last executing test programs: 3m48.577516768s ago: executing program 4 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:127.0.0.1\x00', 0xf) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 3m48.33835698s ago: executing program 4 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)='\x00'/14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m48.057570914s ago: executing program 4 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='11', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='16', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='17', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='18', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='19', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) 3m32.916012501s ago: executing program 32 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='11', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='16', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='17', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='18', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='19', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) 2m30.557927828s ago: executing program 0 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='127.0.0.1', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='4420', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) close(r4) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = syz_socket_connect_nvme_tcp() nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) close(r5) nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) 2m28.077850557s ago: executing program 0 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x100) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, 0x0) 2m22.104648879s ago: executing program 2 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='7777\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./hb_file\x00', 0x42, 0x1b6) ftruncate(r3, 0x1000000) r4 = syz_open_dev$loop(&(0x7f00000005e0), 0x0, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) dup2(r4, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='512\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r5, &(0x7f0000000740)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r6, &(0x7f0000000840)='10\n', 0x3) 2m21.740169507s ago: executing program 2 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='127.0.0.1', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='4420', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) close(r4) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = syz_socket_connect_nvme_tcp() nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) close(r5) nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) 2m21.548074366s ago: executing program 3 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/100, 0x64) 2m20.83294248s ago: executing program 0 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) 2m20.818663627s ago: executing program 2 (id=551): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9) close(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c) 2m20.726062458s ago: executing program 3 (id=552): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="362aeb16e31bc8adddcabeffea4caf61d8da6293e66e30e33db60d6dbb4cd59e3433e02983088de8d1e1adb79edf72a4695f14d48c5aa5c8b6a99b6f31ca8c1c69c51c08929bd6b4681a3e78254dc13c1c95eea6bcceca2caba48efa3e92b0801a87d0a0a692445b07766a05a66c28899b63002c3a496a2e", 0x78}], 0x1, &(0x7f0000003180)="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", 0xbe9, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r6 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08}) sched_getattr(0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001600)=""/108, 0x6c) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=ANY=[@ANYRESHEX, @ANYBLOB="998e57ccbbcaf4250470b6cee01913243d3481baeeafd6ae79b572879326cf32bd3c9c18c28307350fa3ea0560bf6710cbb51a369460b1e0745a7142145c5aac38514db2acbe4f729405b3cb8e621e94db4c48b1b74f9d7162c1518b7dd286fd22e1af7d98df1d15722262", @ANYRES8=r2, @ANYRES64=r5], 0x54}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 2m20.36266706s ago: executing program 0 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='127.0.0.1\n', 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='7777\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./hb_file\x00', 0x42, 0x1b6) ftruncate(r3, 0x1000000) r4 = syz_open_dev$loop(&(0x7f00000005e0), 0x0, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) dup2(r4, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='512\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r5, &(0x7f0000000740)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r6, &(0x7f0000000840)='10\n', 0x3) 2m17.910909295s ago: executing program 0 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e130100ca000100aaaaaaaaaa2218000000480005"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1\n', 0x1c) write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) write(r1, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) write(r1, &(0x7f0000000540)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) write(r1, &(0x7f0000000580)='connect 22:aa:aa:aa:aa:aa 1\n', 0x1c) close(r1) 2m17.64305569s ago: executing program 2 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f000022b000/0x2000)=nil, 0x2000, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x100) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, 0x0) 2m15.004456782s ago: executing program 2 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff3, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x1234, @loopback}, 0x10) 2m14.6504564s ago: executing program 0 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/100, 0x64) 2m14.615878628s ago: executing program 2 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) 2m8.29621779s ago: executing program 3 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='1000\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) 2m7.940687987s ago: executing program 3 (id=574): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000000000000010000000000000000000000020000000200"/72) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, 0x0) 2m6.889297863s ago: executing program 5 (id=577): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='512\n', 0x4) 2m6.782049271s ago: executing program 3 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='127.0.0.1', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='4420', 0x4) close(r3) write(0xffffffffffffffff, &(0x7f0000000480)='ipv4', 0x4) close(0xffffffffffffffff) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = syz_socket_connect_nvme_tcp() nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) close(r4) nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) 2m6.681638776s ago: executing program 5 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) 2m6.533591757s ago: executing program 5 (id=580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000cc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m6.415178954s ago: executing program 5 (id=581): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="362aeb16e31bc8adddcabeffea4caf61d8da6293e66e30e33db60d6dbb4cd59e3433e02983088de8d1e1adb79edf72a4695f14d48c5aa5c8b6a99b6f31ca8c1c69c51c08929bd6b4681a3e78254dc13c1c95eea6bcceca2caba48efa3e92b0801a87d0a0a692445b07766a05a66c28899b63002c3a496a2e", 0x78}], 0x1, &(0x7f0000003180)="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", 0xbe9, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r6 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08}) sched_getattr(0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001600)=""/108, 0x6c) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=ANY=[@ANYRESHEX, @ANYBLOB="998e57ccbbcaf4250470b6cee01913243d3481baeeafd6ae79b572879326cf32bd3c9c18c28307350fa3ea0560bf6710cbb51a369460b1e0745a7142145c5aac38514db2acbe4f729405b3cb8e621e94db4c48b1b74f9d7162c1518b7dd286fd22e1af7d98df1d15722262", @ANYRES8=r2, @ANYRES64=r5], 0x54}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 2m6.342116799s ago: executing program 3 (id=582): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9) close(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c) 2m5.214531761s ago: executing program 5 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 1m51.444195542s ago: executing program 33 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/100, 0x64) 1m50.741470001s ago: executing program 34 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) 1m50.544453264s ago: executing program 35 (id=582): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9) close(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c) 1m50.406356955s ago: executing program 5 (id=588): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) accept4$inet(r1, 0x0, 0x0, 0x800) 1m34.584103331s ago: executing program 36 (id=588): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) listen(r1, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) accept4$inet(r1, 0x0, 0x0, 0x800) 1m5.31767625s ago: executing program 1 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='7777\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./hb_file\x00', 0x42, 0x1b6) ftruncate(r4, 0x1000000) r5 = syz_open_dev$loop(&(0x7f00000005e0), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) dup2(r5, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='512\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x2, 0x0) write(r6, &(0x7f0000000740)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r7, &(0x7f0000000840)='10\n', 0x3) 1m5.044785502s ago: executing program 1 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/netdevsim/netdevsim0/take_snapshot\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) 1m4.687360898s ago: executing program 1 (id=612): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaa61385081c8277bc96138deb952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d510100000000000000ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68", 0xc4}, {&(0x7f0000000cc0)="459000f0000000ee66c372f3", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1808f3125266538de14f70d50bc538b", 0xe9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000d00)="a6aa78ac33e2a9f6e0de6743e06915e6c4eb533157d3399e0876e7020e78973fe91c5e3631fd7f4950699111270065252cb4f24cdb632998b6c4eb32bec8f63c45a47c628f16edf9cf1bc7c8d37ad8458077af1c3e80659c8be6e7c3333fdb24e015cda160e5ed0226fa5020afb3862003c0b98488ed52ee8e6a85e5f1019306ccdf2bf802e86df08f2ca576acd65644c85d420dc66bc1997cc74d8652e4e8f4af5857f59cba12d0b814cbda92abf6541a74f793b1088160f311e9eac15168404c9323fac07447953034d42a8ff7cd9f0da7805f9301f34ca791eb6bb576f8abad68e0d0f7dca7e72c27f87adc8eee", 0xef}, {&(0x7f0000000f40)="537b789a9eabc2cafa425ece1fc431891c9346e726bec22db1d8cf438c71e97f94ea93a2f0e92356e32c466efbf5796c7ea52e19ee4e334da5f27ed1e14a00e2f80c947d1eea695f9a6ae1b16169d67f0765d1256f26666d6f2d5d0451a4a30c742c47a1ccdd16674dd09e7854a41c72a05c170413d864263165e9ded6246ff002d1622a406aef1f73e93380382d8b", 0x8f}, {&(0x7f0000001e00)="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", 0xa04}], 0x3}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m4.575378335s ago: executing program 1 (id=613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme0/ctrl_loss_tmo\x00', 0x0, 0x0) read(r7, &(0x7f00000009c0)=""/32, 0x20) 1m3.801395892s ago: executing program 1 (id=614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b", 0x5d}, {&(0x7f0000000cc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m3.39878974s ago: executing program 1 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/dstaddr\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-1-tcp/dstaddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/sunrpc/xprt-switches/switch-1/xprt-0-tcp/dstaddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r3) 47.518794084s ago: executing program 37 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/dstaddr\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-1-tcp/dstaddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/sunrpc/xprt-switches/switch-1/xprt-0-tcp/dstaddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='127.0.0.1\n', 0xa) close(r3) 35.787638931s ago: executing program 9 (id=623): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="362aeb16e31bc8adddcabeffea4caf61d8da6293e66e30e33db60d6dbb4cd59e3433e02983088de8d1e1adb79edf72a4695f14d48c5aa5c8b6a99b6f31ca8c1c69c51c08929bd6b4681a3e78254dc13c1c95eea6bcceca2caba48efa3e92b0801a87d0a0a692445b07766a05a66c28899b63002c3a496a2e", 0x78}], 0x1, &(0x7f0000003180)="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", 0xbf4, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0xa6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$radio(0x0, 0x2, 0x2) r6 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08}) sched_getattr(0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001600)=""/108, 0x6c) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=ANY=[@ANYRESHEX, @ANYBLOB="998e57ccbbcaf4250470b6cee01913243d3481baeeafd6ae79b572879326cf32bd3c9c18c28307350fa3ea0560bf6710cbb51a369460b1e0745a7142145c5aac38514db2acbe4f729405b3cb8e621e94db4c48b1b74f9d7162c1518b7dd286fd22e1af7d98df1d157222629f94eb1639a73fa749c2d711d0999e92e4802ad77b150b683f50571d802c767a1cc22320f05a3b9c373774c274b97bcb7f463611ddecb2f8d72c9b00904ecfe77b68d59468a5a0fe6878b11b6e1d336f98108b9d186cc87a5417c30d65ed8be22cbb013fd4d1ab4332c3fb", @ANYRES8=r2, @ANYRES64=r5], 0x54}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 28.730731387s ago: executing program 9 (id=624): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) 24.497440284s ago: executing program 9 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='2\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='1:0\n', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='active\n', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000001300)='1:1\n', 0x4) close(r7) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000001500)='1\n', 0x2) close(r8) 23.567974139s ago: executing program 9 (id=626): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x20, 0x0, &(0x7f0000000500)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.349088545s ago: executing program 9 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='127.0.0.1', 0x9) close(r2) write(0xffffffffffffffff, &(0x7f0000000400)='4420', 0x4) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='ipv4', 0x4) close(r3) symlinkat(&(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = syz_socket_connect_nvme_tcp() nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) close(r4) nanosleep(&(0x7f0000000580)={0x0, 0x5f5e100}, 0x0) 22.894644419s ago: executing program 9 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) write(r2, &(0x7f0000001000), 0x40a) write(r2, &(0x7f0000002000), 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000003100)='127.0.0.1:/\x00', &(0x7f0000003000)='./mnt\x00', &(0x7f0000003200), 0x0, &(0x7f0000003300)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1\x00']) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000004000), 0x40a) r3 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./nfsd/clients/1/ctl\x00', 0x2, 0x0) write(r3, &(0x7f0000005100)='expire\n', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000005200)='./nfsd/clients/2/ctl\x00', 0x2, 0x0) write(r4, &(0x7f0000005300)='expire\n', 0x7) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000006000), 0x40a) 7.158348041s ago: executing program 38 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) write(r2, &(0x7f0000001000), 0x40a) write(r2, &(0x7f0000002000), 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000003100)='127.0.0.1:/\x00', &(0x7f0000003000)='./mnt\x00', &(0x7f0000003200), 0x0, &(0x7f0000003300)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1\x00']) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000004000), 0x40a) r3 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./nfsd/clients/1/ctl\x00', 0x2, 0x0) write(r3, &(0x7f0000005100)='expire\n', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000005200)='./nfsd/clients/2/ctl\x00', 0x2, 0x0) write(r4, &(0x7f0000005300)='expire\n', 0x7) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000006000), 0x40a) 1.426530162s ago: executing program 4 (id=616): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl(0xffffffffffffffff, 0x8916, 0x0) personality(0xfe47fef9f5ff7379) r3 = memfd_secret(0x80000) mmap(&(0x7f00000c0000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x590a2000) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.087230312s ago: executing program 6 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./offset_val\x00', 0x42, 0x1ff) sendfile(r5, r4, 0x0, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/block/md0/md/dev-loop0/size\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./size_val\x00', 0x42, 0x1ff) sendfile(r7, r6, 0x0, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-loop0/state\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x20) 640.524135ms ago: executing program 4 (id=630): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="aaaaaaaaaa40aaaaaaaaaa014305400f3200aaaaaaaaaa40aaaaaaaaaa40aaaaaaaaaa020800", 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 33.302928ms ago: executing program 6 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 -4\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) close(r2) 0s ago: executing program 4 (id=632): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x68, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@]]/\']%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(({##Z*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ':&((-$[}\xa2(@+\'\x00'}]}]}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x807c6406, &(0x7f0000002140)=""/29) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): ode 0x0406 failed: -4 [ 94.891325][ T5808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.891399][ T5808] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 94.920466][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.920491][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.921567][ T5808] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 94.949970][ T107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.950098][ T107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.957790][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.957937][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.025608][ T5808] Freezing user space processes [ 95.074712][ T5808] Freezing user space processes completed (elapsed 0.046 seconds) [ 95.074940][ T5808] OOM killer disabled. [ 95.074951][ T5808] Freezing remaining freezable tasks [ 95.092559][ T5808] Freezing remaining freezable tasks completed (elapsed 0.017 seconds) [ 95.092769][ T5808] printk: Suspending console(s) (use no_console_suspend to debug) [ 95.317329][ T5808] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 95.317431][ T5808] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 