last executing test programs: 51.433054409s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./cg\x00', &(0x7f0000000200)='cgroup\x00', 0x0, &(0x7f0000000300)='none,name=my_cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cg/sub1\x00', 0x1ff) open_by_handle_at(r0, &(0x7f0000001000)=@raw={0x8, 0xfe, {"0800000001000000"}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000001000)=@raw={0x8, 0xfe, {"0800000001000000"}}, 0x0) 51.343947488s ago: executing program 0 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 49.933122293s ago: executing program 1 (id=2): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000a00)={'veth0_to_bridge\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x1043}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c00)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000d00)={'bridge0\x00', 0x1043}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0xa) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e20, 0xac141415, @empty}, r4, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r4, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x120) r5 = accept4$inet(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000800)='\x00'/20, 0x14, 0x0, 0x0, 0x0) close(r5) 49.874871489s ago: executing program 5 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='/tmp\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='-2 -3 +4\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='1\n\x00', 0x2) close(r6) nanosleep(&(0x7f0000000540)={0x1}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000580)={0x2, 0x801, @loopback}, 0x10) write(r7, &(0x7f00000005c0)="80000098123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000010000000200000016000000200100010000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000001000010000000001c00000001000000000000000000000001000000064f574e4552400000", 0x9c) 48.900869098s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./cg\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./cg/sub1\x00', 0x1ff) open_by_handle_at(r0, &(0x7f0000001000)=@raw={0x8, 0xfe, {"0800000001000000"}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000001000)=@raw={0x8, 0xfe, {"0800000001000000"}}, 0x0) 48.768675137s ago: executing program 1 (id=11): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) read(0x0, &(0x7f0000000000)=""/44, 0x28) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl(r0, 0xc058560f, &(0x7f00000000c0)="00000000020000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000007f000000004000"/84) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl(r0, 0xc058560f, &(0x7f0000000140)="00000000010000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000007f000000004000"/84) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 48.624351848s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='30000\n\x00', 0x6) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x13, 0x0, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,0x7f0000400000\x00', 0x24) 48.408077716s ago: executing program 1 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x64}}}, r2, 0x3e8}}, 0x48) 47.802469514s ago: executing program 5 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000\x00') (async) r1 = accept(r0, 0x0, 0x0) close(r1) 46.65473955s ago: executing program 5 (id=16): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa09040001040000000007058102400000070582024000000705010240000007050202400000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000210)={0x40, 0x0, 0x6, {0x6, 0x0, '\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000208)={0x0, 0x0, 0x21, '\x00'/33}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 43.291518182s ago: executing program 5 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536', 0x10) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="00000000010000000000a000000000000300040000000000766f6c3000"/160) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 42.62359517s ago: executing program 5 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000300)={0x2}) 42.521471983s ago: executing program 5 (id=27): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x43) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) write(r2, &(0x7f0000000400)="01008000800000000000000200004000"/127, 0x80) 35.938203266s ago: executing program 32 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,data_digest\x00', 0x41) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 33.212449211s ago: executing program 33 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x64}}}, r2, 0x3e8}}, 0x48) 27.064321469s ago: executing program 34 (id=27): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x43) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) write(r2, &(0x7f0000000400)="01008000800000000000000200004000"/127, 0x80) 25.558636724s ago: executing program 4 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x10}, {0x1, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "01020202010200000101010101010101"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x101}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x10}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x1, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 25.076463518s ago: executing program 4 (id=60): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190005007e05000006030000000000000000000005010905a101853005091901290815002501951075018102c0"], 0x131) nanosleep(&(0x7f0000000300)={0x2}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000000300300000"], 0x9) 24.595035127s ago: executing program 6 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x38}}, 0x0) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000500)={'syzkaller1\x00', @ifru_hwaddr=@random}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1}) 24.042832107s ago: executing program 6 (id=61): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./umad0\x00', 0x81ff, 0xe700) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./umad0\x00', 0x2, 0x0) ioctl(r1, 0xc01c1b01, &(0x7f0000000140)='\x00'/28) write(r1, &(0x7f0000000180)='\x00'/128, 0x80) 20.124339176s ago: executing program 2 (id=63): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="757362300000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000300)="757362310000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000400)="657468300000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000500)="657468310000000000000000000000000100"/40) (async) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.216199946s