.960861][ T5602] hsr_slave_0: entered promiscuous mode
[ 99.962660][ T5602] hsr_slave_1: entered promiscuous mode
[ 99.964175][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[ 99.964272][ T5602] Cannot create hsr debugfs directory
[ 100.039514][ T5604] Bluetooth: hci3: command tx timeout
[ 100.105451][ T5601] hsr_slave_0: entered promiscuous mode
[ 100.107140][ T5601] hsr_slave_1: entered promiscuous mode
[ 100.108545][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[ 100.108568][ T5601] Cannot create hsr debugfs directory
[ 100.200727][ T4910] Bluetooth: hci2: command tx timeout
[ 100.200847][ T5604] Bluetooth: hci1: command tx timeout
[ 100.247028][ T5599] hsr_slave_0: entered promiscuous mode
[ 100.248701][ T5599] hsr_slave_1: entered promiscuous mode
[ 100.253768][ T5599] debugfs: 'hsr0' already exists in 'hsr'
[ 100.253831][ T5599] Cannot create hsr debugfs directory
[ 100.279536][ T5604] Bluetooth: hci0: command tx timeout
[ 101.049183][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 101.103402][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 101.109013][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 101.156511][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 101.171752][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 101.195031][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 101.230764][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 101.269079][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 101.427437][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.468660][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 101.482648][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.517208][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 101.564519][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.595232][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 101.614853][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.663985][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 101.792171][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 101.833832][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 101.859874][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 101.905656][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 101.917165][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 101.955605][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 101.997808][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 102.026612][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 102.119722][ T5604] Bluetooth: hci3: command tx timeout
[ 102.166619][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 102.212510][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 102.230959][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 102.264753][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 102.280159][ T5604] Bluetooth: hci1: command tx timeout
[ 102.280193][ T5604] Bluetooth: hci2: command tx timeout
[ 102.281040][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 102.327481][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 102.345937][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 102.359628][ T4910] Bluetooth: hci0: command tx timeout
[ 102.383923][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 102.496599][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.616527][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.682035][ T148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.682280][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.708907][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.756016][ T148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.756138][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.864630][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.883462][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.961239][ T162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.961541][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.017695][ T162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.017830][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.056884][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.142336][ T162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.142523][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.164044][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.210357][ T162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.210569][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.364509][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.492260][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.492376][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.534562][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.534793][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.200789][ T4910] Bluetooth: hci3: command tx timeout
[ 104.366582][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.370981][ T4910] Bluetooth: hci2: command tx timeout
[ 104.371014][ T4910] Bluetooth: hci1: command tx timeout
[ 104.451782][ T5604] Bluetooth: hci0: command tx timeout
[ 104.842932][ T5600] veth0_vlan: entered promiscuous mode
[ 104.928244][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.951683][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.976337][ T5600] veth1_vlan: entered promiscuous mode
[ 105.186325][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.253699][ T5600] veth0_macvtap: entered promiscuous mode
[ 105.296558][ T5600] veth1_macvtap: entered promiscuous mode
[ 105.313019][ T5601] veth0_vlan: entered promiscuous mode
[ 105.329913][ T5599] veth0_vlan: entered promiscuous mode
[ 105.388911][ T5601] veth1_vlan: entered promiscuous mode
[ 105.402782][ T5599] veth1_vlan: entered promiscuous mode
[ 105.424385][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.473415][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.523437][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.527728][ T5602] veth0_vlan: entered promiscuous mode