95.317539][ T5808] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 95.317632][ T5808] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 95.318055][ T5808] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 95.318153][ T5808] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 95.318302][ T5808] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 95.318397][ T5808] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 95.318509][ T5808] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 95.318604][ T5808] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 95.319491][ T5808] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 95.319784][ T5808] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 95.319876][ T5808] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 95.319968][ T5808] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 95.320059][ T5808] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 95.333774][ T5824] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 95.660820][ T5808] PM: suspend debug: Waiting for 0 second(s). [ 95.687795][ T107] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 96.050704][ T5808] OOM killer enabled. [ 96.050716][ T5808] Restarting tasks: Starting [ 96.064583][ T5808] Restarting tasks: Done [ 96.066245][ T5808] random: crng reseeded on system resumption [ 96.066419][ T5808] hwrng_fill thread creation failed [ 96.067240][ T5808] PM: suspend exit [ 96.073815][ T5825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.073833][ T5825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.104887][ T5851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.104906][ T5851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.266823][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.266845][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.616099][ T5874] svc: failed to register lockdv1 RPC service (errno 111). [ 96.616332][ T5874] lockd_up: makesock failed, error=-111 [ 96.722414][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.800171][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.800225][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.880073][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.945309][ T5874] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.947916][ T5874] svc: failed to register nfsaclv3 RPC service (errno 111). [ 96.947972][ T5874] failed to unregister tcp with rpcbind [ 96.948725][ T5874] svc: failed to register nfsdv3 RPC service (errno 97). [ 96.948747][ T5874] svc: failed to register nfsaclv3 RPC service (errno 97). [ 96.948764][ T5874] failed to unregister tcp with rpcbind [ 96.961524][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 96.982870][ T5876] svc: failed to register lockdv1 RPC service (errno 111). [ 97.135670][ T5876] svc: failed to register nfsdv3 RPC service (errno 512). [ 97.135885][ T5876] svc: failed to register nfsaclv3 RPC service (errno 512). [ 97.135902][ T5876] failed to unregister udp with rpcbind [ 97.136732][ T5876] svc: failed to register nfsdv3 RPC service (errno 97). [ 97.136753][ T5876] svc: failed to register nfsaclv3 RPC service (errno 97). [ 97.136767][ T5876] failed to unregister udp with rpcbind [ 97.262328][ T5880] NFSD: Failed to start, no listeners configured. [ 97.584688][ T5615] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.585990][ T5615] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.586011][ T5615] failed to unregister tcp with rpcbind [ 97.601649][ T5615] svc: failed to register nfsdv3 RPC service (errno 97). [ 97.601672][ T5615] svc: failed to register nfsaclv3 RPC service (errno 97). [ 97.601685][ T5615] failed to unregister tcp with rpcbind [ 97.684046][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13'. [ 97.768694][ T5889] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 98.006226][ T5902] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 98.811198][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.879526][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.879522][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.969506][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.990518][ T5891] NFSD: Unable to initialize client recovery tracking! (-110) [ 98.990593][ T5891] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 98.990646][ T5891] NFSD: starting 90-second grace period (net f00003c9) [ 99.049267][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.426075][ T5615] svc: failed to register nfsdv3 RPC service (errno 111). [ 99.435297][ T5615] svc: failed to register nfsaclv3 RPC service (errno 111). [ 99.435318][ T5615] failed to unregister tcp with rpcbind [ 99.435501][ T5615] svc: failed to register nfsdv3 RPC service (errno 97). [ 99.435519][ T5615] svc: failed to register nfsaclv3 RPC service (errno 97). [ 99.435551][ T5615] failed to unregister tcp with rpcbind [ 99.671895][ T5920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.695679][ T5927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.706110][ T5927] block device autoloading is deprecated and will be removed. [ 99.754213][ T5920] md: invalid raid superblock magic on ram0 [ 99.754234][ T5920] md: ram0 does not have a valid v0.0 superblock, not importing! [ 99.754423][ T5920] md: md_import_device returned -22 [ 99.800967][ T5920] md: invalid raid superblock magic on ram1 [ 99.800989][ T5920] md: ram1 does not have a valid v0.0 superblock, not importing! [ 99.801059][ T5920] md: md_import_device returned -22 [ 100.151698][ T5939] NFSD: Failed to start, no listeners configured. [ 100.880095][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.960234][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.960284][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.039271][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.119326][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.753627][ T5976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.021776][ T5988] netlink: 56 bytes leftover after parsing attributes in process `syz.0.44'. [ 103.378050][ T5608] svc: failed to register nfsdv3 RPC service (errno 111). [ 103.383526][ T5608] svc: failed to register nfsaclv3 RPC service (errno 111). [ 103.383547][ T5608] failed to unregister udp with rpcbind [ 103.383744][ T5608] svc: failed to register nfsdv3 RPC service (errno 97). [ 103.383769][ T5608] svc: failed to register nfsaclv3 RPC service (errno 97). [ 103.383781][ T5608] failed to unregister udp with rpcbind [ 104.354476][ T6000] infiniband syz0: set active [ 104.354500][ T6000] infiniband syz0: added veth0_vlan [ 104.385844][ T6000] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 104.393829][ T6000] infiniband syz0: Couldn't open port 1 [ 104.396311][ T6000] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 104.396355][ T6000] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 104.396398][ T6000] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 104.607363][ T6000] RDS/IB: syz0: added [ 104.614301][ T6000] smc: adding ib device syz0 with port count 1 [ 104.614473][ T6000] smc: ib device syz0 port 1 has no pnetid [ 105.226992][ T6068] nvmet: adding nsid 1 to subsystem testsubsys [ 105.229978][ T6033] NFSD: Unable to initialize client recovery tracking! (-110) [ 105.230006][ T6033] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 105.230018][ T6033] NFSD: starting 90-second grace period (net f00003c9) [ 105.244107][ T6068] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 105.361849][ T5818] nvmet: connect request for invalid subsystem testsubsys! [ 105.366080][ T6068] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 105.563486][ T6071] svc: failed to register lockdv1 RPC service (errno 111). [ 105.826437][ T6071] svc: failed to register nfsdv3 RPC service (errno 111). [ 105.834647][ T6071] svc: failed to register nfsaclv3 RPC service (errno 111). [ 105.834667][ T6071] failed to unregister tcp with rpcbind [ 105.834808][ T6071] svc: failed to register nfsdv3 RPC service (errno 97). [ 105.834822][ T6071] svc: failed to register nfsaclv3 RPC service (errno 97). [ 105.834833][ T6071] failed to unregister tcp with rpcbind [ 106.203881][ T4927] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 107.255546][ T6103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.383965][ T6107] Zero length message leads to an empty skb [ 107.716762][ T6116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.723926][ T6116] loop0: detected capacity change from 0 to 65536 [ 107.864373][ T54] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 107.927422][ T6119] md/raid1:md0: active with 1 out of 1 mirrors [ 107.936892][ T6119] md0: detected capacity change from 0 to 2048 [ 107.949507][ T6097] NFSD: Unable to initialize client recovery tracking! (-110) [ 107.949529][ T6097] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 107.949542][ T6097] NFSD: starting 90-second grace period (net f00003c9) [ 108.596745][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.596775][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.598278][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.598301][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.623785][ T6147] nvmet: disable ns before setting buffered_io value. [ 108.626954][ T6147] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 108.627901][ T6147] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 108.628828][ T6147] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 108.647196][ T6147] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 108.696756][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.861894][ T1705] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3baec5aa-e2a1-4497-93b4-a0b6de81a0f6. [ 108.906933][ T6147] nvme nvme0: creating 2 I/O queues. [ 108.919114][ T6147] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 108.949790][ T6147] nvme nvme0: new ctrl: NQN "testsubsys", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:3baec5aa-e2a1-4497-93b4-a0b6de81a0f6 [ 109.014931][ T6157] netlink: 88 bytes leftover after parsing attributes in process `syz.0.99'. [ 110.038089][ T6182] NFSD: Failed to start, no listeners configured. [ 110.981349][ T54] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 111.092027][ T6217] process 'syz.4.126' launched './file0' with NULL argv: empty string added [ 111.537598][ T6232] rdma_rxe: rxe_newlink: failed to add lo [ 111.548605][ T6232] lo speed is unknown, defaulting to 1000 [ 111.572106][ T6232] lo speed is unknown, defaulting to 1000 [ 111.573576][ T6232] lo speed is unknown, defaulting to 1000 [ 112.613732][ T6232] infiniband syz1: set active [ 112.613755][ T6232] infiniband syz1: added lo [ 112.615075][ T5730] lo speed is unknown, defaulting to 1000 [ 112.675806][ T6232] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 112.675893][ T6232] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 112.675979][ T6232] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 112.795973][ T6232] RDS/IB: syz1: added [ 112.796017][ T6232] smc: adding ib device syz1 with port count 1 [ 112.796032][ T6232] smc: ib device syz1 port 1 has no pnetid [ 112.796090][ T5730] lo speed is unknown, defaulting to 1000 [ 112.809712][ T6232] lo speed is unknown, defaulting to 1000 [ 113.071186][ T54] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 113.312599][ T6260] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 113.643140][ T6232] lo speed is unknown, defaulting to 1000 [ 114.616841][ T6232] lo speed is unknown, defaulting to 1000 [ 114.853354][ T6280] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 115.025628][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.157269][ T6232] lo speed is unknown, defaulting to 1000 [ 115.210715][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 115.213784][ T10] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 115.239048][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.239076][ T10] usb 5-1: config 0 has no interface number 0 [ 115.262707][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.262738][ T10] usb 5-1: Product: syz [ 115.262754][ T10] usb 5-1: Manufacturer: syz [ 115.262770][ T10] usb 5-1: SerialNumber: syz [ 115.300532][ T10] usb 5-1: config 0 descriptor?? [ 115.320899][ T10] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.320945][ T10] usb 5-1: selecting invalid altsetting 1 [ 115.320967][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.360897][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.361437][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.361507][ T10] usb 5-1: media controller created [ 115.405264][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.514194][ T54] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 115.553740][ T6264] lo speed is unknown, defaulting to 1000 [ 115.787785][ T6232] lo speed is unknown, defaulting to 1000 [ 116.189521][ T6284] NFSD: Unable to initialize client recovery tracking! (-110) [ 116.189542][ T6284] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 116.189554][ T6284] NFSD: starting 90-second grace period (net f0000478) [ 116.480359][ T10] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.480470][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 117.440842][ T27] usb 5-1: USB disconnect, device number 2 [ 117.497122][ T6309] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 118.191410][ T32] audit: type=1804 audit(1790122505.649:2): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.171" name="/newroot/59/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 118.355022][ T5608] svc: failed to register nfsdv3 RPC service (errno 111). [ 118.355835][ T5608] svc: failed to register nfsaclv3 RPC service (errno 111). [ 118.355850][ T5608] failed to unregister tcp with rpcbind [ 118.355975][ T5608] svc: failed to register nfsdv3 RPC service (errno 97). [ 118.355987][ T5608] svc: failed to register nfsaclv3 RPC service (errno 97). [ 118.355996][ T5608] failed to unregister tcp with rpcbind [ 118.715530][ T6333] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 119.129796][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.205491][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.268572][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.521311][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 119.521413][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 119.523169][ T4927] Bluetooth: hci1: hardware error 0x00 [ 120.498866][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.759479][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.919993][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 120.920934][ T10] usb 2-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 120.922982][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 120.923014][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 120.923037][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 120.923090][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.923112][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.927593][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.927621][ T10] usb 2-1: Product: syz [ 120.927637][ T10] usb 2-1: Manufacturer: syz [ 120.927653][ T10] usb 2-1: SerialNumber: syz [ 121.027115][ T10] usb 2-1: config 0 descriptor?? [ 121.061118][ T10] port100 2-1:0.0: NFC: Could not get supported command types [ 121.268242][ T6393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.599457][ T4927] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.705281][ T6405] syz1: rxe_newlink: already configured on lo [ 121.716890][ T6405] rdma_rxe: rxe_newlink: failed to add veth0 [ 122.268659][ T10] usb 2-1: USB disconnect, device number 2 [ 122.738651][ T6423] FAULT_INJECTION: forcing a failure. [ 122.738651][ T6423] name failslab, interval 1, probability 0, space 0, times 1 [ 122.738710][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 122.738736][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.738755][ T6423] Call Trace: [ 122.738761][ T6423] [ 122.738770][ T6423] dump_stack_lvl+0xe8/0x150 [ 122.738809][ T6423] should_fail_ex+0x3eb/0x540 [ 122.738834][ T6423] should_failslab+0xa8/0x100 [ 122.738862][ T6423] __kmalloc_cache_noprof+0x9e/0x600 [ 122.738910][ T6423] ? alloc_fs_context+0x66/0xd00 [ 122.738937][ T6423] ? alloc_fs_context+0x66/0xd00 [ 122.738970][ T6423] alloc_fs_context+0x66/0xd00 [ 122.739002][ T6423] ? bpf_lsm_namespace_init+0x9/0x20 [ 122.739041][ T6423] mq_init_ns+0x10d/0x770 [ 122.739070][ T6423] copy_ipcs+0x460/0x6c0 [ 122.739104][ T6423] create_new_namespaces+0x210/0x6b0 [ 122.739142][ T6423] ? security_capable+0x7e/0x2c0 [ 122.739179][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 122.739221][ T6423] ksys_unshare+0x53c/0x890 [ 122.739259][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 122.739296][ T6423] ? rcu_is_watching+0x16/0xb0 [ 122.739341][ T6423] __x64_sys_unshare+0x38/0x50 [ 122.739362][ T6423] do_syscall_64+0x166/0x520 [ 122.739394][ T6423] ? trace_irq_disable+0x3b/0x140 [ 122.739423][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.739447][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 122.739474][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.739497][ T6423] RIP: 0033:0x7f6f91b9e159 [ 122.739525][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.739544][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.739568][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 122.739585][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 122.739599][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 122.739613][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.739627][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 122.739662][ T6423] [ 122.828877][ T6423] FAULT_INJECTION: forcing a failure. [ 122.828877][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 122.828908][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 122.828933][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.828946][ T6423] Call Trace: [ 122.828958][ T6423] [ 122.828967][ T6423] dump_stack_lvl+0xe8/0x150 [ 122.829005][ T6423] should_fail_ex+0x3eb/0x540 [ 122.829040][ T6423] should_failslab+0xa8/0x100 [ 122.829070][ T6423] __kmalloc_cache_noprof+0x9e/0x600 [ 122.829094][ T6423] ? __kasan_kmalloc+0x93/0xb0 [ 122.829118][ T6423] ? mqueue_init_fs_context+0x55/0x580 [ 122.829145][ T6423] ? mqueue_init_fs_context+0x55/0x580 [ 122.829179][ T6423] mqueue_init_fs_context+0x55/0x580 [ 122.829211][ T6423] alloc_fs_context+0x99e/0xd00 [ 122.829246][ T6423] mq_init_ns+0x10d/0x770 [ 122.829273][ T6423] copy_ipcs+0x460/0x6c0 [ 122.829304][ T6423] create_new_namespaces+0x210/0x6b0 [ 122.829339][ T6423] ? security_capable+0x7e/0x2c0 [ 122.829376][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 122.829414][ T6423] ksys_unshare+0x53c/0x890 [ 122.829451][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 122.829488][ T6423] ? rcu_is_watching+0x16/0xb0 [ 122.829533][ T6423] __x64_sys_unshare+0x38/0x50 [ 122.829553][ T6423] do_syscall_64+0x166/0x520 [ 122.829585][ T6423] ? trace_irq_disable+0x3b/0x140 [ 