ago: executing program 8 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/real_power_state\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A08:00/power_state\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0A08:00/sun\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/PNP0A08:00/uid\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/acpi/devices/PNP0A08:00/hrv\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/acpi/devices/PNP0A08:00/description\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/acpi/devices/PNP0A08:00/adr\x00', 0x0, 0x0) read(r6, &(0x7f0000000d00)=""/256, 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0A08:00/eject\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/acpi/devices/PNP0C0F:00/real_power_state\x00', 0x0, 0x0) read(r8, &(0x7f0000001100)=""/256, 0x100) r9 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/acpi/devices/PNP0C0F:00/power_state\x00', 0x0, 0x0) read(r9, &(0x7f0000001300)=""/256, 0x100) openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/acpi/devices/PNP0C0F:00/sun\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/acpi/devices/PNP0C0F:00/uid\x00', 0x0, 0x0) read(r10, &(0x7f0000001700)=""/256, 0x100) 15.959826569s ago: executing program 4 (id=71): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a20610680000000000010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000600)=@mmap={0x1, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000700)=0x1) 15.830555089s ago: executing program 2 (id=72): syz_usb_connect(0x3, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004082057d000001000000010902680003010080320904000000ff0000000904000101ff0000000b2402010203180144ac00070501050002010904010000ff0000000904010101ff0000000b2402010203180144ac00070582050002010904020002ff0000000705030200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x0, 0x0) 15.751007574s ago: executing program 8 (id=73): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest\x00', 0x40) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 15.213119742s ago: executing program 6 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0/firmware-usb-6.bin\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000400)="5143412d41544831304b0000020000000400000000000800", 0x18) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b11342000000000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000006801004100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000700)=@random='syz\x00', 0x4, 0x0) 13.454943806s ago: executing program 4 (id=77): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000002c0)=""/23, 0x17, 0x5, 0x57e, 0x306}}, 0x120) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000340)={0xc, {0x3, '0\x00\x00'}}, 0x9) 13.299052887s ago: executing program 2 (id=79): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0x5, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x7, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010900a101c0"}}, 0x11f) 13.038327476s ago: executing program 2 (id=80): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b52810001000000010902270001010080320904000003ffffff00070581020002000705020200020007058303080001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002000)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002100)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002200)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002300)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002400)={'\x00', 0x1}) 11.199540072s ago: executing program 7 (id=83): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0) 10.877235308s ago: executing program 7 (id=84): syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004034127856000100000001090243000201008032090400000102020000052400100105240100010424020005240600010705810340000a09040100020a0000000705820200020007050302000200"], 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020200004034127856000100000001090243000201008032090400000102020000052400100105240100010424020005240600010705810340000a09040100020a0000000705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x6}, 0x0) 10.766220885s ago: executing program 6 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/real_power_state\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A08:00/power_state\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0A08:00/sun\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/PNP0A08:00/uid\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/acpi/devices/PNP0A08:00/hrv\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/acpi/devices/PNP0A08:00/description\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/acpi/devices/PNP0A08:00/adr\x00', 0x0, 0x0) read(r6, &(0x7f0000000d00)=""/256, 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0A08:00/eject\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/acpi/devices/PNP0C0F:00/real_power_state\x00', 0x0, 0x0) read(r8, &(0x7f0000001100)=""/256, 0x100) r9 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/acpi/devices/PNP0C0F:00/power_state\x00', 0x0, 0x0) read(r9, &(0x7f0000001300)=""/256, 0x100) r10 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/acpi/devices/PNP0C0F:00/uid\x00', 0x0, 0x0) read(r10, &(0x7f0000001700)=""/256, 0x100) 10.551981789s ago: executing program 6 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='30000\n\x00', 0x6) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x13, 0x0, 0x0) process_madvise(r3, &(0x7f0000004000)=[{&(0x7f0000200000), 0x200000}], 0x1, 0xe, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,0x7f0000400000\x00', 0x24) 10.306878245s ago: executing program 6 (id=87): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040700c0ef000000102030109022200010100c00009040000010300000009211101000122130007058103400001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022130000000600ff0901a101150026ff00750895408102c0"], 0x0}, &(0x7f0000000200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022130000000600ff0901a101150026ff00750895408102c0"], 0x0}, &(0x7f0000000200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 7.638224119s ago: executing program 7 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/hid/drivers/sony/new_id\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0003 1234 5678 00000010\x00', 0x18) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000403412785600010102030109022200010100a0320904000001030000000921110100012222000705810308000a"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.658337823s