[ 105.544532][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.564681][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.583388][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.672719][ T5602] veth1_vlan: entered promiscuous mode
[ 105.757040][ T5601] veth0_macvtap: entered promiscuous mode
[ 105.791400][ T5599] veth0_macvtap: entered promiscuous mode
[ 105.882607][ T5601] veth1_macvtap: entered promiscuous mode
[ 105.910758][ T5599] veth1_macvtap: entered promiscuous mode
[ 106.088131][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.105345][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.174222][ T5602] veth0_macvtap: entered promiscuous mode
[ 106.185617][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.196647][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.237170][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.237193][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.263649][ T5602] veth1_macvtap: entered promiscuous mode
[ 106.311118][ T1528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.330512][ T1528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.337544][ T1528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.377326][ T1528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.408023][ T1528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.425941][ T1528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.438036][ T1528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.545113][ T1528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.571679][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.571700][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.710878][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.997239][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.194806][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.217002][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.217779][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.217821][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.418089][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.418108][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.636813][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.636835][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.033300][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.033319][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.277693][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.277715][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.697752][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.697775][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.028293][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.028325][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.256548][ T5764] jffs2: notice: (5764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 110.333219][ T5581] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 110.710654][ T5581] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 110.758071][ T5581] usb 2-1: not running at top speed; connect to a high speed hub
[ 110.837786][ T5581] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[ 110.837819][ T5581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 110.837840][ T5581] usb 2-1: Product: syz
[ 110.837856][ T5581] usb 2-1: Manufacturer: syz
[ 110.837871][ T5581] usb 2-1: SerialNumber: syz
[ 112.413103][ T5762] infiniband syz1: set active
[ 112.426814][ T5762] infiniband syz1: added veth0
[ 112.546011][ T5762] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 112.605444][ T5762] infiniband syz1: Couldn't open port 1
[ 112.605860][ T5762] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 112.606640][ T5762] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 112.606704][ T5762] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 112.853214][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 113.110942][ T5762] RDS/IB: syz1: added
[ 113.124965][ T10] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[ 113.125056][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.125078][ T10] usb 3-1: Product: syz
[ 113.125093][ T10] usb 3-1: Manufacturer: syz
[ 113.125107][ T10] usb 3-1: SerialNumber: syz
[ 113.155534][ T5762] smc: adding ib device syz1 with port count 1
[ 113.176795][ T5762] smc: ib device syz1 port 1 has no pnetid
[ 114.023134][ T5581] usb 2-1: 2:0: failed to get current value for ch 0 (-22)
[ 114.831362][ T10] kalmia 3-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle, 66:59:62:80:8a:c7
[ 115.427324][ T5581] usb 2-1: USB disconnect, device number 2
[ 116.029078][ T10] usb 3-1: USB disconnect, device number 2
[ 116.155181][ T10] kalmia 3-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle
[ 116.827230][ T5778] NFSD: Unable to initialize client recovery tracking! (-110)
[ 116.827252][ T5778] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[ 116.827264][ T5778] NFSD: starting 10-second grace period (net f00003ba)
[ 117.091063][ T5780] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 117.307761][ T5780] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[ 117.307795][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 117.307817][ T5780] usb 3-1: Product: syz
[ 117.307833][ T5780] usb 3-1: Manufacturer: syz
[ 117.568599][ T5780] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5
[ 118.399672][ T5792] NFSD: Unable to initialize client recovery tracking! (-110)
[ 118.399696][ T5792] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[ 118.399710][ T5792] NFSD: starting 90-second grace period (net f00004c1)
[ 118.901900][ T5780] usb 3-1: USB disconnect, device number 3
[ 120.219561][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 120.229656][ T825] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 120.370630][ T10] usb 3-1: Using ep0 maxpacket: 16
[ 120.375816][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 120.375853][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 120.375903][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 120.375920][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 120.422231][ T10] usb 3-1: config 0 descriptor??