122.829614][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.829638][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 122.829677][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.829698][ T6423] RIP: 0033:0x7f6f91b9e159 [ 122.829718][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.829735][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.829758][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 122.829775][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 122.829807][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 122.829821][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.829835][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 122.829880][ T6423] [ 122.891914][ T6423] FAULT_INJECTION: forcing a failure. [ 122.891914][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 122.892095][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 122.892159][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.892192][ T6423] Call Trace: [ 122.892220][ T6423] [ 122.892242][ T6423] dump_stack_lvl+0xe8/0x150 [ 122.892317][ T6423] should_fail_ex+0x3eb/0x540 [ 122.892354][ T6423] should_failslab+0xa8/0x100 [ 122.892445][ T6423] __kmalloc_cache_noprof+0x9e/0x600 [ 122.892538][ T6423] ? __kasan_kmalloc+0x93/0xb0 [ 122.892602][ T6423] ? mqueue_init_fs_context+0x55/0x580 [ 122.892676][ T6423] ? mqueue_init_fs_context+0x55/0x580 [ 122.892763][ T6423] mqueue_init_fs_context+0x55/0x580 [ 122.892858][ T6423] alloc_fs_context+0x99e/0xd00 [ 122.892948][ T6423] mq_init_ns+0x10d/0x770 [ 122.893024][ T6423] copy_ipcs+0x460/0x6c0 [ 122.893110][ T6423] create_new_namespaces+0x210/0x6b0 [ 122.893233][ T6423] ? security_capable+0x7e/0x2c0 [ 122.893333][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 122.893431][ T6423] ksys_unshare+0x53c/0x890 [ 122.893519][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 122.893623][ T6423] ? rcu_is_watching+0x16/0xb0 [ 122.893732][ T6423] __x64_sys_unshare+0x38/0x50 [ 122.893784][ T6423] do_syscall_64+0x166/0x520 [ 122.893884][ T6423] ? trace_irq_disable+0x3b/0x140 [ 122.893983][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.894039][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 122.894114][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.894177][ T6423] RIP: 0033:0x7f6f91b9e159 [ 122.894223][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.894275][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.894341][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 122.894382][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 122.894416][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 122.894449][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.894487][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 122.894575][ T6423] [ 123.102340][ T6423] FAULT_INJECTION: forcing a failure. [ 123.102340][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 123.102426][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 123.102491][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.102532][ T6423] Call Trace: [ 123.102554][ T6423] [ 123.102576][ T6423] dump_stack_lvl+0xe8/0x150 [ 123.102679][ T6423] should_fail_ex+0x3eb/0x540 [ 123.102766][ T6423] should_failslab+0xa8/0x100 [ 123.102858][ T6423] __kmalloc_noprof+0xf9/0x710 [ 123.102921][ T6423] ? __list_lru_init+0x114/0x680 [ 123.102972][ T6423] ? __list_lru_init+0x114/0x680 [ 123.103044][ T6423] __list_lru_init+0x114/0x680 [ 123.103118][ T6423] sget_fc+0xf51/0x1a60 [ 123.103244][ T6423] ? __pfx_set_anon_super_fc+0x10/0x10 [ 123.103317][ T6423] ? __pfx_sget_fc+0x10/0x10 [ 123.103419][ T6423] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 123.103516][ T6423] ? __kmalloc_cache_noprof+0x148/0x600 [ 123.103590][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 123.103665][ T6423] get_tree_nodev+0x2a/0x150 [ 123.103729][ T6423] vfs_get_tree+0x92/0x2a0 [ 123.103801][ T6423] fc_mount_longterm+0x1c/0x100 [ 123.103883][ T6423] mq_init_ns+0x508/0x770 [ 123.103957][ T6423] copy_ipcs+0x460/0x6c0 [ 123.104039][ T6423] create_new_namespaces+0x210/0x6b0 [ 123.104133][ T6423] ? security_capable+0x7e/0x2c0 [ 123.104225][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 123.104321][ T6423] ksys_unshare+0x53c/0x890 [ 123.104414][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 123.104504][ T6423] ? rcu_is_watching+0x16/0xb0 [ 123.104613][ T6423] __x64_sys_unshare+0x38/0x50 [ 123.104679][ T6423] do_syscall_64+0x166/0x520 [ 123.104773][ T6423] ? trace_irq_disable+0x3b/0x140 [ 123.104855][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.104909][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 123.104981][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.105033][ T6423] RIP: 0033:0x7f6f91b9e159 [ 123.105086][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.105136][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.105189][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 123.105231][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 123.105263][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.105304][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.105323][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 123.105415][ T6423] [ 123.525967][ T6423] FAULT_INJECTION: forcing a failure. [ 123.525967][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 123.526054][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 123.526137][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.526177][ T6423] Call Trace: [ 123.526198][ T6423] [ 123.526221][ T6423] dump_stack_lvl+0xe8/0x150 [ 123.526320][ T6423] should_fail_ex+0x3eb/0x540 [ 123.526416][ T6423] should_failslab+0xa8/0x100 [ 123.526502][ T6423] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 123.526589][ T6423] ? __d_alloc+0x37/0x6f0 [ 123.526642][ T6423] ? __d_alloc+0x37/0x6f0 [ 123.526733][ T6423] __d_alloc+0x37/0x6f0 [ 123.526808][ T6423] d_make_root+0x41/0x80 [ 123.526873][ T6423] mqueue_fill_super+0x252/0x360 [ 123.526945][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 123.527021][ T6423] get_tree_nodev+0xbb/0x150 [ 123.527092][ T6423] vfs_get_tree+0x92/0x2a0 [ 123.527174][ T6423] fc_mount_longterm+0x1c/0x100 [ 123.527256][ T6423] mq_init_ns+0x508/0x770 [ 123.527328][ T6423] copy_ipcs+0x460/0x6c0 [ 123.527411][ T6423] create_new_namespaces+0x210/0x6b0 [ 123.527513][ T6423] ? security_capable+0x7e/0x2c0 [ 123.527612][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 123.527711][ T6423] ksys_unshare+0x53c/0x890 [ 123.527815][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 123.527917][ T6423] ? rcu_is_watching+0x16/0xb0 [ 123.528048][ T6423] __x64_sys_unshare+0x38/0x50 [ 123.528108][ T6423] do_syscall_64+0x166/0x520 [ 123.528264][ T6423] ? trace_irq_disable+0x3b/0x140 [ 123.528341][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.528403][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 123.528476][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.528538][ T6423] RIP: 0033:0x7f6f91b9e159 [ 123.528592][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.528622][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.528684][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 123.528728][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 123.528762][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.528802][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.528834][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 123.528920][ T6423] [ 123.851441][ T6423] FAULT_INJECTION: forcing a failure. [ 123.851441][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 123.851570][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 123.851647][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.851698][ T6423] Call Trace: [ 123.851718][ T6423] [ 123.851751][ T6423] dump_stack_lvl+0xe8/0x150 [ 123.851847][ T6423] should_fail_ex+0x3eb/0x540 [ 123.851941][ T6423] should_failslab+0xa8/0x100 [ 123.852018][ T6423] __kmalloc_cache_noprof+0x9e/0x600 [ 123.852081][ T6423] ? super_dev_alloc+0x4e/0x100 [ 123.852150][ T6423] ? super_dev_alloc+0x4e/0x100 [ 123.852231][ T6423] ? __list_lru_init+0x542/0x680 [ 123.852302][ T6423] super_dev_alloc+0x4e/0x100 [ 123.852376][ T6423] sget_fc+0xfa8/0x1a60 [ 123.852493][ T6423] ? __pfx_set_anon_super_fc+0x10/0x10 [ 123.852559][ T6423] ? __pfx_sget_fc+0x10/0x10 [ 123.852646][ T6423] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 123.852732][ T6423] ? __kmalloc_cache_noprof+0x148/0x600 [ 123.852815][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 123.852894][ T6423] get_tree_nodev+0x2a/0x150 [ 123.852984][ T6423] vfs_get_tree+0x92/0x2a0 [ 123.853067][ T6423] fc_mount_longterm+0x1c/0x100 [ 123.853179][ T6423] mq_init_ns+0x508/0x770 [ 123.853262][ T6423] copy_ipcs+0x460/0x6c0 [ 123.853351][ T6423] create_new_namespaces+0x210/0x6b0 [ 123.853458][ T6423] ? security_capable+0x7e/0x2c0 [ 123.853555][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 123.853652][ T6423] ksys_unshare+0x53c/0x890 [ 123.853757][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 123.853855][ T6423] ? rcu_is_watching+0x16/0xb0 [ 123.853959][ T6423] __x64_sys_unshare+0x38/0x50 [ 123.854008][ T6423] do_syscall_64+0x166/0x520 [ 123.854094][ T6423] ? trace_irq_disable+0x3b/0x140 [ 123.854171][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.854236][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 123.854311][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.854382][ T6423] RIP: 0033:0x7f6f91b9e159 [ 123.854447][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.854501][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.854566][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 123.854612][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 123.854654][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.854689][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.854724][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 123.854806][ T6423] [ 124.035649][ T6423] FAULT_INJECTION: forcing a failure. [ 124.035649][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 124.035755][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 124.035822][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.035855][ T6423] Call Trace: [ 124.035885][ T6423] [ 124.035908][ T6423] dump_stack_lvl+0xe8/0x150 [ 124.036015][ T6423] should_fail_ex+0x3eb/0x540 [ 124.036107][ T6423] should_failslab+0xa8/0x100 [ 124.036193][ T6423] __kmalloc_noprof+0xf9/0x710 [ 124.036285][ T6423] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 124.036346][ T6423] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 124.036420][ T6423] __memcg_list_lru_alloc+0x1d9/0x760 [ 124.036504][ T6423] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 124.036567][ T6423] ? xa_load+0x60/0x210 [ 124.036662][ T6423] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 124.036749][ T6423] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 124.036872][ T6423] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 124.036988][ T6423] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 124.037073][ T6423] ? mqueue_alloc_inode+0x28/0x40 [ 124.037144][ T6423] ? mqueue_alloc_inode+0x28/0x40 [ 124.037245][ T6423] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 124.037311][ T6423] mqueue_alloc_inode+0x28/0x40 [ 124.037383][ T6423] alloc_inode+0x6a/0x1b0 [ 124.037468][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 124.037544][ T6423] new_inode+0x1f/0x170 [ 124.037599][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 124.037676][ T6423] mqueue_fill_super+0xdb/0x360 [ 124.037752][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 124.037826][ T6423] get_tree_nodev+0xbb/0x150 [ 124.037899][ T6423] vfs_get_tree+0x92/0x2a0 [ 124.037972][ T6423] fc_mount_longterm+0x1c/0x100 [ 124.038055][ T6423] mq_init_ns+0x508/0x770 [ 124.038128][ T6423] copy_ipcs+0x460/0x6c0 [ 124.038219][ T6423] create_new_namespaces+0x210/0x6b0 [ 124.038328][ T6423] ? security_capable+0x7e/0x2c0 [ 124.038443][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 124.038544][ T6423] ksys_unshare+0x53c/0x890 [ 124.038641][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 124.038724][ T6423] ? rcu_is_watching+0x16/0xb0 [ 124.038832][ T6423] __x64_sys_unshare+0x38/0x50 [ 124.038894][ T6423] do_syscall_64+0x166/0x520 [ 124.038979][ T6423] ? trace_irq_disable+0x3b/0x140 [ 124.039054][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.039110][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 124.039182][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.039254][ T6423] RIP: 0033:0x7f6f91b9e159 [ 124.039309][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.039360][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.039424][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 124.039474][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 124.039506][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 124.039541][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.039578][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 124.039679][ T6423] [ 124.481413][ T6423] FAULT_INJECTION: forcing a failure. [ 124.481413][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 124.481511][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.4.213 Not tainted syzkaller #0 PREEMPT(full) [ 124.481577][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.481611][ T6423] Call Trace: [ 124.481633][ T6423] [ 124.481664][ T6423] dump_stack_lvl+0xe8/0x150 [ 124.481773][ T6423] should_fail_ex+0x3eb/0x540 [ 124.481809][ T6423] should_failslab+0xa8/0x100 [ 124.481839][ T6423] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 124.481876][ T6423] ? __d_alloc+0x37/0x6f0 [ 124.481898][ T6423] ? __d_alloc+0x37/0x6f0 [ 124.481925][ T6423] __d_alloc+0x37/0x6f0 [ 124.481955][ T6423] d_make_root+0x41/0x80 [ 124.481979][ T6423] mqueue_fill_super+0x252/0x360 [ 124.482008][ T6423] ? __pfx_mqueue_fill_super+0x10/0x10 [ 124.482037][ T6423] get_tree_nodev+0xbb/0x150 [ 124.482083][ T6423] vfs_get_tree+0x92/0x2a0 [ 124.482176][ T6423] fc_mount_longterm+0x1c/0x100 [ 124.482269][ T6423] mq_init_ns+0x508/0x770 [ 124.482343][ T6423] copy_ipcs+0x460/0x6c0 [ 124.482428][ T6423] create_new_namespaces+0x210/0x6b0 [ 124.482529][ T6423] ? security_capable+0x7e/0x2c0 [ 124.482624][ T6423] unshare_nsproxy_namespaces+0x144/0x190 [ 124.482728][ T6423] ksys_unshare+0x53c/0x890 [ 124.482825][ T6423] ? __pfx_ksys_unshare+0x10/0x10 [ 124.482928][ T6423] ? rcu_is_watching+0x16/0xb0 [ 124.483045][ T6423] __x64_sys_unshare+0x38/0x50 [ 124.483090][ T6423] do_syscall_64+0x166/0x520 [ 124.483174][ T6423] ? trace_irq_disable+0x3b/0x140 [ 124.483242][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.483305][ T6423] ? clear_bhb_loop+0x70/0xc0 [ 124.483377][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.483432][ T6423] RIP: 0033:0x7f6f91b9e159 [ 124.483484][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.483542][ T6423] RSP: 002b:00007f6f92af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.483619][ T6423] RAX: ffffffffffffffda RBX: 00007f6f91e25fa0 RCX: 00007f6f91b9e159 [ 124.483668][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 124.483718][ T6423] RBP: 00007f6f91c3506b R08: 0000000000000000 R09: 0000000000000000 [ 124.483751][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.483784][ T6423] R13: 00007f6f91e26038 R14: 00007f6f91e25fa0 R15: 00007fff17002198 [ 124.483876][ T6423] [ 124.693098][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.215'. [ 125.933327][ T6424] lo speed is unknown, defaulting to 1000 [ 128.377737][ T6461] Config c/1 of g1 needs at least one function. [ 128.380752][ T6461] udc dummy_udc.0: failed to start g1: -22 [ 128.380854][ T6461] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 128.392078][ T6461] UDC core: g1: couldn't find an available UDC or it's busy [ 129.286736][ T6467] NFSD: Failed to start, no listeners configured. [ 129.376230][ T6475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'. [ 132.551221][ T6491] Config c/1 of g1 needs at least one function. [ 132.551420][ T6491] udc dummy_udc.0: failed to start g1: -22 [ 132.551443][ T6491] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 132.553063][ T6491] UDC core: g1: couldn't find an available UDC or it's busy [ 132.786901][ T6425] lo speed is unknown, defaulting to 1000 [ 132.973436][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973524][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.842618][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.1.247'. [ 134.105364][ T6514] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.293311][ T6426] lo speed is unknown, defaulting to 1000 [ 134.402157][ T6524] Config c/1 of g1 needs at least one function. [ 134.402973][ T6524] udc dummy_udc.0: failed to start g1: -22 [ 134.403018][ T6524] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 134.407007][ T6524] UDC core: g1: couldn't find an available UDC or it's busy [ 135.865801][ T6539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.259'. [ 136.237655][ T6544] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.374056][ T6554] Config c/1 of g1 needs at least one function. [ 137.374186][ T6554] udc dummy_udc.0: failed to start g1: -22 [ 137.374209][ T6554] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 137.375476][ T6554] UDC core: g1: couldn't find an available UDC or it's busy [ 138.061802][ T6564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.271'. [ 138.316021][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.329946][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.333546][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.334679][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.336084][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.472271][ T6570] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 138.892775][ T6583] Config c/1 of g1 needs at least one function. [ 138.893454][ T6583] udc dummy_udc.0: failed to start g1: -22 [ 138.893517][ T6583] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 138.897111][ T6583] UDC core: g1: couldn't find an available UDC or it's busy [ 139.778450][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 140.044841][ T6598] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.404203][ T54] Bluetooth: hci5: command tx timeout [ 141.308385][ T6614] Config c/1 of g1 needs at least one function. [ 141.308488][ T6614] udc dummy_udc.0: failed to start g1: -22 [ 141.308503][ T6614] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 141.309059][ T6614] UDC core: g1: couldn't find an available UDC or it's busy [ 141.693537][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 141.980689][ T6627] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 141.987877][ T6627] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.519940][ T6637] Config c/1 of g1 needs at least one function. [ 142.520709][ T6637] udc dummy_udc.0: failed to start g1: -22 [ 142.520739][ T6637] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 142.525253][ T6637] UDC core: g1: couldn't find an available UDC