ago: executing program 2 (id=91): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./image2\x00', 0x42, 0x1ed) write(r0, &(0x7f0000001000)='A', 0x1) r1 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_f2fs\x00', 0x1ed) mount(&(0x7f0000000b00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./mnt_f2fs\x00', &(0x7f0000000600)='f2fs\x00', 0x0, &(0x7f0000000700)='compress_algorithm=zstd:6\x00') 5.391236688s ago: executing program 2 (id=92): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) 4.607208733s ago: executing program 4 (id=94): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x100, 0x0, 0x1, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x101, 0x0, 0x2, 0x100}}) nanosleep(&(0x7f0000001000)={0x0, 0xbebc200}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x102, 0x0, 0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000002c0)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x103, 0x0, 0x4, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000300)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x104, 0x0, 0x5, 0x100}}) nanosleep(&(0x7f0000001000)={0x0, 0xbebc200}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000340)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x105, 0x0, 0x6, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x106, 0x0, 0x7, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x107, 0x0, 0x8, 0x100}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x108, 0x0, 0x9, 0x100}}) nanosleep(&(0x7f0000001000)={0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x10}]}, 0x38}}, 0x0) 4.366863876s ago: executing program 7 (id=95): r0 = syz_usb_connect(0x2, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000102030109027e00020100803209040000010e0100000d240100011e0000000000010108240201000200000924030201010001000705810310000109040100010e0200000e240101370082000200000001000b240601010001000000001e240701004001f00000000000000000000000000015160500011516050007058202400001"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x87, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x81, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000001000)={0x20, 0x81, 0x1a, "00000101151605000000000000000000000000b0040000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000500)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000700)=0x1) syz_usb_ep_write(r0, 0x2, 0x10, &(0x7f0000000800)='\x00'/16) 1.702096527s ago: executing program 3 (id=97): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x2, &(0x7f0000000040)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x1, 0x25, 0x0, @void}, 0x10) 1.603338724s ago: executing program 3 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/real_power_state\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A08:00/power_state\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0A08:00/sun\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/PNP0A08:00/uid\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/acpi/devices/PNP0A08:00/hrv\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/acpi/devices/PNP0A08:00/description\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/acpi/devices/PNP0A08:00/adr\x00', 0x0, 0x0) read(r6, &(0x7f0000000d00)=""/256, 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0A08:00/eject\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/acpi/devices/PNP0C0F:00/real_power_state\x00', 0x0, 0x0) read(r8, &(0x7f0000001100)=""/256, 0x100) openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/acpi/devices/PNP0C0F:00/power_state\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/acpi/devices/PNP0C0F:00/uid\x00', 0x0, 0x0) read(r9, &(0x7f0000001700)=""/256, 0x100) 1.46584855s ago: executing program 3 (id=99): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl(r0, 0x3b90, &(0x7f0000000200)="2800000000000000efbeadde0200000005000000000000001000000000000000000200000000007f") 1.258804659s ago: executing program 3 (id=100): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000900)={0x15, 0x110, 0xfa00, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 1.228219008s ago: executing program 7 (id=101): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a310000000008004100736977001400330073797a3000"/56], 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e24, 0x0, @empty}, 0x1c) listen(r1, 0xa) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write(r2, &(0x7f00000001c0)="03000000400000fa02000000ac1414aa00000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000e8030000", 0x48) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) r4 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000800)='\x00'/20, 0x14, 0x0, 0x0, 0x0) close(r4) 338.928031ms ago: executing program 3 (id=102): r0 = syz_io_uring_setup(0x8, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind(r5, &(0x7f0000000200)=@generic={0x21, "01000200100002001b5800"}, 0x80) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)='\x00'/260, 0x104}, {&(0x7f0000002200)="00000001", 0x4}, {&(0x7f0000002300)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000002400)='\x00'/632, 0x278}, {&(0x7f0000002500)="00000004", 0x4}, {&(0x7f0000002600)='\x00'/64, 0x40}, {&(0x7f0000002700)="00001000", 0x4}, {&(0x7f0000002800)='\x00'/36, 0x24}], 0x8, &(0x7f0000000400)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000620)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003100)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000003200)="0000000100000001000000017f000001", 0x10}], 0x2, &(0x7f0000000420)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000550)=""/1024, 0x400}], 0x1, &(0x7f0000000440)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000004100)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000440)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000360)={0x0, 0x0, &(0x7f0000000560)=[{&(0x7f0000000570)=""/1024, 0x400}], 0x1, &(0x7f0000000460)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000660)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000005100)="0000000100000002", 0x8}, {&(0x7f0000005200)='\x00'/112, 0x70}], 0x2, &(0x7f0000000460)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='#127.0.0.1:root.cell\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000900)='afs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/test\x00', 0x40, 0x1ff) 289.425386ms ago: executing program 35 (id=73): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest\x00', 0x40) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 233.641612ms ago: executing program 7 (id=104): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) listen(r0, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) sendto$rxrpc(r1, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000200), 0x4, 0x0, 0x0, 0x0) 120.462822ms ago: executing program 3 (id=105): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040000000000000000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000100)=""/31) 0s ago: executing program 4 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000001000), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 70.776823][ T5604] cgroup: Unknown subsys name 'net' [ 70.906253][ T5604] cgroup: Unknown subsys name 'cpuset' [ 70.916034][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.349024][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.824523][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.825838][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.841212][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.849210][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.857675][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.970714][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.979235][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.987078][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.998951][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.999757][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.020502][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.027878][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.028443][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.029541][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.030197][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.067200][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.069071][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.069640][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.072679][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.075221][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.123541][ T4933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.126110][ T4933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.126630][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.129479][ T4933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.137905][ T4933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.240408][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.247797][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.248254][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.264920][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.275616][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.953147][ T4933] Bluetooth: hci0: command tx timeout [ 77.006641][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.006769][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.006920][ T5616] bridge_slave_0: entered allmulticast mode [ 77.009984][ T5616] bridge_slave_0: entered promiscuous mode [ 77.022477][ T4933] Bluetooth: hci1: command tx timeout [ 77.078038][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.078175][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.078319][ T5616] bridge_slave_1: entered allmulticast mode [ 77.080493][ T5616] bridge_slave_1: entered promiscuous mode [ 77.102060][ T4933] Bluetooth: hci2: command tx timeout [ 77.146383][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.182177][ T52] Bluetooth: hci3: command tx timeout [ 77.182513][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.187769][ T4933] Bluetooth: hci4: command tx timeout [ 77.263237][ T5616] team0: Port device team_slave_0 added [ 77.266826][ T5616] team0: Port device team_slave_1 added [ 77.342122][ T4933] Bluetooth: hci5: command tx timeout [ 77.349936][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.357101][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.383133][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.430773][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.430926][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.431359][ T5626] bridge_slave_0: entered allmulticast mode [ 77.436579][ T5626] bridge_slave_0: entered promiscuous mode [ 77.458244][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.458260][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.458292][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.523449][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.523914][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.524050][ T5626] bridge_slave_1: entered allmulticast mode [ 77.526049][ T5626] bridge_slave_1: entered promiscuous mode [ 77.703968][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.707748][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.786514][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.787508][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.787648][ T5631] bridge_slave_0: entered allmulticast mode [ 77.789573][ T5631] bridge_slave_0: entered promiscuous mode [ 77.801869][ T5616] hsr_slave_0: entered promiscuous mode [ 77.803331][ T5616] hsr_slave_1: entered promiscuous mode [ 77.834826][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.834955][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.835093][ T5621] bridge_slave_0: entered allmulticast mode [ 77.837178][ T5621] bridge_slave_0: entered promiscuous mode [ 77.869218][ T5626] team0: Port device team_slave_0 added [ 77.869445][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.869554][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.869685][ T5631] bridge_slave_1: entered allmulticast mode [ 77.873399][ T5631] bridge_slave_1: entered promiscuous mode [ 77.914215][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.914362][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.914498][ T5621] bridge_slave_1: entered allmulticast mode [ 77.916540][ T5621] bridge_slave_1: entered promiscuous mode [ 77.949548][ T5626] team0: Port device team_slave_1 added [ 77.975307][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.975516][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.975941][ T5638] bridge_slave_0: entered allmulticast mode [ 77.977946][ T5638] bridge_slave_0: entered promiscuous mode [ 