[ 120.434806][ T825] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00
[ 120.434834][ T825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 120.587413][ T825] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 120.788297][ T3320] usb 4-1: Failed to submit usb control message: -71
[ 120.788397][ T3320] usb 4-1: unable to send the bmi data to the device: -71
[ 120.788414][ T3320] usb 4-1: unable to get target info from device
[ 120.788437][ T3320] usb 4-1: could not get target info (-71)
[ 120.794524][ T3320] usb 4-1: could not probe fw (-71)
[ 120.828334][ T825] usb 4-1: USB disconnect, device number 2
[ 120.999008][ T5855] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[ 121.153526][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6
[ 121.495037][ T5603] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 121.726465][ T5603] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 121.726496][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 121.894438][ T5603] usb 1-1: probing VID:PID(0424:012C)
[ 121.926123][ T5603] usb 1-1: vub300 testing BULK IN EndPoint(0) 81
[ 121.926157][ T5603] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02
[ 121.926176][ T5603] usb 1-1: vub300 testing BULK IN EndPoint(2) 83
[ 121.926194][ T5603] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04
[ 121.926213][ T5603] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 122.196962][ T10] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Mouse [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 122.289595][ T5604] Bluetooth: hci2: command 0x2016 tx timeout
[ 122.321899][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 122.355340][ T10] usb 3-1: USB disconnect, device number 4
[ 122.355590][ T5603] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 122.538419][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[ 122.538454][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 122.538475][ T9] usb 2-1: Product: syz
[ 122.538491][ T9] usb 2-1: Manufacturer: syz
[ 122.582336][ T5603] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[ 122.816475][ T5866] fido_id[5866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 122.876349][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7
[ 123.097263][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 123.293358][ T32] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 123.293387][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 123.293407][ T32] usb 4-1: Product: syz
[ 123.293421][ T32] usb 4-1: Manufacturer: syz
[ 123.293436][ T32] usb 4-1: SerialNumber: syz
[ 123.629713][ T32] usb 4-1: Invalid number of CPorts: 0
[ 123.629772][ T32] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -22
[ 124.188705][ T9] usb 2-1: USB disconnect, device number 3
[ 124.225275][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 124.383183][ T5614] Bluetooth: hci2: command 0x2016 tx timeout
[ 124.511407][ T5735] usb 1-1: USB disconnect, device number 2
[ 124.528484][ T5704] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 124.538864][ T5704] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[ 124.751440][ T5735] USB vub300 remote SDIO host controller[0] now disconnected
[ 124.888553][ T5889] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[ 125.102679][ T5894] PM: hibernation: hibernation entry
[ 125.443045][ T5903] vim2m vim2m.0: Removing vim2m
[ 125.458322][ T5904] vicodec vicodec.0: Removing vicodec
[ 125.553634][ T5898] vivid-000: unregistering video7
[ 125.560157][ C1] BUG: sleeping function called from invali[ 125.560157][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4544
[ 125.560178][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 30, name: ktimers/1
[ 125.560199][ C1] preempt_count: 0, expected: 0
[ 125.560210][ C1] RCU nest depth: 2, expected: 0
[ 125.560297][ C1] locks held by ktimers/1/30: 5, last CPU#1:
[ 125.560340][ C1] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 125.560528][ C1] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 125.560662][ C1] #2: ffff8880b8726260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0
[ 125.560803][ C1] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 125.560972][ C1] #4: ffffc90000a4fa80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[ 125.561153][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 125.561210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 125.561232][ C1] Call Trace:
[ 125.561241][ C1]
[ 125.561251][ C1] dump_stack_lvl+0xe8/0x150