or it's busy [ 142.543609][ T54] Bluetooth: hci5: command tx timeout [ 143.837052][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 143.937524][ T6565] lo speed is unknown, defaulting to 1000 [ 144.252773][ T6649] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 144.255760][ T6649] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.560879][ T54] Bluetooth: hci5: command tx timeout [ 145.022831][ T6662] Config c/1 of g1 needs at least one function. [ 145.023590][ T6662] udc dummy_udc.0: failed to start g1: -22 [ 145.023654][ T6662] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 145.027709][ T6662] UDC core: g1: couldn't find an available UDC or it's busy [ 146.139758][ T6676] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 146.143340][ T6676] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.358018][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.369068][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.385007][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.390884][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.407528][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.639460][ T54] Bluetooth: hci5: command tx timeout [ 146.814331][ T5851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.567396][ T6693] Config c/1 of g1 needs at least one function. [ 147.567529][ T6693] udc dummy_udc.0: failed to start g1: -22 [ 147.567552][ T6693] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 147.570152][ T6693] UDC core: g1: couldn't find an available UDC or it's busy [ 147.930048][ T5851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.206755][ T5851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.382481][ T6708] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 148.386544][ T6708] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.479301][ T54] Bluetooth: hci1: command tx timeout [ 148.497063][ T5851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.066612][ T6722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 149.422716][ T6728] Config c/1 of g1 needs at least one function. [ 149.423386][ T6728] udc dummy_udc.0: failed to start g1: -22 [ 149.423448][ T6728] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 149.427080][ T6728] UDC core: g1: couldn't find an available UDC or it's busy [ 150.531342][ T5851] bridge_slave_1: left allmulticast mode [ 150.532128][ T5851] bridge_slave_1: left promiscuous mode [ 150.533741][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.559408][ T54] Bluetooth: hci1: command tx timeout [ 150.649131][ T5851] bridge_slave_0: left allmulticast mode [ 150.658109][ T5851] bridge_slave_0: left promiscuous mode [ 150.659377][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.776229][ T6740] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 150.778816][ T6740] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 151.063028][ T6746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.337'. [ 151.580444][ T6757] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.017089][ T6754] Config c/1 of g1 needs at least one function. [ 152.017212][ T6754] udc dummy_udc.0: failed to start g1: -22 [ 152.017234][ T6754] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 152.026678][ T6754] UDC core: g1: couldn't find an available UDC or it's busy [ 152.096491][ T6761] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.144967][ T6761] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 152.312710][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.329470][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.332093][ T5851] bond0 (unregistering): Released all slaves [ 152.440976][ T6768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.346'. [ 152.452096][ T6678] lo speed is unknown, defaulting to 1000 [ 152.642469][ T54] Bluetooth: hci1: command tx timeout [ 153.230330][ T6791] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 153.298322][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.298445][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.298613][ T6565] bridge_slave_0: entered allmulticast mode [ 153.321684][ T6565] bridge_slave_0: entered promiscuous mode [ 153.374537][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.374777][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.374910][ T6565] bridge_slave_1: entered allmulticast mode [ 154.120603][ T6797] Config c/1 of g1 needs at least one function. [ 154.120774][ T6797] udc dummy_udc.0: failed to start g1: -22 [ 154.120799][ T6797] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 154.122060][ T6797] UDC core: g1: couldn't find an available UDC or it's busy [ 154.126070][ T6565] bridge_slave_1: entered promiscuous mode [ 154.505465][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.532029][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.720662][ T54] Bluetooth: hci1: command tx timeout [ 154.809070][ T6565] team0: Port device team_slave_0 added [ 154.847264][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 154.968984][ T6565] team0: Port device team_slave_1 added [ 155.207369][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.207386][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.207411][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.420381][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.420395][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.420416][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.422469][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 156.198369][ T6833] busy [ 156.340030][ T6565] hsr_slave_0: entered promiscuous mode [ 156.341755][ T6836] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 156.349351][ T6565] hsr_slave_1: entered promiscuous mode [ 156.376915][ T6565] debugfs: 'hsr0' already exists in 'hsr' [ 156.376961][ T6565] Cannot create hsr debugfs directory [ 156.477980][ T6840] Config c/1 of g1 needs at least one function. [ 156.478638][ T6840] udc dummy_udc.0: failed to start g1: -22 [ 156.478703][ T6840] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 156.482907][ T6840] UDC core: g1: couldn't find an available UDC or it's busy [ 157.976145][ T5851] hsr_slave_0: left promiscuous mode [ 157.984960][ T5851] hsr_slave_1: left promiscuous mode [ 158.066158][ T6872] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 158.105266][ T5851] veth1_macvtap: left promiscuous mode [ 158.105315][ T5851] veth0_macvtap: left promiscuous mode [ 158.105393][ T5851] veth1_vlan: left promiscuous mode [ 158.105458][ T5851] veth0_vlan: left promiscuous mode [ 158.425765][ T6884] busy [ 159.041475][ T6895] Config c/1 of g1 needs at least one function. [ 159.042130][ T6895] udc dummy_udc.0: failed to start g1: -22 [ 159.042194][ T6895] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 159.046661][ T6895] UDC core: g1: couldn't find an available UDC or it's busy [ 159.797522][ T5825] smc: removing ib device syz0 [ 160.209571][ T5851] team0 (unregistering): Port device team_slave_1 removed [ 160.254468][ T5851] team0 (unregistering): Port device team_slave_0 removed [ 160.658132][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 160.730616][ T5825] smbdirect: ib_dev[syz0] removed [ 160.797442][ T10] infiniband syz0: ib_query_port failed (-19) [ 161.181176][ T6914] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 161.721541][ T6924] Config c/1 of g1 needs at least one function. [ 161.722282][ T6924] udc dummy_udc.0: failed to start g1: -22 [ 161.722310][ T6924] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 161.726365][ T6924] UDC core: g1: couldn't find an available UDC or it's busy [ 163.244194][ T6960] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 164.095326][ T6978] Config c/1 of g1 needs at least one function. [ 164.095466][ T6978] udc dummy_udc.0: failed to start g1: -22 [ 164.095488][ T6978] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.096313][ T6978] UDC core: g1: couldn't find an available UDC or it's busy [ 165.044376][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 165.047931][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.048047][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.048220][ T6678] bridge_slave_0: entered allmulticast mode [ 165.102599][ T6678] bridge_slave_0: entered promiscuous mode [ 165.124310][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.124403][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.124539][ T6678] bridge_slave_1: entered allmulticast mode [ 165.162323][ T6678] bridge_slave_1: entered promiscuous mode [ 165.592085][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.653893][ T6995] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 165.673666][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.275802][ T6678] team0: Port device team_slave_0 added [ 166.318293][ T6565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.389566][ T6565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.390709][ T6565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.464391][ T6565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.485771][ T6678] team0: Port device team_slave_1 added [ 166.487581][ T6565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.562263][ T6565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.783139][ T7016] Config c/1 of g1 needs at least one function. [ 166.783926][ T7016] udc dummy_udc.0: failed to start g1: -22 [ 166.783992][ T7016] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 166.788157][ T7016] UDC core: g1: couldn't find an available UDC or it's busy [ 167.353760][ T6565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.364147][ T6565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.440874][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.440900][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.440928][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.442582][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.442596][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.442623][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.240320][ T6678] hsr_slave_0: entered promiscuous mode [ 168.290644][ T6678] hsr_slave_1: entered promiscuous mode [ 168.309411][ T6678] debugfs: 'hsr0' already exists in 'hsr' [ 168.309438][ T6678] Cannot create hsr debugfs directory [ 168.676177][ T7048] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 169.001820][ T7058] Config c/1 of g1 needs at least one function. [ 169.002540][ T7058] udc dummy_udc.0: failed to start g1: -22 [ 169.002623][ T7058] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 169.006944][ T7058] UDC core: g1: couldn't find an available UDC or it's busy [ 169.916410][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 170.273088][ T5830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.589408][ T5830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.746570][ T7089] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 170.889419][ T5830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.032378][ T5830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.169691][ T7101] Config c/1 of g1 needs at least one function. [ 171.170392][ T7101] udc dummy_udc.0: failed to start g1: -22 [ 171.170455][ T7101] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 171.175233][ T7101] UDC core: g1: couldn't find an available UDC or it's busy [ 171.780326][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.904967][ T6565] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.936152][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.936271][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.964862][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.964942][ T5861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.460298][ T5830] bridge_slave_1: left allmulticast mode [ 172.460329][ T5830] bridge_slave_1: left promiscuous mode [ 172.460551][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.501353][ T5830] bridge_slave_0: left allmulticast mode [ 172.501375][ T5830] bridge_slave_0: left promiscuous mode [ 172.501541][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.008568][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.034255][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.054028][ T5830] bond0 (unregistering): Released all slaves [ 173.159058][ T7125] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 173.781774][ T7135] Config c/1 of g1 needs at least one function. [ 173.782393][ T7135] udc dummy_udc.0: failed to start g1: -22 [ 173.782454][ T7135] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 173.786213][ T7135] UDC core: g1: couldn't find an available UDC or it's busy [ 175.389506][ T7159] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 175.408916][ T7159] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 175.829449][ T7178] Config c/1 of g1 needs at least one function. [ 175.830140][ T7178] udc dummy_udc.0: failed to start g1: -22 [ 175.830202][ T7178] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 175.833862][ T7178] UDC core: g1: couldn't find an available UDC or it's busy [ 176.594595][ T5830] hsr_slave_0: left promiscuous mode [ 176.607413][ T5830] hsr_slave_1: left promiscuous mode [ 176.611317][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.611391][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.639669][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.640072][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.713134][ T5830] veth1_macvtap: left promiscuous mode [ 176.713177][ T5830] veth0_macvtap: left promiscuous mode [ 176.713413][ T5830] veth1_vlan: left promiscuous mode [ 176.713501][ T5830] veth0_vlan: left promiscuous mode [ 177.403949][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 177.442815][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 177.870157][ T6678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.878326][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.911068][ T6678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.996560][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.997263][ T6678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.046552][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.074960][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.076970][ T6678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.139361][ T6678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.672564][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.742630][ T6678] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.792177][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.792255][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.823019][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.823095][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.014969][ T7224] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 179.048402][ T7224] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 179.461705][ T7236] Config c/1 of g1 needs at least one function. [ 179.462409][ T7236] udc dummy_udc.0: failed to start g1: -22 [ 179.462432][ T7236] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 179.466327][ T7236] UDC core: g1: couldn't find an available UDC or it's busy [ 180.366987][ T6565] veth0_vlan: entered promiscuous mode [ 180.387853][ T6565] veth1_vlan: entered promiscuous mode [ 180.578867][ T6565] veth0_macvtap: entered promiscuous mode [ 180.627680][ T6565] veth1_macvtap: entered promiscuous mode [ 180.907976][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.941753][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.999333][ T5863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.999382][ T5863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.999417][ T5863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.030968][ T5851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.489117][ T5851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.500062][ T5851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.563393][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.625633][ T7276] Config c/1 of g1 needs at least one function. [ 181.626352][ T7276] udc dummy_udc.0: failed to start g1: -22 [ 181.626421][ T7276] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 181.629933][ T7276] UDC core: g1: couldn't find an available UDC or it's busy [ 182.462127][ T5854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.462149][ T5854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.676431][ T6678] veth0_vlan: entered promiscuous mode [ 182.721336][ T6678] veth1_vlan: entered promiscuous mode [ 182.909084][ T6678] veth0_macvtap: entered promiscuous mode [ 183.014379][ T6678] veth1_macvtap: entered promiscuous mode [ 183.066591][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.086522][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.126041][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.127633][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.234991][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.272915][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.615741][ T5854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.615758][ T5854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.685578][ T7304] netlink: 'syz.5.270': attribute type 1 has an invalid length. [ 184.576799][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.576821][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.598456][ T32] audit: type=1804 audit(1790122572.059:3): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.477" name="/newroot/152/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 185.087288][ T7323] Config c/1 of g1 needs at least one function. [ 185.087891][ T7323] udc dummy_udc.0: failed to start g1: -22 [ 185.088129][ T7323] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 185.092105][ T7323] UDC core: g1: couldn't find an available UDC or it's busy [ 186.382136][ T7340] svc: failed to register lockdv1 RPC service (errno 111). [ 186.765807][ T7352] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 187.611073][ T7340] svc: failed to register nfsdv3 RPC service (errno 512). [ 187.611270][ T7340] svc: failed to register nfsaclv3 RPC service (errno 512). [ 187.611289][ T7340] failed to unregister tcp with rpcbind [ 187.611493][ T7340] svc: failed to register nfsdv3 RPC service (errno 97). [ 187.611511][ T7340] svc: failed to register nfsaclv3 RPC service (errno 97). [ 187.611526][ T7340] failed to unregister tcp with rpcbind [ 187.737732][ T32] audit: type=1804 audit(1790122575.199:4): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.487" name="/newroot/4/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 188.238827][ T7388] Config c/1 of g1 needs at least one function. [ 188.239593][ T7388] udc dummy_udc.0: failed to start g1: -22 [ 188.239663][ T7388] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 188.243490][ T7388] UDC core: g1: couldn't find an available UDC or it's busy [ 189.099120][ T6565] svc: failed to register nfsdv3 RPC service (errno 111). [ 189.111212][ T6565] svc: failed to register nfsaclv3 RPC