78.024952][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.035263][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.035725][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.035883][ T5638] bridge_slave_1: entered allmulticast mode [ 78.037917][ T5638] bridge_slave_1: entered promiscuous mode [ 78.043529][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.043709][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.043861][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.045842][ T5628] bridge_slave_0: entered allmulticast mode [ 78.048780][ T5628] bridge_slave_0: entered promiscuous mode [ 78.072512][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.128153][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.142350][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.142597][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.142734][ T5628] bridge_slave_1: entered allmulticast mode [ 78.144722][ T5628] bridge_slave_1: entered promiscuous mode [ 78.164156][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.164171][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.164201][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.167058][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.167073][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.167103][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.248668][ T5631] team0: Port device team_slave_0 added [ 78.263539][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.266414][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.269926][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.302752][ T5628] team0: Port device team_slave_0 added [ 78.306340][ T5631] team0: Port device team_slave_1 added [ 78.334321][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.351203][ T5628] team0: Port device team_slave_1 added [ 78.366601][ T5621] team0: Port device team_slave_0 added [ 78.428804][ T5621] team0: Port device team_slave_1 added [ 78.468091][ T5626] hsr_slave_0: entered promiscuous mode [ 78.469352][ T5626] hsr_slave_1: entered promiscuous mode [ 78.470151][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 78.470208][ T5626] Cannot create hsr debugfs directory [ 78.487534][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.487550][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.487580][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.489409][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.489424][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.489453][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.520709][ T5638] team0: Port device team_slave_0 added [ 78.524800][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.524815][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.524845][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.542365][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.542380][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.542410][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.553751][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.553766][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.553796][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.569173][ T5638] team0: Port device team_slave_1 added [ 78.646457][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.646476][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.646508][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.759586][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.759605][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.759635][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.844383][ T5621] hsr_slave_0: entered promiscuous mode [ 78.845789][ T5621] hsr_slave_1: entered promiscuous mode [ 78.846568][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.846589][ T5621] Cannot create hsr debugfs directory [ 78.847453][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.847467][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.847498][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.912807][ T5628] hsr_slave_0: entered promiscuous mode [ 78.915113][ T5628] hsr_slave_1: entered promiscuous mode [ 78.915864][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 78.915884][ T5628] Cannot create hsr debugfs directory [ 78.925143][ T5631] hsr_slave_0: entered promiscuous mode [ 78.926314][ T5631] hsr_slave_1: entered promiscuous mode [ 78.927375][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 78.927394][ T5631] Cannot create hsr debugfs directory [ 79.032103][ T4933] Bluetooth: hci0: command tx timeout [ 79.102536][ T4933] Bluetooth: hci1: command tx timeout [ 79.103105][ T5638] hsr_slave_0: entered promiscuous mode [ 79.104206][ T5638] hsr_slave_1: entered promiscuous mode [ 79.105020][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 79.105040][ T5638] Cannot create hsr debugfs directory [ 79.183248][ T4933] Bluetooth: hci2: command tx timeout [ 79.196578][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.208413][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.246888][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.256978][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.264611][ T52] Bluetooth: hci3: command tx timeout [ 79.264696][ T4933] Bluetooth: hci4: command tx timeout [ 79.317709][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.328025][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.369810][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.379999][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.422075][ T4933] Bluetooth: hci5: command tx timeout [ 79.610351][ T5626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.620146][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.621188][ T5626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.632618][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.635172][ T5626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.646905][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.680375][ T5626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.691167][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.786452][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.797911][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.809055][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.818821][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.820630][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.829652][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.848394][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.858668][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.947907][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.960624][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.961535][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.971781][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.990318][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.000775][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.003286][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.011793][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.071758][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.146122][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.156334][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.178324][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.187882][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.202399][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.205702][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.214166][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.245666][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.257403][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.265356][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.301270][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.301396][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.342744][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.350803][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.350938][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.368211][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.378749][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.398339][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.409300][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.433283][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.433684][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.445368][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.446358][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.451249][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.496846][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.497017][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.519174][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.555405][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.560522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.560634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.589776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.590144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.646230][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.646359][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.704070][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.713636][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.713756][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.745256][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.745380][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.982821][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.102676][ T4933] Bluetooth: hci0: command tx timeout [ 81.153573][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.192414][ T4933] Bluetooth: hci1: command tx timeout [ 81.200358][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.200496][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.245848][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.262455][ T4933] Bluetooth: hci2: command tx timeout [ 81.301777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.301904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.354468][ T4933] Bluetooth: hci4: command tx timeout [ 81.354540][ T4933] Bluetooth: hci3: command tx timeout [ 81.369777][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.434435][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.434569][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.502861][ T52] Bluetooth: hci5: command tx timeout [ 81.531329][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.531466][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.129891][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.473750][ T5616] veth0_vlan: entered promiscuous mode [ 82.611436][ T5616] veth1_vlan: entered promiscuous mode [ 82.758656][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.816135][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.830397][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.835410][ T5616] veth0_macvtap: entered promiscuous mode [ 82.887425][ T5616] veth1_macvtap: entered promiscuous mode [ 83.066058][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.095306][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.192697][ T52] Bluetooth: hci0: command tx timeout [ 83.207571][ T5621] veth0_vlan: entered promiscuous mode [ 83.210403][ T5631] veth0_vlan: entered promiscuous mode [ 83.261450][ T5631] veth1_vlan: entered promiscuous mode [ 83.272663][ T52] Bluetooth: hci1: command tx timeout [ 83.319921][ T5621] veth1_vlan: entered promiscuous mode [ 83.348994][ T52] Bluetooth: hci2: command tx timeout [ 83.423943][ T4933] Bluetooth: hci4: command tx timeout [ 83.424028][ T52] Bluetooth: hci3: command tx timeout [ 83.446392][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.500743][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.583200][ T52] Bluetooth: hci5: command tx timeout [ 83.623572][ T552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.639818][ T552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.650399][ T552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.701252][ T5631] veth0_macvtap: entered promiscuous mode [ 83.713403][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713502][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713588][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.764858][ T5621] veth0_macvtap: entered promiscuous mode [ 83.787266][ T5631] veth1_macvtap: entered promiscuous mode [ 83.820901][ T5621] veth1_macvtap: entered promiscuous mode [ 83.843503][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.843550][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.860104][ T5626] veth0_vlan: entered promiscuous mode [ 83.879702][ T5628] veth0_vlan: entered promiscuous mode [ 83.926965][ T5626] veth1_vlan: entered promiscuous mode [ 83.941091][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.950828][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.966884][ T5628] veth1_vlan: entered promiscuous mode [ 83.971834][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.996861][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.012595][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.172372][ T552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.259735][ T5628] veth0_macvtap: entered promiscuous mode [ 84.281047][ T5626] veth0_macvtap: entered promiscuous mode [ 84.314304][ T5638] veth0_vlan: entered promiscuous mode [ 84.324262][ T5626] veth1_macvtap: entered promiscuous mode [ 84.340683][ T5628] veth1_macvtap: entered promiscuous mode [ 84.366777][ T5638] veth1_vlan: entered promiscuous mode [ 84.393496][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.420082][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.420129][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.444765][ T552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.445300][ T552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.445681][ T552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473886][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.481949][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.494952][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.514948][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515020][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515084][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.536957][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.578543][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.584720][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.599227][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.599290][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.621649][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.621692][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.682257][ T552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682347][ T552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682386][ T552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682617][ T552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682661][ T552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682703][ T552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682745][ T552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682787][ T552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.772553][ T5638] veth0_macvtap: entered promiscuous mode [ 84.796075][ T5638] veth1_macvtap: entered promiscuous mode [ 85.010716][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.028359][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.028413][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.049877][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.137178][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.137301][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.137369][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.144278][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.144298][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.183191][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.222710][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.226535][ T552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.226556][ T552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.339142][ T552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.339196][ T552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.408464][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 85.426248][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.505458][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.505506][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.625457][ T5606] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.672773][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.672823][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.709973][ T25] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 9a:69:18:87:1d:ea [ 85.783011][ T5606] usb 3-1: New USB device found, idVendor=0c45, idProduct=6142, bcdDevice= 1.00 [ 85.800519][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.800570][ T5606] usb 3-1: Product: syz [ 85.800606][ T5606] usb 3-1: Manufacturer: syz [ 85.800634][ T5606] usb 3-1: SerialNumber: syz [ 85.847360][ T5606] gspca_main: sonixj-2.14.0 probing 0c45:6142 [ 85.874314][ T5865] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 85.889741][ T5865] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 85.889800][ T5865] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 85.926926][ T5865] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.947529][ T5865] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.077851][ T44] cfg80211: failed to load regulatory.db [ 86.281545][ T5882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.105226][ T5892] infiniband rxe0: set active [ 87.106247][ T5892] infiniband rxe0: added veth0 [ 87.122697][ T5868] NFSD: Unable to initialize client recovery tracking! (-110) [ 87.123474][ T5868] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 87.123490][ T5868] NFSD: starting 90-second grace period (net f00003cc) [ 87.153073][ T5892] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 87.153140][ T5892] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 87.153222][ T5892] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 87.238899][ T5892] RDS/IB: rxe0: added [ 87.239316][ T5892] smc: adding ib device rxe0 with port count 1 [ 87.239444][ T5892] smc: ib device rxe0 port 1 has no pnetid [ 87.273212][ T5278] net1080 4-1:1.0 usb0: port A, peer connected [ 87.324384][ T5731] usb 3-1: USB disconnect, device number 2 [ 87.834919][ T5921] CIFS: Attempting to mount //172.20.20.170/share [ 88.674093][ T5921] CIFS: VFS: cifs_mount failed w/return code = -112 [ 88.676702][ T5928] CIFS: Attempting to mount //127.0.0.1/share [ 89.007281][ T5928] CIFS: VFS: cifs_mount failed w/return code = -512 [ 89.119160][ T5606] usb 4-1: USB disconnect, device number 2 [ 89.139421][ T5606] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 89.222132][ T5752] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 89.300839][ T25] input: syz0 as /devices/virtual/misc/uhid/0005:054C:0306.0001/input/input5 [ 89.352020][ T25] sony 0005:054C:0306.0001: input,hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 89.393420][ T5752] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 