[ 125.561283][ C1] __might_resched+0x329/0x480
[ 125.561319][ C1] __cancel_work_sync+0x6d/0x110
[ 125.561353][ C1] mmc_free_host+0x19/0x30
[ 125.561426][ C1] call_timer_fn+0x192/0x5e0
[ 125.561525][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.561610][ C1] ? call_timer_fn+0xd4/0x5e0
[ 125.561675][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 125.561761][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.561824][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.561910][ C1] __run_timer_base+0x67b/0x9b0
[ 125.562010][ C1] ? __pfx___run_timer_base+0x10/0x10
[ 125.562088][ C1] ? lock_acquire+0x115/0x350
[ 125.562214][ C1] run_timer_softirq+0xb7/0x170
[ 125.562271][ C1] handle_softirqs+0x1d9/0x6c0
[ 125.562328][ C1] run_ktimerd+0x69/0x100
[ 125.562357][ C1] smpboot_thread_fn+0x57c/0xa80
[ 125.562390][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 125.562428][ C1] kthread+0x388/0x470
[ 125.562461][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 125.562489][ C1] ? __pfx_kthread+0x10/0x10
[ 125.562552][ C1] ret_from_fork+0x514/0xb70
[ 125.562646][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 125.562736][ C1] ? __switch_to+0xc89/0x1420
[ 125.562839][ C1] ? __pfx_kthread+0x10/0x10
[ 125.562923][ C1] ret_from_fork_asm+0x1a/0x30
[ 125.563060][ C1]
[ 125.564057][ C1]
[ 125.564080][ C1] =============================
[ 125.564101][ C1] WARNING: suspicious RCU usage
[ 125.564113][ C1] syzkaller #0 Tainted: G W
[ 125.564125][ C1] -----------------------------
[ 125.564132][ C1] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[ 125.564150][ C1]
[ 125.564150][ C1] other info that might help us debug this:
[ 125.564150][ C1]
[ 125.564158][ C1]
[ 125.564158][ C1] rcu_scheduler_active = 2, debug_locks = 1
[ 125.564193][ C1] locks held by ktimers/1/30: 5, last CPU#1:
[ 125.564248][ C1] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 125.564418][ C1] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[ 125.564552][ C1] #2: ffff8880b8726260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0
[ 125.564634][ C1] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[ 125.564698][ C1] #4: ffffc90000a4fa80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[ 125.564817][ C1]
[ 125.564817][ C1] stack backtrace:
[ 125.564859][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)}
[ 125.564934][ C1] Tainted: [W]=WARN
[ 125.564956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 125.564982][ C1] Call Trace:
[ 125.565003][ C1]
[ 125.565033][ C1] dump_stack_lvl+0xe8/0x150
[ 125.565118][ C1] lockdep_rcu_suspicious+0x13f/0x1d0
[ 125.565200][ C1] __synchronize_srcu+0x157/0x2f0
[ 125.565243][ C1] ? __pfx___synchronize_srcu+0x10/0x10
[ 125.565311][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 125.565385][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[ 125.565492][ C1] ? synchronize_srcu+0x20a/0x260
[ 125.565572][ C1] wakeup_source_unregister+0x127/0x3d0
[ 125.565647][ C1] mmc_host_classdev_release+0x47/0x100
[ 125.565714][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 125.565752][ C1] device_release+0xc4/0x1f0
[ 125.565787][ C1] kobject_put+0x222/0x550
[ 125.565816][ C1] ? mmc_pwrseq_free+0x86/0xa0
[ 125.565849][ C1] call_timer_fn+0x192/0x5e0
[ 125.565891][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.565978][ C1] ? call_timer_fn+0xd4/0x5e0
[ 125.566043][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 125.566139][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.566201][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.566294][ C1] __run_timer_base+0x67b/0x9b0
[ 125.566392][ C1] ? __pfx___run_timer_base+0x10/0x10
[ 125.566479][ C1] ? lock_acquire+0x115/0x350
[ 125.566598][ C1] run_timer_softirq+0xb7/0x170
[ 125.566662][ C1] handle_softirqs+0x1d9/0x6c0
[ 125.566768][ C1] run_ktimerd+0x69/0x100
[ 125.566797][ C1] smpboot_thread_fn+0x57c/0xa80
[ 125.566829][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 125.566865][ C1] kthread+0x388/0x470
[ 125.566908][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 125.566935][ C1] ? __pfx_kthread+0x10/0x10
[ 125.566976][ C1] ret_from_fork+0x514/0xb70
[ 125.567048][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 125.567152][ C1] ? __switch_to+0xc89/0x1420
[ 125.567236][ C1] ? __pfx_kthread+0x10/0x10
[ 125.567314][ C1] ret_from_fork_asm+0x1a/0x30
[ 125.567424][ C1]
[ 125.569799][ C1] ------------[ cut here ]------------
[ 125.569832][ C1] Voluntary context switch within RCU read-side critical section!