service (errno 111). [ 189.111263][ T6565] failed to unregister udp with rpcbind [ 189.111659][ T6565] svc: failed to register nfsdv3 RPC service (errno 97). [ 189.111707][ T6565] svc: failed to register nfsaclv3 RPC service (errno 97). [ 189.111740][ T6565] failed to unregister udp with rpcbind [ 189.486301][ T7403] kAFS: No cell specified [ 189.578764][ T7410] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 190.473490][ T32] audit: type=1804 audit(1790122577.939:5): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.502" name="/newroot/7/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 191.124052][ T7435] Config c/1 of g1 needs at least one function. [ 191.124752][ T7435] udc dummy_udc.0: failed to start g1: -22 [ 191.124815][ T7435] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 191.127994][ T7435] UDC core: g1: couldn't find an available UDC or it's busy [ 193.791499][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.866453][ T32] audit: type=1804 audit(1790122581.329:6): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.515" name="/newroot/162/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 193.943146][ T46] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2dbe, bcdDevice=0.01 [ 193.960479][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.403823][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404632][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.220927][ T7477] Config c/1 of g1 needs at least one function. [ 195.222083][ T7477] udc dummy_udc.0: failed to start g1: -22 [ 195.222136][ T7477] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 195.224630][ T7477] UDC core: g1: couldn't find an available UDC or it's busy [ 195.825497][ T46] usbhid 4-1:1.0: can't add hid device: -71 [ 195.825648][ T46] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 195.883539][ T46] usb 4-1: USB disconnect, device number 2 [ 196.183087][ T7485] nvmet: disable ns before setting buffered_io value. [ 196.292364][ T7485] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 197.522552][ T5850] nvmet: connect request for invalid subsystem testsubsys! [ 197.523960][ T7485] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 199.202610][ T7511] kAFS: No cell specified [ 201.559602][ T7527] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 201.661979][ T7527] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 201.698438][ T7527] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 205.259180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 206.248836][ T7547] Config c/1 of g1 needs at least one function. [ 206.248928][ T7547] udc dummy_udc.0: failed to start g1: -22 [ 206.248943][ T7547] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 206.249709][ T7547] UDC core: g1: couldn't find an available UDC or it's busy [ 207.245432][ T7554] md: couldn't update array info. -22 [ 207.370234][ T7556] md: could not open device unknown-block(1,0). [ 207.370310][ T7556] md: md_import_device returned -16 [ 209.336077][ T7575] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 209.337171][ T7575] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 209.376473][ T7575] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 209.533844][ T32] audit: type=1804 audit(1790122596.999:7): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.546" name="/newroot/11/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 210.138969][ T7587] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.421513][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.421542][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.470556][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.470582][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.718078][ T7604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.486569][ T54] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 213.603090][ T7617] Config c/1 of g1 needs at least one function. [ 213.603242][ T7617] udc dummy_udc.0: failed to start g1: -22 [ 213.603264][ T7617] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 213.604045][ T7617] UDC core: g1: couldn't find an available UDC or it's busy [ 215.861258][ T7624] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 215.965723][ T7624] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 215.981483][ T7624] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 216.247922][ T32] audit: type=1804 audit(1790122603.709:8): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.565" name="/newroot/165/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 222.962759][ T7658] md: couldn't update array info. -22 [ 222.988058][ T4927] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 223.033147][ T7659] md: could not open device unknown-block(1,0). [ 223.033212][ T7659] md: md_import_device returned -16 [ 223.070081][ T7663] Config c/1 of g1 needs at least one function. [ 223.070213][ T7663] udc dummy_udc.0: failed to start g1: -22 [ 223.070235][ T7663] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 223.071050][ T7663] UDC core: g1: couldn't find an available UDC or it's busy [ 224.025221][ T7670] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 224.041139][ T7670] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 224.072377][ T7670] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 224.426073][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.426102][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.453799][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.453825][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.654958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 236.039181][ C1] sched: DL replenish lagged too much [ 238.539652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 238.949263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.629811][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.634485][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.635660][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.665199][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.666290][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.681361][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.772754][ T7698] rdma_rxe: rxe_newlink: failed to add veth0 [ 240.788148][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.849516][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.854115][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.973950][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.137567][ T5618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.149738][ T5618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.152015][ T5618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.156107][ T5618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.186688][ T5618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.418841][ T7697] lo speed is unknown, defaulting to 1000 [ 241.440028][ T7697] lo speed is unknown, defaulting to 1000 [ 241.441059][ T7697] lo speed is unknown, defaulting to 1000 [ 241.868076][ T7718] nvmet: disable ns before setting buffered_io value. [ 241.944501][ T7718] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 242.344283][ T5853] nvmet: connect request for invalid subsystem testsubsys! [ 242.346631][ T7718] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 242.964231][ T5618] Bluetooth: hci3: command tx timeout [ 243.019335][ T7697] infiniband syz0: set active [ 243.019393][ T5723] lo speed is unknown, defaulting to 1000 [ 243.019458][ T7697] infiniband syz0: added lo [ 243.022996][ T7697] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 243.027671][ T7697] infiniband syz0: Couldn't open port 1 [ 243.027997][ T7697] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 243.028057][ T7697] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 243.028102][ T7697] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 243.119801][ T5618] Bluetooth: hci6: command tx timeout [ 243.211251][ T7697] RDS/IB: syz0: added [ 243.211330][ T7697] smc: adding ib device syz0 with port count 1 [ 243.211358][ T7697] smc: ib device syz0 port 1 has no pnetid [ 243.211458][ T9] lo speed is unknown, defaulting to 1000 [ 243.248348][ T7697] lo speed is unknown, defaulting to 1000 [ 243.289554][ T5618] Bluetooth: hci7: command tx timeout [ 243.519778][ T7700] lo speed is unknown, defaulting to 1000 [ 244.628153][ T7697] lo speed is unknown, defaulting to 1000 [ 244.640433][ T7701] lo speed is unknown, defaulting to 1000 [ 245.039358][ T5618] Bluetooth: hci3: command tx timeout [ 245.200300][ T5618] Bluetooth: hci6: command tx timeout [ 245.359287][ T5618] Bluetooth: hci7: command tx timeout [ 245.747438][ T5850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.265393][ T5850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.486243][ T5850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.119494][ T5618] Bluetooth: hci3: command tx timeout [ 247.279741][ T5618] Bluetooth: hci6: command tx timeout [ 247.439337][ T5618] Bluetooth: hci7: command tx timeout [ 247.497520][ T5850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.666781][ T7708] lo speed is unknown, defaulting to 1000 [ 248.065200][ T7697] lo speed is unknown, defaulting to 1000 [ 249.210975][ T5618] Bluetooth: hci3: command tx timeout [ 249.359694][ T5618] Bluetooth: hci6: command tx timeout [ 249.519322][ T5618] Bluetooth: hci7: command tx timeout [ 250.660726][ T5850] bridge_slave_1: left allmulticast mode [ 250.660758][ T5850] bridge_slave_1: left promiscuous mode [ 250.660993][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.704142][ T5850] bridge_slave_0: left allmulticast mode [ 250.704172][ T5850] bridge_slave_0: left promiscuous mode [ 250.706903][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.275512][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.308112][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.327511][ T5850] bond0 (unregistering): Released all slaves [ 252.368637][ T7701] lo speed is unknown, defaulting to 1000 [ 253.254685][ T7697] lo speed is unknown, defaulting to 1000 [ 253.300414][ T7755] Config c/1 of g1 needs at least one function. [ 253.300574][ T7755] udc dummy_udc.0: failed to start g1: -22 [ 253.300607][ T7755] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 253.314484][ T7755] UDC core: g1: couldn't find an available UDC or it's busy [ 253.999078][ T7773] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 254.027936][ T7773] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 254.114688][ T7773] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 254.210439][ T7708] lo speed is unknown, defaulting to 1000 [ 254.390111][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 255.334723][ T7697] lo speed is unknown, defaulting to 1000 [ 255.845627][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845714][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.965011][ T7801] nvmet: disable ns before setting buffered_io value. [ 255.996137][ T7801] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 256.316837][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.317090][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.317256][ T7700] bridge_slave_0: entered allmulticast mode [ 256.349237][ T7700] bridge_slave_0: entered promiscuous mode [ 256.381308][ T5854] nvmet: connect request for invalid subsystem testsubsys! [ 256.386368][ T7801] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 256.432318][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.432435][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.432578][ T7700] bridge_slave_1: entered allmulticast mode [ 256.436007][ T7700] bridge_slave_1: entered promiscuous mode [ 256.473922][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.474192][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.474343][ T7701] bridge_slave_0: entered allmulticast mode [ 256.476927][ T7701] bridge_slave_0: entered promiscuous mode [ 256.710564][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.714786][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.718548][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.719754][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.727609][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.892490][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.892688][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.892867][ T7701] bridge_slave_1: entered allmulticast mode [ 256.968875][ T7701] bridge_slave_1: entered promiscuous mode [ 257.078920][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.226573][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.348102][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.497239][ T7700] team0: Port device team_slave_0 added [ 257.592689][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.732989][ T7700] team0: Port device team_slave_1 added [ 257.733060][ T7697] lo speed is unknown, defaulting to 1000 [ 257.928682][ T7701] team0: Port device team_slave_0 added [ 257.941770][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 258.028538][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.028558][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.028607][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.091009][ T7701] team0: Port device team_slave_1 added [ 258.530845][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.530865][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.530894][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.806263][ T5618] Bluetooth: hci1: command tx timeout [ 259.483025][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.483045][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.483072][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.693602][ T7700] hsr_slave_0: entered promiscuous mode [ 259.707650][ T7700] hsr_slave_1: entered promiscuous mode [ 259.724054][ T7700] debugfs: 'hsr0' already exists in 'hsr' [ 259.724089][ T7700] Cannot create hsr debugfs directory [ 259.725020][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.725034][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.725072][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.939258][ T5618] Bluetooth: hci1: command tx timeout [ 261.565062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 261.565937][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 262.959655][ T54] Bluetooth: hci1: command tx timeout [ 263.976506][ T7701] hsr_slave_0: entered promiscuous mode [ 264.077540][ T7701] hsr_slave_1: entered promiscuous mode [ 264.078172][ T7701] debugfs: 'hsr0' already exists in 'hsr' [ 264.078187][ T7701] Cannot create hsr debugfs directory [ 264.107279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 264.549340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 265.064942][ T5618] Bluetooth: hci1: command tx timeout [ 265.802764][ T7812] lo speed is unknown, defaulting to 1000 [ 266.331970][ T7861] Config c/1 of g1 needs at least one function. [ 266.332108][ T7861] udc dummy_udc.0: failed to start g1: -22 [ 266.332132][ T7861] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 266.381784][ T7861] UDC core: g1: couldn't find an available UDC or it's busy [ 269.549014][ T5850] hsr_slave_0: left promiscuous mode [ 269.562689][ T5850] hsr_slave_1: left promiscuous mode [ 269.597608][ T5850] veth1_macvtap: left promiscuous mode [ 269.597651][ T5850] veth0_macvtap: left promiscuous mode [ 269.597761][ T5850] veth1_vlan: left promiscuous mode [ 269.597834][ T5850] veth0_vlan: left promiscuous mode [ 273.996652][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 274.055829][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 274.265900][ T7812] lo speed is unknown, defaulting to 1000 [ 274.284988][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 275.504601][ T7883] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 275.515980][ T7883] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 275.532375][ T7883] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 275.923723][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.923898][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.924064][ T7708] bridge_slave_0: entered allmulticast mode [ 275.951065][ T7708] bridge_slave_0: entered promiscuous mode [ 275.994299][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.994464][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.994608][ T7708] bridge_slave_1: entered allmulticast mode [ 275.998504][ T7708] bridge_slave_1: entered promiscuous mode [ 276.406613][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.437179][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.666070][ T7890] nvmet: disable ns before setting buffered_io value. [ 276.697964][ T7890] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 276.744452][ T7708] team0: Port device team_slave_0 added [ 276.784523][ T7708] team0: Port device team_slave_1 added [ 276.899764][ T5853] nvmet: connect request for invalid subsystem testsubsys! [ 276.908000][ T7890] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 277.188509][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.188529][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.188557][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.222999][ T7700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 277.335764][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.337971][ T7700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 277.388725][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.627149][ T5850] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.704441][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.704461][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.704489][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.786466][ T7700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.155520][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.159673][ T7700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.178005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 278.206273][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.353687][ T5850] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.862363][ T7708] hsr_slave_0: entered promiscuous mode [ 279.868757][ T7708] hsr_slave_1: entered promiscuous mode [ 279.890773][ T7708] debugfs: 'hsr0' already exists in 'hsr' [ 279.890798][ T7708] Cannot create hsr debugfs directory [ 280.517546][ T5850] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.443933][ T5850] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.861138][ T7701] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 283.951143][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.975428][ T7701] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 284.024656][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.103718][ T7701] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 284.219036][ T5723] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 284.244352][ T5723] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 284.510668][ T5723] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 