[ 125.569871][ C1] WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc58/0xef0, CPU#1: ktimers/1/30
[ 125.570010][ C1] Modules linked in:
[ 125.570071][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)}
[ 125.570147][ C1] Tainted: [W]=WARN
[ 125.570168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 125.570200][ C1] RIP: 0010:rcu_note_context_switch+0xc58/0xef0
[ 125.570245][ C1] Code: 00 41 c6 45 00 00 48 8b 3d 55 7d 25 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 60 ff ff 48 8d 3d d8 29 29 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff
[ 125.570264][ C1] RSP: 0018:ffffc90000a4f2c0 EFLAGS: 00010002
[ 125.570283][ C1] RAX: 0000000000000000 RBX: ffff88801e2f9f40 RCX: 0000000080000002
[ 125.570300][ C1] RDX: 0000000000000000 RSI: ffffffff8bcbd060 RDI: ffffffff8fd41d10
[ 125.570316][ C1] RBP: dffffc0000000000 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f
[ 125.570333][ C1] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000000
[ 125.570363][ C1] R13: dffffc0000000000 R14: ffff8880b873c900 R15: ffff88801e2fa404
[ 125.570391][ C1] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000
[ 125.570408][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 125.570423][ C1] CR2: 00007fa5f3057180 CR3: 0000000034a0a000 CR4: 00000000003526f0
[ 125.570450][ C1] Call Trace:
[ 125.570459][ C1]
[ 125.570475][ C1] ? ret_from_fork_asm+0x1a/0x30
[ 125.570592][ C1] ? unwind_next_frame+0x8f/0x2550
[ 125.570665][ C1] ? rcu_is_watching+0x15/0xb0
[ 125.570750][ C1] __schedule+0x296/0x5530
[ 125.570818][ C1] ? __lock_acquire+0x6df/0x2e40
[ 125.570892][ C1] ? stack_trace_save+0xa9/0x100
[ 125.570934][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 125.570996][ C1] ? check_path+0x21/0x40
[ 125.571060][ C1] ? check_noncircular+0xdb/0x150
[ 125.571148][ C1] ? __pfx___schedule+0x10/0x10
[ 125.571232][ C1] ? lock_acquire+0x115/0x350
[ 125.571565][ C1] ? schedule+0x90/0x2b0
[ 125.571673][ C1] schedule+0x164/0x2b0
[ 125.571722][ C1] schedule_timeout+0xc0/0x2c0
[ 125.571769][ C1] ? __pfx_schedule_timeout+0x10/0x10
[ 125.571803][ C1] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.572109][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.572141][ C1] ? wait_for_completion+0x272/0x5e0
[ 125.572168][ C1] wait_for_completion+0x2ca/0x5e0
[ 125.572205][ C1] ? __pfx_wait_for_completion+0x10/0x10
[ 125.572242][ C1] __synchronize_srcu+0x23b/0x2f0
[ 125.572272][ C1] ? __pfx___synchronize_srcu+0x10/0x10
[ 125.572298][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10
[ 125.572326][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[ 125.572359][ C1] ? synchronize_srcu+0x20a/0x260
[ 125.572376][ C1] wakeup_source_unregister+0x127/0x3d0
[ 125.572398][ C1] mmc_host_classdev_release+0x47/0x100
[ 125.572418][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 125.572436][ C1] device_release+0xc4/0x1f0
[ 125.572460][ C1] kobject_put+0x222/0x550
[ 125.572480][ C1] ? mmc_pwrseq_free+0x86/0xa0
[ 125.572501][ C1] call_timer_fn+0x192/0x5e0
[ 125.572524][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.572547][ C1] ? call_timer_fn+0xd4/0x5e0
[ 125.572565][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 125.572591][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.572606][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.572631][ C1] __run_timer_base+0x67b/0x9b0
[ 125.572658][ C1] ? __pfx___run_timer_base+0x10/0x10
[ 125.572679][ C1] ? lock_acquire+0x115/0x350
[ 125.572796][ C1] run_timer_softirq+0xb7/0x170
[ 125.572830][ C1] handle_softirqs+0x1d9/0x6c0
[ 125.572868][ C1] run_ktimerd+0x69/0x100
[ 125.572897][ C1] smpboot_thread_fn+0x57c/0xa80
[ 125.572938][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 125.573010][ C1] kthread+0x388/0x470
[ 125.573042][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 125.573069][ C1] ? __pfx_kthread+0x10/0x10
[ 125.573103][ C1] ret_from_fork+0x514/0xb70
[ 125.573181][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 125.573279][ C1] ? __switch_to+0xc89/0x1420
[ 125.573362][ C1] ? __pfx_kthread+0x10/0x10
[ 125.573454][ C1] ret_from_fork_asm+0x1a/0x30
[ 125.573600][ C1]
[ 125.573630][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 125.573688][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)}
[ 125.573768][ C1] Tainted: [W]=WARN
[ 125.573789][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 125.573820][ C1] Call Trace:
[ 125.573842][ C1]
[ 125.573850][ C1] vpanic+0x56c/0xa60
[ 125.573888][ C1] ? __pfx__printk+0x10/0x10
[ 125.573968][ C1] ? __pfx_vpanic+0x10/0x10
[ 125.574020][ C1] ? is_bpf_text_address+0x292/0x2b0
[ 125.574065][ C1] ? is_bpf_text_address+0x26/0x2b0
[ 125.574101][ C1] panic+0xc5/0xd0
[ 125.574124][ C1] ? __pfx_panic+0x10/0x10
[ 125.574157][ C1] ? ret_from_fork_asm+0x1a/0x30
[ 125.574203][ C1] __warn+0x315/0x4c0
[ 125.574225][ C1] ? rcu_note_context_switch+0xc58/0xef0
[ 125.574309][ C1] ? rcu_note_context_switch+0xc58/0xef0
[ 125.574394][ C1] __report_bug+0x276/0x570
[ 125.574458][ C1] ? __pfx_prb_first_seq+0x10/0x10
[ 125.574550][ C1] ? rcu_note_context_switch+0xc58/0xef0
[ 125.574683][ C1] ? __pfx___report_bug+0x10/0x10
[ 125.574800][ C1] ? rcu_is_watching+0x15/0xb0
[ 125.574864][ C1] ? __kasan_check_byte+0x12/0x40
[ 125.575007][ C1] report_bug_entry+0x19a/0x290
[ 125.575072][ C1] ? rcu_note_context_switch+0xc58/0xef0
[ 125.575153][ C1] ? rcu_note_context_switch+0xc5d/0xef0
[ 125.575211][ C1] handle_bug+0xce/0x200
[ 125.575239][ C1] exc_invalid_op+0x1a/0x50
[ 125.575266][ C1] asm_exc_invalid_op+0x1a/0x20
[ 125.575288][ C1] RIP: 0010:rcu_note_context_switch+0xc58/0xef0
[ 125.575324][ C1] Code: 00 41 c6 45 00 00 48 8b 3d 55 7d 25 0e 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cf 60 ff ff 48 8d 3d d8 29 29 0e <67> 48 0f b9 3a e9 6f f4 ff ff 90 0f 0b 90 45 84 e4 0f 84 3e f4 ff
[ 125.575356][ C1] RSP: 0018:ffffc90000a4f2c0 EFLAGS: 00010002
[ 125.575407][ C1] RAX: 0000000000000000 RBX: ffff88801e2f9f40 RCX: 0000000080000002
[ 125.575442][ C1] RDX: 0000000000000000 RSI: ffffffff8bcbd060 RDI: ffffffff8fd41d10