284.566055][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.567026][ T7701] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 284.594047][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.797488][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.797613][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.816991][ T7812] bridge_slave_0: entered allmulticast mode [ 284.830367][ T7812] bridge_slave_0: entered promiscuous mode [ 284.891154][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.891380][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.891597][ T7812] bridge_slave_1: entered allmulticast mode [ 284.896970][ T7812] bridge_slave_1: entered promiscuous mode [ 285.005448][ T7921] ceph: No mds server is up or the cluster is laggy [ 285.020025][ T1230] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 285.212150][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.242375][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.616248][ T5850] bridge_slave_1: left allmulticast mode [ 285.616277][ T5850] bridge_slave_1: left promiscuous mode [ 285.616562][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.663477][ T5850] bridge_slave_0: left allmulticast mode [ 285.663506][ T5850] bridge_slave_0: left promiscuous mode [ 285.663770][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.136098][ T7944] nvmet: disable ns before setting buffered_io value. [ 286.138418][ T7944] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 286.227943][ T5851] nvmet: connect request for invalid subsystem testsubsys! [ 286.228090][ T7944] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 286.493260][ T5850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.527683][ T5850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.541404][ T5850] bond0 (unregistering): Released all slaves [ 286.685938][ T7812] team0: Port device team_slave_0 added [ 286.800651][ T7812] team0: Port device team_slave_1 added [ 286.975387][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.975407][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.975435][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.977081][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.977096][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.977123][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.480871][ T7812] hsr_slave_0: entered promiscuous mode [ 287.484399][ T7812] hsr_slave_1: entered promiscuous mode [ 287.486458][ T7812] debugfs: 'hsr0' already exists in 'hsr' [ 287.486479][ T7812] Cannot create hsr debugfs directory [ 288.191239][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 288.258904][ T7708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.274045][ T7708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 288.338887][ T7708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.512971][ T7708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.570313][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.575340][ T7708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.773634][ T7708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.774617][ T7708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.837099][ T7708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.149642][ T5850] hsr_slave_0: left promiscuous mode [ 289.168445][ T5850] hsr_slave_1: left promiscuous mode [ 289.175307][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.175332][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.196365][ T5850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.196389][ T5850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.236750][ T5850] veth1_macvtap: left promiscuous mode [ 289.236793][ T5850] veth0_macvtap: left promiscuous mode [ 289.236926][ T5850] veth1_vlan: left promiscuous mode [ 289.237007][ T5850] veth0_vlan: left promiscuous mode [ 289.680494][ T5850] team0 (unregistering): Port device team_slave_1 removed [ 289.750097][ T5850] team0 (unregistering): Port device team_slave_0 removed [ 289.987021][ T5830] smc: removing ib device syz0 [ 290.025348][ T5830] smbdirect: ib_dev[syz0] removed [ 290.285331][ T5716] infiniband syz0: ib_query_port failed (-19) [ 290.428475][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.603672][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.621902][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.622018][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.827847][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.827971][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.324190][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.365952][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.366070][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.737598][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.737716][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.277795][ T7812] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 292.338578][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.460730][ T7812] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 293.168372][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.169402][ T7812] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 293.300516][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.458845][ T7812] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 293.567605][ T7812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.334626][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.418774][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 294.528422][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.604821][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.604983][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.714770][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.714893][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.198381][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.496201][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.624645][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.624762][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.052720][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.052831][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.564478][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.413533][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 297.566128][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.441846][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.496215][ T7700] veth0_vlan: entered promiscuous mode [ 298.528530][ T7700] veth1_vlan: entered promiscuous mode [ 298.652051][ T7700] veth0_macvtap: entered promiscuous mode [ 298.688537][ T7700] veth1_macvtap: entered promiscuous mode [ 298.782047][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.167901][ T7701] veth0_vlan: entered promiscuous mode [ 299.179336][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.219435][ T5850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.373352][ T5832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.378332][ T7701] veth1_vlan: entered promiscuous mode [ 299.440499][ T5850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.440976][ T5850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.549488][ T7701] veth0_macvtap: entered promiscuous mode [ 299.577809][ T7701] veth1_macvtap: entered promiscuous mode [ 299.636788][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.664142][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.854346][ T5825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.855454][ T5825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.855520][ T5825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.855561][ T5825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.972133][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.182679][ T5863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.182702][ T5863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.294199][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.338848][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.340830][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.378559][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.388329][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.649705][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.657130][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.658047][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.687102][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.701716][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.897780][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.918316][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.928414][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.940959][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.961910][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.452314][ T54] Bluetooth: hci5: command tx timeout [ 303.769447][ T54] Bluetooth: hci7: command tx timeout [ 304.545146][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.568489][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.583568][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.604848][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.605576][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.745134][ T7812] veth0_vlan: entered promiscuous mode [ 304.845010][ T7812] veth1_vlan: entered promiscuous mode [ 305.050163][ T5618] Bluetooth: hci3: command tx timeout [ 305.088820][ T7812] veth0_macvtap: entered promiscuous mode [ 305.146130][ T7812] veth1_macvtap: entered promiscuous mode [ 305.268710][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.349209][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.409456][ T5851] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.412735][ T5825] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.412786][ T5825] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.412825][ T5825] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.520607][ T5618] Bluetooth: hci5: command tx timeout [ 305.859244][ T5618] Bluetooth: hci7: command tx timeout [ 306.261273][ T8086] lo speed is unknown, defaulting to 1000 [ 306.719920][ T5618] Bluetooth: hci6: command tx timeout [ 307.119667][ T5618] Bluetooth: hci3: command tx timeout [ 307.237939][ T8091] lo speed is unknown, defaulting to 1000 [ 307.603814][ T5618] Bluetooth: hci5: command tx timeout [ 307.929857][ T5618] Bluetooth: hci7: command tx timeout [ 307.988060][ T5850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.988084][ T5850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.464388][ T8118] lo speed is unknown, defaulting to 1000 [ 308.482191][ T5853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.482215][ T5853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.800552][ T5618] Bluetooth: hci6: command tx timeout [ 309.209403][ T5618] Bluetooth: hci3: command tx timeout [ 309.385393][ T5863] bridge_slave_1: left allmulticast mode [ 309.385424][ T5863] bridge_slave_1: left promiscuous mode [ 309.385651][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.454390][ T5863] bridge_slave_0: left allmulticast mode [ 309.454445][ T5863] bridge_slave_0: left promiscuous mode [ 309.454673][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.680292][ T5618] Bluetooth: hci5: command tx timeout [ 310.005148][ T54] Bluetooth: hci7: command tx timeout [ 310.505585][ T8178] Config c/1 of g1 needs at least one function. [ 310.505722][ T8178] udc dummy_udc.0: failed to start g1: -22 [ 310.505745][ T8178] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 310.538216][ T8178] UDC core: g1: couldn't find an available UDC or it's busy [ 310.800404][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.842875][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.863366][ T5863] bond0 (unregistering): Released all slaves [ 310.886471][ T5618] Bluetooth: hci6: command tx timeout [ 310.967138][ T8104] lo speed is unknown, defaulting to 1000 [ 311.279300][ T5618] Bluetooth: hci3: command tx timeout [ 312.964407][ T5618] Bluetooth: hci6: command tx timeout [ 313.153461][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.153643][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.153836][ T8086] bridge_slave_0: entered allmulticast mode [ 313.167498][ T8086] bridge_slave_0: entered promiscuous mode [ 313.269965][ T5863] hsr_slave_0: left promiscuous mode [ 313.275766][ T5863] hsr_slave_1: left promiscuous mode [ 313.277047][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.309481][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.548170][ T5863] team0 (unregistering): Port device team_slave_1 removed [ 314.580010][ T5863] team0 (unregistering): Port device team_slave_0 removed [ 314.988657][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.988780][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.988958][ T8086] bridge_slave_1: entered allmulticast mode [ 315.029625][ T8086] bridge_slave_1: entered promiscuous mode [ 315.056298][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 315.202925][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.065087][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.287687][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.287764][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.385334][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.385505][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.385667][ T8118] bridge_slave_0: entered allmulticast mode [ 317.416136][ T8118] bridge_slave_0: entered promiscuous mode [ 317.459431][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.459560][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.459777][ T8091] bridge_slave_0: entered allmulticast mode [ 317.467470][ T8091] bridge_slave_0: entered promiscuous mode [ 317.533875][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.533992][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.534210][ T8091] bridge_slave_1: entered allmulticast mode [ 317.538377][ T8091] bridge_slave_1: entered promiscuous mode [ 317.752841][ T8086] team0: Port device team_slave_0 added [ 317.758512][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.758589][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.758765][ T8118] bridge_slave_1: entered allmulticast mode [ 317.810719][ T8118] bridge_slave_1: entered promiscuous mode [ 318.297768][ T8086] team0: Port device team_slave_1 added [ 319.117431][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.543495][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.612075][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.688783][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.045767][ T5862] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.466288][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.466308][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.466342][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.557336][ T8091] team0: Port device team_slave_0 added [ 320.558166][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.558183][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.558213][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.267490][ T5862] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.811019][ T8091] team0: Port device team_slave_1 added [ 321.826926][ T8118] team0: Port device team_slave_0 added [ 324.763836][ T8086] hsr_slave_0: entered promiscuous mode [ 325.287804][ T8086] hsr_slave_1: entered promiscuous mode [ 325.288811][ T8086] debugfs: 'hsr0' already exists in 'hsr' [ 325.288834][ T8086] Cannot create hsr debugfs directory [ 325.316558][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 325.748369][ T8118] team0: Port device team_slave_1 added [ 325.936575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 325.951563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 326.085749][ T5862] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.186112][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.186133][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.186161][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.297909][ T8267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.449723][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.449743][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.449771][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.459971][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.459992][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.460022][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.696187][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.696208][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.696239][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.851616][ T8273] md: recover of RAID array md0 [ 326.915857][ T8273] md: md0: recover done. [ 326.980747][ T5862] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.441813][ T8279] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 327.443044][ T8279] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 327.443959][ T8279] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 327.565246][ T8091] hsr_slave_0: entered promiscuous mode [ 327.566441][ T8091] hsr_slave_1: entered promiscuous mode [ 327.588664][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 327.588700][ T8091] Cannot create hsr debugfs directory [ 327.900069][ T8118] hsr_slave_0: entered promiscuous mode [ 327.903126][ T8118] hsr_slave_1: entered promiscuous mode [ 327.905689][ T8118] debugfs: 'hsr0' already exists in 'hsr' [ 327.905721][ T8118] Cannot create hsr debugfs directory [ 327.959036][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.959976][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.960132][ T8104] bridge_slave_0: entered allmulticast mode [ 327.962218][ T8104] bridge_slave_0: entered promiscuous mode [ 328.086488][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.086606][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.086785][ T8104] bridge_slave_1: entered allmulticast mode [ 328.113642][ T8104] bridge_slave_1: entered promiscuous mode [ 328.485595][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.711919][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.041520][ T8104] team0: Port device team_slave_0 added [ 329.197592][ T8104] team0: Port device team_slave_1 added [ 329.397049][ T5862] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.717713][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.717734][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.717764][ T8104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.986709][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.986730][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.986766][ T8104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.062531][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 330.154350][ T5862] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.430771][ T5862] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.460581][ T8104] hsr_slave_0: entered promiscuous mode [ 330.461802][ T8104] hsr_slave_1: entered promiscuous mode [ 330.462779][ T8104] debugfs: 'hsr0' already exists in 'hsr' [ 330.462801][ T8104] Cannot create hsr debugfs directory [ 330.704294][ T5862] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.508222][ T5862] bridge_slave_1: left allmulticast mode [ 331.508252][ T5862] bridge_slave_1: left promiscuous mode [ 331.508620][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.541635][ T5862] bridge_slave_0: left allmulticast mode [ 331.541665][ T5862] bridge_slave_0: left promiscuous mode [ 331.541926][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.638687][ T5862] bridge_slave_1: left allmulticast mode [ 331.638719][ T5862] bridge_slave_1: left promiscuous mode [ 331.638930][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.756835][ T5862] bridge_slave_0: left allmulticast mode [ 331.756867][ T5862] bridge_slave_0: left promiscuous mode [ 331.757084][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.540267][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.569864][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.591322][ T5862] bond0 (unregistering): Released all slaves [ 333.162546][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.200336][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.206644][ T5862] bond0 (unregistering): Released all slaves [ 333.248205][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 333.450219][ T8086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.489174][ T8086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.494973][ T8086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.539428][ T8086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.663103][ T8086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 333.689869][ T8086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.263696][ T8086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.281487][ T8086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.917832][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 336.025744][ T5862] hsr_slave_0: left promiscuous mode [ 336.039349][ T5862] hsr_slave_1: left promiscuous mode [ 336.040366][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.040387][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.068236][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.068272][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.107497][ T5862] hsr_slave_0: left promiscuous mode [ 336.118458][ T5862] hsr_slave_1: left promiscuous mode [ 336.127887][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.127914][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.148547][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.148579][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.263210][ T5862] veth1_macvtap: left promiscuous mode [ 336.263254][ T5862] veth0_macvtap: left promiscuous mode [ 336.263374][ T5862] veth1_vlan: left promiscuous mode [ 336.263448][ T5862] veth0_vlan: left promiscuous mode [ 336.432876][ T5862] veth1_macvtap: left promiscuous mode [ 336.432920][ T5862] veth0_macvtap: left promiscuous mode [ 336.436435][ T5862] veth1_vlan: left promiscuous mode [ 336.436534][ T5862] veth0_vlan: left promiscuous mode [ 337.397181][ T5862] team0 (unregistering): Port device team_slave_1 removed [ 337.431984][ T5862] team0 (unregistering): Port device team_slave_0 removed [ 337.963405][ T5862] team0 (unregistering): Port device team_slave_1 removed [ 337.993858][ T5862] team0 (unregistering): Port device team_slave_0 removed [ 338.275821][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 338.388804][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.477965][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.497314][ T8118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.525781][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.544859][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.544976][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.545697][ T8118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.969628][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.044651][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.044809][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.108048][ T8118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.135260][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.136231][ T8118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.160912][ T8118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.328681][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.416397][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.566849][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.566972][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.653779][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.653894][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.736565][ T8118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.736591][ T8118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.745813][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 341.786645][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.787601][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 341.814602][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.831596][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 341.888519][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.902378][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 341.947494][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.925075][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.217216][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.695852][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.774121][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.950458][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.950583][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.961885][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.962006][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.781492][ T8104] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 344.802549][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 344.822828][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 344.823624][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 344.825419][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 344.826107][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 344.954899][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.008491][ T8104] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 345.037746][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.074416][ T8104] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 345.115311][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.116544][ T8104] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 345.168236][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.384938][ T8086] veth0_vlan: entered promiscuous mode [ 345.469024][ T8086] veth1_vlan: entered promiscuous mode [ 345.492900][ T8118] veth0_vlan: entered promiscuous mode [ 345.582152][ T8118] veth1_vlan: entered promiscuous mode [ 345.835015][ T8086] veth0_macvtap: entered promiscuous mode [ 345.918190][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.943238][ T8086] veth1_macvtap: entered promiscuous mode [ 345.986158][ T8118] veth0_macvtap: entered promiscuous mode [ 346.048268][ T8118] veth1_macvtap: entered promiscuous mode [ 346.108924][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.215717][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.283046][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.283165][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.316590][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.335741][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.335864][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.364599][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.397935][ T8118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.498343][ T1010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.512648][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513051][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513110][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513162][ T5862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513203][ T5862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513243][ T5862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.513283][ T5862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.879444][ T54] Bluetooth: hci8: command tx timeout [ 347.380385][ T8430] lo speed is unknown, defaulting to 1000 [ 347.684206][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.684232][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.889940][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.034010][ T5850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.034036][ T5850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.299201][ T5832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.299225][ T5832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.536926][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.536951][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.959543][ T54] Bluetooth: hci8: command tx timeout [ 349.956385][ T8488] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 350.139647][ T8488] md: couldn't update array info. -22 [ 350.202118][ T8493] md: could not open device unknown-block(7,0). [ 350.202206][ T8493] md: md_import_device returned -16 [ 351.041430][ T54] Bluetooth: hci8: command tx timeout [ 353.130998][ T54] Bluetooth: hci8: command tx timeout [ 367.299426][ T33] INFO: task syz.0.565:7631 blocked for more than 143 seconds. [ 367.299457][ T33] Not tainted syzkaller #0 [ 367.299469][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.299480][ T33] task:syz.0.565 state:D stack:27432 pid:7631 tgid:7629 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 367.299560][ T33] Call Trace: [ 367.299570][ T33] [ 367.299589][ T33] __schedule+0x1b47/0x5c60 [ 367.299665][ T33] ? __pfx___schedule+0x10/0x10 [ 367.299705][ T33] ? schedule+0x90/0x2b0 [ 367.299738][ T33] schedule+0x164/0x2b0 [ 367.299771][ T33] schedule_preempt_disabled+0x13/0x30 [ 367.299801][ T33] __mutex_lock+0x7c4/0x15a0 [ 367.299839][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 367.299876][ T33] ? write_ports+0xb5/0xd10 [ 367.299900][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 367.299955][ T33] write_ports+0xb5/0xd10 [ 367.299980][ T33] ? __pfx_write_ports+0x10/0x10 [ 367.300017][ T33] ? __might_fault+0xaf/0x130 [ 367.300053][ T33] ? _copy_from_user+0x94/0xb0 [ 367.300087][ T33] ? simple_transaction_get+0x12d/0x160 [ 367.300114][ T33] nfsctl_transaction_write+0x10f/0x160 [ 367.300152][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 367.300188][ T33] vfs_write+0x296/0xba0 [ 367.300223][ T33] ? __pfx_vfs_write+0x10/0x10 [ 367.300249][ T33] ? __fget_files+0x2a/0x420 [ 367.300271][ T33] ? __fget_files+0x3a2/0x420 [ 367.300292][ T33] ? __fget_files+0x2a/0x420 [ 367.300319][ T33] ? fdget+0x1ac/0x250 [ 367.300348][ T33] ksys_write+0x150/0x270 [ 367.300377][ T33] ? __pfx_ksys_write+0x10/0x10 [ 367.300414][ T33] do_syscall_64+0x166/0x520 [ 367.300447][ T33] ? trace_irq_disable+0x3b/0x140 [ 367.300476][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.300500][ T33] ? clear_bhb_loop+0x70/0xc0 [ 367.300529][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.300558][ T33] RIP: 0033:0x7f6eafb9e159 [ 367.300579][ T33] RSP: 002b:00007f6eb0a4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.300603][ T33] RAX: ffffffffffffffda RBX: 00007f6eafe25fa0 RCX: 00007f6eafb9e159 [ 367.300621][ T33] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 367.300637][ T33] RBP: 00007f6eafc3506b R08: 0000000000000000 R09: 0000000000000000 [ 367.300660][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.300674][ T33] R13: 00007f6eafe26038 R14: 00007f6eafe25fa0 R15: 00007ffcfa5cac48 [ 367.300711][ T33] [ 367.300721][ T33] INFO: task syz.0.565:7634 blocked for more than 143 seconds. [ 367.300738][ T33] Not tainted syzkaller #0 [ 367.300749][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.300760][ T33] task:syz.0.565 state:D stack:27272 pid:7634 tgid:7629 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 367.300829][ T33] Call Trace: [ 367.300837][ T33] [ 367.300850][ T33] __schedule+0x1b47/0x5c60 [ 367.300912][ T33] ? __pfx___schedule+0x10/0x10 [ 367.300953][ T33] ? schedule+0x90/0x2b0 [ 367.300987][ T33] schedule+0x164/0x2b0 [ 367.301019][ T33] schedule_preempt_disabled+0x13/0x30 [ 367.301049][ T33] __mutex_lock+0x7c4/0x15a0 [ 367.301087][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 367.301126][ T33] ? write_ports+0xb5/0xd10 [ 367.301149][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 367.301210][ T33] write_ports+0xb5/0xd10 [ 367.301240][ T33] ? __pfx_write_ports+0x10/0x10 [ 367.301284][ T33] ? __might_fault+0xaf/0x130 [ 367.301324][ T33] ? simple_transaction_get+0x12d/0x160 [ 367.301351][ T33] nfsctl_transaction_read+0x171/0x1c0 [ 367.301389][ T33] ? __pfx_nfsctl_transaction_read+0x10/0x10 [ 367.301425][ T33] vfs_read+0x213/0xa80 [ 367.301455][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 367.301490][ T33] ? __pfx_vfs_read+0x10/0x10 [ 367.301516][ T33] ? __fget_files+0x2a/0x420 [ 367.301537][ T33] ? __fget_files+0x3a2/0x420 [ 367.301558][ T33] ? __fget_files+0x2a/0x420 [ 367.301585][ T33] ? fdget+0x1ac/0x250 [ 367.301615][ T33] ksys_read+0x150/0x270 [ 367.301643][ T33] ? __pfx_ksys_read+0x10/0x10 [ 367.301687][ T33] do_syscall_64+0x166/0x520 [ 367.301719][ T33] ? trace_irq_disable+0x3b/0x140 [ 367.301747][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.301770][ T33] ? clear_bhb_loop+0x70/0xc0 [ 367.301799][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.301822][ T33] RIP: 0033:0x7f6eafb9e159 [ 367.301842][ T33] RSP: 002b:00007f6eb0a2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.301865][ T33] RAX: ffffffffffffffda RBX: 00007f6eafe26090 RCX: 00007f6eafb9e159 [ 367.301882][ T33] RDX: 0000000000000064 RSI: 0000200000000500 RDI: 0000000000000004 [ 367.301897][ T33] RBP: 00007f6eafc3506b R08: 0000000000000000 R09: 0000000000000000 [ 367.301912][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.301926][ T33] R13: 00007f6eafe26128 R14: 00007f6eafe26090 R15: 00007ffcfa5cac48 [ 367.301963][ T33] [ 367.301974][ T33] INFO: task syz.2.566:7635 blocked for more than 143 seconds. [ 367.301990][ T33] Not tainted syzkaller #0 [ 367.302002][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.302013][ T33] task:syz.2.566 state:D stack:27432 pid:7635 tgid:7632 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 367.302082][ T33] Call Trace: [ 367.302089][ T33] [ 367.302103][ T33] __schedule+0x1b47/0x5c60 [ 367.302165][ T33] ? __pfx___schedule+0x10/0x10 [ 367.302206][ T33] ? schedule+0x90/0x2b0 [ 367.302239][ T33] schedule+0x164/0x2b0 [ 367.302272][ T33] schedule_preempt_disabled+0x13/0x30 [ 367.302302][ T33] __mutex_lock+0x7c4/0x15a0 [ 367.302340][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 367.302377][ T33] ? write_threads+0x3b1/0x610 [ 367.302402][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 367.302433][ T33] ? simple_strntoull+0x114/0x190 [ 367.302470][ T33] ? qword_get+0x5ad/0x650 [ 367.302502][ T33] write_threads+0x3b1/0x610 [ 367.302528][ T33] ? __pfx_write_threads+0x10/0x10 [ 367.302570][ T33] ? _copy_from_user+0x94/0xb0 [ 367.302604][ T33] ? simple_transaction_get+0x12d/0x160 [ 367.302631][ T33] nfsctl_transaction_write+0x10f/0x160 [ 367.302677][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 367.302714][ T33] vfs_write+0x296/0xba0 [ 367.302748][ T33] ? __pfx_vfs_write+0x10/0x10 [ 367.302775][ T33] ? __fget_files+0x2a/0x420 [ 367.302796][ T33] ? __fget_files+0x3a2/0x420 [ 367.302817][ T33] ? __fget_files+0x2a/0x420 [ 367.302843][ T33] ? fdget+0x1ac/0x250 [ 367.302874][ T33] ksys_write+0x150/0x270 [ 367.302902][ T33] ? __pfx_ksys_write+0x10/0x10 [ 367.302939][ T33] do_syscall_64+0x166/0x520 [ 367.302972][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.302996][ T33] ? clear_bhb_loop+0x70/0xc0 [ 367.303024][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.303048][ T33] RIP: 0033:0x7fd52a19e159 [ 367.303067][ T33] RSP: 002b:00007fd52af7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.303090][ T33] RAX: ffffffffffffffda RBX: 00007fd52a426090 RCX: 00007fd52a19e159 [ 367.303108][ T33] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000005 [ 367.303123][ T33] RBP: 00007fd52a23506b R08: 0000000000000000 R09: 0000000000000000 [ 367.303138][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.303152][ T33] R13: 00007fd52a426128 R14: 00007fd52a426090 R15: 00007ffd691d60d8 [ 367.303188][ T33] [ 367.303248][ T33] [ 367.303248][ T33] Showing all locks held in the system: [ 367.303260][ T33] locks held by kworker/u8:1/13: 3, last CPU#1: [ 367.303277][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303348][ T33] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303416][ T33] #2: ffff888062380800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.303478][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 367.303495][ T33] #0: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 367.303564][ T33] locks held by kworker/1:1/46: 2, last CPU#1: [ 367.303580][ T33] #0: ffff888036772148 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303659][ T33] #1: ffffc90000b67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303746][ T33] locks held by kworker/u8:5/83: 3, last CPU#1: [ 367.303763][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303829][ T33] #1: ffffc900024ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.303896][ T33] #2: ffff888028170800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.303959][ T33] locks held by kworker/1:2/950: 2, last CPU#1: [ 367.303976][ T33] #0: ffff8880561e6148 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304043][ T33] #1: ffffc90004b87c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304129][ T33] locks held by kworker/u8:9/1010: 3, last CPU#1: [ 367.304146][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304213][ T33] #1: ffffc90004dbfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304280][ T33] #2: ffff888055210800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.304353][ T33] locks held by kworker/1:3/4939: 2, last CPU#1: [ 367.304370][ T33] #0: ffff8880562f8148 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304437][ T33] #1: ffffc900072a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.304523][ T33] locks held by udevd/4978: 3, last CPU#1: [ 367.304539][ T33] #0: ffffffff8f4f5378 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 367.304600][ T33] #1: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 367.304662][ T33] #2: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 367.304725][ T33] locks held by getty/5365: 2, on CPU#0: [ 367.304741][ T33] #0: ffff888036d600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 367.304800][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 367.304869][ T33] locks held by syz-executor/5597: 1, last CPU#1: [ 367.304885][ T33] #0: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 367.304941][ T33] locks held by kworker/1:4/5616: 3, last CPU#1: [ 367.304957][ T33] #0: ffff88807c37ad48 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305031][ T33] #1: ffffc90003df7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305116][ T33] #2: ffff888065373ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 367.305186][ T33] locks held by kworker/0:3/5709: 4, on CPU#0: [ 367.305202][ T33] #0: ffff88807c37ad48 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305275][ T33] #1: ffffc900040b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305359][ T33] #2: ffff88803205d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 367.305426][ T33] #3: ffff888065373ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 367.305494][ T33] locks held by kworker/0:5/5723: 5, last CPU#0: [ 367.305510][ T33] #0: ffff8880312e4148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305577][ T33] #1: ffffc90004997c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305663][ T33] #2: ffff88804d286530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 367.305724][ T33] #3: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 367.305791][ T33] #4: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 367.305858][ T33] locks held by kworker/1:6/5745: 3, last CPU#1: [ 367.305874][ T33] #0: ffff888029b8b548 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.305947][ T33] #1: ffffc90004c17c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306031][ T33] #2: ffff888065375c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 367.306098][ T33] locks held by kworker/u8:12/5818: 3, last CPU#1: [ 367.306115][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306182][ T33] #1: ffffc90004f5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306251][ T33] #2: ffff88802a5b7258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 367.306322][ T33] locks held by kworker/u8:19/5825: 3, last CPU#1: [ 367.306338][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306405][ T33] #1: ffffc90004fefc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306473][ T33] #2: ffff8880290ae258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 367.306544][ T33] locks held by kworker/u8:24/5830: 4, last CPU#1: [ 367.306561][ T33] #0: ffff88801b102948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306634][ T33] #1: ffffc9000504fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306709][ T33] #2: ffff88807a495440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 367.306782][ T33] #3: ffff8880793caad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 367.306849][ T33] locks held by kworker/u8:26/5832: 4, last CPU#1: [ 367.306865][ T33] #0: ffff88807766d148 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.306938][ T33] #1: ffffc9000506fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307006][ T33] #2: ffff88804c499440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 367.307072][ T33] #3: ffff888065372ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 367.307139][ T33] locks held by kworker/u8:28/5834: 3, last CPU#1: [ 367.307155][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307222][ T33] #1: ffffc9000508fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307288][ T33] #2: ffff888067d10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.307348][ T33] locks held by kworker/u8:31/5837: 3, last CPU#1: [ 367.307364][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307430][ T33] #1: ffffc900050bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307498][ T33] #2: ffff888048ce0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.307558][ T33] locks held by kworker/u8:42/5848: 3, last CPU#1: [ 367.307574][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307641][ T33] #1: ffffc9000516fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307717][ T33] #2: ffff888066a30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 367.307776][ T33] locks held by kworker/u8:44/5850: 4, on CPU#0: [ 367.307792][ T33] #0: ffff888031e84148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307859][ T33] #1: ffffc9000518fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.307927][ T33] #2: ffffffff90250420 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 367.307985][ T33] #3: ffff88804d286530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 367.308043][ T33] locks held by kworker/u8:45/5851: 4, last CPU#0: [ 367.308060][ T33] #0: ffff8880328b6948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.308127][ T33] #1: ffffc9000519fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 367.308194][ T33] #2: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 367.308255][ T33] #3: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 367.308319][ T33] locks held by kworker/u8:47/5853: 3, last CPU#1: [ 367.308336][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940303][ T33] #1: ffffc900051bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940382][ T33] #2: ffff8880430b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 368.940445][ T33] locks held by kworker/u8:48/5854: 4, on CPU#1: [ 368.940463][ T33] #0: ffff8880551e7148 ((wq_completion)wg-kex-wg2#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940536][ T33] #1: ffffc900051cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940602][ T33] #2: ffff88804c701440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 368.940669][ T33] #3: ffff888065375c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 368.940734][ T33] locks held by kworker/u8:49/5855: 3, last CPU#0: [ 368.940751][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940817][ T33] #1: ffffc900051dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.940885][ T33] #2: ffff88807a478258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 368.940956][ T33] locks held by kworker/u8:55/5861: 3, last CPU#0: [ 368.940973][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.941038][ T33] #1: ffffc9000523fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.950417][ T33] #2: ffff88804df70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 368.950490][ T33] locks held by kworker/u8:56/5862: 2, on CPU#0: [ 368.950507][ T33] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.950571][ T33] #1: ffffc9000524fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.950638][ T33] locks held by kworker/u8:57/5863: 4, on CPU#0: [ 368.950654][ T33] #0: ffff88802a859148 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.950726][ T33] #1: ffffc9000525fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 368.950793][ T33] #2: ffff88803205d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 368.950859][ T33] #3: ffff888065373ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 368.950929][ T33] locks held by syz.0.565/7631: 3, on CPU#0: [ 368.950945][ T33] #0: ffff888033adc9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 368.951000][ T33] #1: ffff88807b3fe460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 368.951067][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 368.960899][ T33] locks held by syz.0.565/7634: 2, on CPU#0: [ 368.960915][ T33] #0: ffff88807a7755f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 368.960969][ T33] #1: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 368.961020][ T33] locks held by syz.2.566/7633: 3, on CPU#1: [ 368.961036][ T33] #0: ffff88807ab570b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 371.378989][ T33] #1: ffff8880609a4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 371.388077][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 371.388147][ T33] locks held by syz.2.566/7635: 3, on CPU#0: [ 371.388164][ T33] #0: ffff88807a774b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 371.388244][ T33] #1: ffff8880609a4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 371.388306][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 371.388368][ T33] locks held by syz.1.615/7957: 3, on CPU#0: [ 371.388384][ T33] #0: ffff8880289ddcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 371.388438][ T33] #1: ffff888026908460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 371.388498][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 371.388552][ T33] locks held by syz-executor/8086: 3, last CPU#1: [ 371.388569][ T33] #0: ffffffff8f4f5378 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 371.388632][ T33] #1: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.388686][ T33] #2: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 371.388746][ T33] locks held by syz-executor/8091: 1, last CPU#1: [ 371.388763][ T33] #0: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.388818][ T33] locks held by syz-executor/8118: 1, last CPU#1: [ 371.388834][ T33] #0: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 371.388905][ T33] locks held by syz.9.628/8286: 3, on CPU#0: [ 371.388921][ T33] #0: ffff888025429970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 371.388975][ T33] #1: ffff88807999c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 371.389034][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 371.406917][ T33] locks held by syz.9.628/8287: 3, on CPU#0: [ 371.406937][ T33] #0: ffff8880254289b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 371.406993][ T33] #1: ffff88807999c460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 371.407054][ T33] #2: ffffffff8f0a0c80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 371.407111][ T33] locks held by syz-executor/8430: 1, last CPU#1: [ 371.407128][ T33] #0: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.407186][ T33] locks held by syz.4.632/8502: 2, last CPU#1: [ 371.407203][ T33] #0: ffff888035f61078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 371.407265][ T33] #1: ffffffff8ed5e2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 371.407327][ T33] locks held by sed/8507: 2, last CPU#1: [ 371.407352][ T33] #0: ffffffff8f4f5378 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 371.407414][ T33] #1: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.407468][ T33] locks held by modprobe/8510: 2, last CPU#1: [ 371.407484][ T33] #0: ffffffff8f4f5378 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 371.407545][ T33] #1: ffffffff8eeb0610 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.407602][ T33] [ 371.407609][ T33] ============================================= [ 371.407609][ T33] [ 371.407633][ T33] NMI backtrace for cpu 1 [ 371.407659][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 371.407698][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.407720][ T33] Call Trace: [ 371.407735][ T33] [ 371.407751][ T33] dump_stack_lvl+0xe8/0x150 [ 371.407803][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 371.407833][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 371.407859][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 371.407889][ T33] sys_info+0x135/0x170 [ 371.407911][ T33] watchdog+0x1058/0x10d0 [ 371.407948][ T33] ? watchdog+0x209/0x10d0 [ 371.407984][ T33] kthread+0x38b/0x480 [ 371.408011][ T33] ? __pfx_watchdog+0x10/0x10 [ 371.408037][ T33] ? __pfx_kthread+0x10/0x10 [ 371.408064][ T33] ret_from_fork+0x514/0xb70 [ 371.408089][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 371.408112][ T33] ? __switch_to+0xc78/0x1410 [ 371.408146][ T33] ? __pfx_kthread+0x10/0x10 [ 371.408174][ T33] ret_from_fork_asm+0x1a/0x30 [ 371.408246][ T33] [ 371.408254][ T33] Sending NMI from CPU 1 to CPUs 0: [ 371.408291][ C0] NMI backtrace for cpu 0 [ 371.408305][ C0] CPU: 0 UID: 0 PID: 5723 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 371.408326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.408340][ C0] Workqueue: mld mld_ifc_work [ 371.408365][ C0] RIP: 0010:__dev_queue_xmit+0x6c9/0x3820 [ 371.408386][ C0] Code: 2d d1 12 f8 eb 0a e8 26 d1 12 f8 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 6b 1e 84 f8 48 83 3b 00 <74> 78 4c 8b 6c 24 28 43 c6 44 25 04 00 48 c7 84 24 20 01 00 00 00 [ 371.408403][ C0] RSP: 0018:ffffc90000006f60 EFLAGS: 00000246 [ 371.408418][ C0] RAX: 1ffff11003a76b00 RBX: ffff88801d3b5800 RCX: ffff8880328addc0 [ 371.408433][ C0] RDX: 8000000000000300 RSI: 0000000000000100 RDI: ffffffff8c6dba20 [ 371.408446][ C0] RBP: ffffc90000007210 R08: 0000000000000100 R09: 1ffffffff20f43f7 [ 371.408460][ C0] R10: dffffc0000000000 R11: fffffbfff20f43f8 R12: dffffc0000000000 [ 371.408474][ C0] R13: ffff88807b30d000 R14: 0000000000000000 R15: ffff888086ffd490 [ 371.408488][ C0] FS: 0000000000000000(0000) GS:ffff888124caf000(0000) knlGS:0000000000000000 [ 371.408503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.408516][ C0] CR2: 00007ffd9ef0954c CR3: 000000000eb48000 CR4: 00000000003526f0 [ 371.408533][ C0] Call Trace: [ 371.408540][ C0] [ 371.408550][ C0] ? synproxy_pernet+0x23/0x240 [ 371.408577][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 371.408593][ C0] ? ipv4_synproxy_hook+0x246/0xd10 [ 371.408618][ C0] ? __lock_acquire+0x747/0x2de0 [ 371.408642][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 371.408660][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 371.408697][ C0] ? ip_finish_output2+0x972/0x10b0 [ 371.408722][ C0] ip_finish_output2+0xbda/0x10b0 [ 371.408744][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 371.408770][ C0] ip_output+0x29f/0x450 [ 371.408789][ C0] ? ip_output+0x5a/0x450 [ 371.408809][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 371.408847][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 371.408871][ C0] ? nft_tunnel_obj_dump+0x3b4/0xa70 [ 371.408891][ C0] ? synproxy_pernet+0x45/0x270 [ 371.408920][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 371.408949][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 371.408976][ C0] ? nf_ip_checksum+0x13c/0x510 [ 371.409004][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 371.409029][ C0] ? __lock_acquire+0x747/0x2de0 [ 371.409054][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 371.409083][ C0] ? __lock_acquire+0x747/0x2de0 [ 371.409109][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 371.409134][ C0] nft_do_chain+0x48d/0x1b10 [ 371.409163][ C0] ? lock_acquire+0x115/0x350 [ 371.409197][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 371.409232][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 371.409263][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 371.409310][ C0] nft_do_chain_ipv4+0x195/0x290 [ 371.409340][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 371.409369][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 371.409402][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 371.409435][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 371.409466][ C0] nf_hook_slow+0xc5/0x220 [ 371.409495][ C0] NF_HOOK+0x21f/0x3c0 [ 371.409525][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 371.409557][ C0] ? NF_HOOK+0x9e/0x3c0 [ 371.409585][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 371.409616][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 371.409652][ C0] ? ip_local_deliver+0x113/0x190 [ 371.409684][ C0] NF_HOOK+0x336/0x3c0 [ 371.409711][ C0] ? __lock_acquire+0x747/0x2de0 [ 371.409738][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 371.409768][ C0] ? NF_HOOK+0x9e/0x3c0 [ 371.409797][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 371.409828][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 371.409874][ C0] ? ip_rcv_core+0x88d/0xd50 [ 371.409906][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 371.409936][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 371.409965][ C0] process_backlog+0xa6b/0x18b0 [ 371.409997][ C0] ? process_backlog+0x3de/0x18b0 [ 371.410023][ C0] ? __lock_acquire+0x747/0x2de0 [ 371.410056][ C0] __napi_poll+0xaa/0x330 [ 371.410084][ C0] net_rx_action+0x61d/0xf50 [ 371.410118][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 371.410144][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 371.410179][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 371.410205][ C0] ? ktime_get+0x1f5/0x220 [ 371.410240][ C0] handle_softirqs+0x223/0x840 [ 371.410272][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 371.410306][ C0] __irq_exit_rcu+0xcb/0x220 [ 371.410336][ C0] irq_exit_rcu+0x9/0x30 [ 371.410360][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 371.410391][ C0] [ 371.410398][ C0] [ 371.410406][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.410431][ C0] RIP: 0010:finish_task_switch+0x413/0xc60 [ 371.410465][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 57 cf 56 0a e8 02 55 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 371.410484][ C0] RSP: 0018:ffffc90004997680 EFLAGS: 00000206 [ 371.410503][ C0] RAX: 000000000007559f RBX: ffff8880b863cf60 RCX: 8000000000000001 [ 371.410520][ C0] RDX: 0000000000000006 RSI: ffffffff8e428461 RDI: ffffffff8c6dba80 [ 371.410536][ C0] RBP: ffffc900049976d0 R08: ffffffff907a1fbf R09: 1ffffffff20f43f7 [ 371.410553][ C0] R10: dffffc0000000000 R11: fffffbfff20f43f8 R12: ffff8880328addc0 [ 371.410570][ C0] R13: ffff8880b863cf38 R14: dffffc0000000000 R15: 1ffff110170c79ec [ 371.410601][ C0] __schedule+0x1b4f/0x5c60 [ 371.410647][ C0] ? __pfx___schedule+0x10/0x10 [ 371.410681][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 371.410710][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 371.410736][ C0] preempt_schedule_common+0x7f/0xd0 [ 371.410766][ C0] preempt_schedule_thunk+0x16/0x40 [ 371.410794][ C0] __mutex_unlock_slowpath+0x796/0x900 [ 371.410831][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.410871][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 371.410902][ C0] ? mod_delayed_work_on+0x161/0x190 [ 371.410929][ C0] mld_ifc_work+0xbfb/0xd60 [ 371.410960][ C0] ? process_scheduled_works+0x97a/0x1630 [ 371.410993][ C0] process_scheduled_works+0xc3d/0x1630 [ 371.411044][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.411081][ C0] ? assign_work+0x3cf/0x5d0 [ 371.411115][ C0] worker_thread+0xa47/0xfb0 [ 371.411157][ C0] ? __kthread_parkme+0x71/0x1f0 [ 371.411185][ C0] kthread+0x38b/0x480 [ 371.411210][ C0] ? __pfx_worker_thread+0x10/0x10 [ 371.411242][ C0] ? __pfx_kthread+0x10/0x10 [ 371.411267][ C0] ret_from_fork+0x514/0xb70 [ 371.411291][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 371.411312][ C0] ? __switch_to+0xc78/0x1410 [ 371.411344][ C0] ? __pfx_kthread+0x10/0x10 [ 371.411370][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.411413][ C0] [ 374.765023][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 377.482244][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 377.491395][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.501485][ T33] Call Trace: [ 377.504820][ T33] [ 377.507783][ T33] vpanic+0x26f/0x710 [ 377.511842][ T33] panic+0xc5/0xd0 [ 377.515647][ T33] ? __pfx_panic+0x10/0x10 [ 377.520114][ T33] ? preempt_schedule_common+0x7f/0xd0