[ 125.575482][ C1] RBP: dffffc0000000000 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f
[ 125.575531][ C1] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000000
[ 125.575554][ C1] R13: dffffc0000000000 R14: ffff8880b873c900 R15: ffff88801e2fa404
[ 125.575634][ C1] ? ret_from_fork_asm+0x1a/0x30
[ 125.575702][ C1] ? unwind_next_frame+0x8f/0x2550
[ 125.575772][ C1] ? rcu_is_watching+0x15/0xb0
[ 125.575846][ C1] __schedule+0x296/0x5530
[ 125.575992][ C1] ? __lock_acquire+0x6df/0x2e40
[ 125.576069][ C1] ? stack_trace_save+0xa9/0x100
[ 125.576177][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 125.576281][ C1] ? check_path+0x21/0x40
[ 125.576307][ C1] ? check_noncircular+0xdb/0x150
[ 125.576342][ C1] ? __pfx___schedule+0x10/0x10
[ 125.576374][ C1] ? lock_acquire+0x115/0x350
[ 125.576422][ C1] ? schedule+0x90/0x2b0
[ 125.576462][ C1] schedule+0x164/0x2b0
[ 125.576548][ C1] schedule_timeout+0xc0/0x2c0
[ 125.576633][ C1] ? __pfx_schedule_timeout+0x10/0x10
[ 125.576727][ C1] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.576843][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.576898][ C1] ? wait_for_completion+0x272/0x5e0
[ 125.576950][ C1] wait_for_completion+0x2ca/0x5e0
[ 125.576998][ C1] ? __pfx_wait_for_completion+0x10/0x10
[ 125.577049][ C1] __synchronize_srcu+0x23b/0x2f0
[ 125.577091][ C1] ? __pfx___synchronize_srcu+0x10/0x10
[ 125.577128][ C1] ? __pfx_wakeme_after_rcu+0x10/0x10
[ 125.577168][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[ 125.577209][ C1] ? synchronize_srcu+0x20a/0x260
[ 125.577234][ C1] wakeup_source_unregister+0x127/0x3d0
[ 125.577267][ C1] mmc_host_classdev_release+0x47/0x100
[ 125.577293][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10
[ 125.577317][ C1] device_release+0xc4/0x1f0
[ 125.577352][ C1] kobject_put+0x222/0x550
[ 125.577380][ C1] ? mmc_pwrseq_free+0x86/0xa0
[ 125.577412][ C1] call_timer_fn+0x192/0x5e0
[ 125.577439][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.577472][ C1] ? call_timer_fn+0xd4/0x5e0
[ 125.577509][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 125.577547][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 125.577569][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 125.577603][ C1] __run_timer_base+0x67b/0x9b0
[ 125.577643][ C1] ? __pfx___run_timer_base+0x10/0x10
[ 125.577673][ C1] ? lock_acquire+0x115/0x350
[ 125.577719][ C1] run_timer_softirq+0xb7/0x170
[ 125.577743][ C1] handle_softirqs+0x1d9/0x6c0
[ 125.577779][ C1] run_ktimerd+0x69/0x100
[ 125.577806][ C1] smpboot_thread_fn+0x57c/0xa80
[ 125.577834][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 125.577869][ C1] kthread+0x388/0x470
[ 125.577899][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 125.577923][ C1] ? __pfx_kthread+0x10/0x10
[ 125.577960][ C1] ret_from_fork+0x514/0xb70
[ 125.577992][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 125.578024][ C1] ? __switch_to+0xc89/0x1420
[ 125.578054][ C1] ? __pfx_kthread+0x10/0x10
[ 125.578086][ C1] ret_from_fork_asm+0x1a/0x30
[ 125.578136][ C1]
[ 125.578733][ C1] Kernel Offset: disabled