89.396462][ T5752] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.396494][ T5752] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 89.396522][ T5752] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 89.396549][ T5752] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 89.396576][ T5752] usb 6-1: config 1 interface 0 has no altsetting 0 [ 89.396611][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.450204][ T5941] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 89.450362][ T5941] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 89.450504][ T5941] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 89.450644][ T5941] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 89.511926][ T5752] usb 6-1: probing VID:PID(0424:012C) [ 89.543307][ T5752] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 89.543361][ T5752] usb 6-1: vub300 testing BULK IN EndPoint(1) 82 [ 89.543405][ T5752] usb 6-1: vub300 testing BULK OUT EndPoint(2) 01 [ 89.543435][ T5752] usb 6-1: vub300 testing BULK OUT EndPoint(3) 02 [ 89.543464][ T5752] usb 6-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 89.742448][ T5606] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.915515][ T5606] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.936675][ T5606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 89.949595][ T5606] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.959093][ T5752] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 64 byte USB packets [ 89.973641][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.982900][ T5606] usb 4-1: Product: syz [ 89.982948][ T5606] usb 4-1: Manufacturer: 䉁䑃䙅䡇 [ 89.982974][ T5606] usb 4-1: SerialNumber: syz [ 90.014841][ T5606] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.183296][ T5752] vub300 6-1:1.0: probe with driver vub300 failed with error -22 [ 90.282646][ T5606] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 90.642041][ T5752] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.798765][ T5752] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 90.800070][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.850051][ T5752] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 91.862387][ T3302] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.862458][ T3302] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.862522][ T3302] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.862570][ T3302] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.107059][ T5757] usb 6-1: USB disconnect, device number 2 [ 92.187982][ T5752] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 92.196114][ T5752] wiimote 0005:057E:0306.0002: New device registered [ 92.428305][ T5757] usb 4-1: USB disconnect, device number 3 [ 92.487759][ T5996] block2mtd: error: cannot open device /dev/loop0 [ 92.607063][ T5999] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.618387][ T5999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.628138][ T5999] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.636830][ T5999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 92.677368][ T5997] UBIFS error (pid: 5997): cannot open "ubi0_0", error -19 [ 92.956483][ T5990] wiimote 0005:057E:0306.0002: Device removed [ 93.074701][ T30] audit: type=1800 audit(1788451128.750:2): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.28" name="local" dev="configfs" ino=9531 res=0 errno=0 [ 93.078128][ T6010] dlm: no local IP address has been set [ 93.078141][ T6010] dlm: cannot start dlm midcomms -107 [ 93.206234][ T6013] rdma_rxe: rxe_newlink: failed to add veth0 [ 93.263040][ T5752] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 93.325866][ T5752] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 93.363118][ T5752] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 93.376878][ T5752] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 93.492477][ T5757] usb 3-1: USB disconnect, device number 3 [ 93.636994][ T6018] CIFS: Attempting to mount //127.0.0.1/share [ 94.352676][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.459624][ T6018] CIFS: VFS: cifs_mount failed w/return code = -112 [ 94.513802][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=6142, bcdDevice= 1.00 [ 94.525738][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.558249][ T25] gspca_main: sonixj-2.14.0 probing 0c45:6142 [ 94.985636][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.021869][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.021929][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023811][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023837][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023860][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023883][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023905][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023927][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x2 [ 96.023950][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.023972][ T5757] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 96.027525][ T5757] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 96.028178][ T5757] wiimote 0005:057E:0306.0003: New device registered [ 96.844685][ T6033] wiimote 0005:057E:0306.0003: Device removed [ 97.115064][ T5757] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 97.115609][ T5757] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 97.115631][ T5757] CPU: 0 UID: 0 PID: 5757 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 97.115659][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 97.115675][ T5757] Workqueue: events wiimote_init_worker [ 97.115724][ T5757] Call Trace: [ 97.115734][ T5757] [ 97.115744][ T5757] dump_stack_lvl+0xe8/0x150 [ 97.115784][ T5757] sysfs_warn_dup+0x8e/0xa0 [ 97.115822][ T5757] sysfs_do_create_link_sd+0xc0/0x110 [ 97.115862][ T5757] device_add_class_symlinks+0x1cf/0x240 [ 97.115906][ T5757] device_add+0x467/0xb80 [ 97.115946][ T5757] __power_supply_register+0xb88/0xf60 [ 97.115984][ T5757] ? __pfx___power_supply_register+0x10/0x10 [ 97.116016][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116045][ T5757] ? trace_kmalloc+0x2a/0xf0 [ 97.116092][ T5757] wiimod_battery_probe+0x202/0x3a0 [ 97.116125][ T5757] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 97.116163][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116192][ T5757] ? input_ff_create_memless+0x2e4/0x600 [ 97.116231][ T5757] wiimote_init_worker+0x20c9/0x2f00 [ 97.116288][ T5757] ? __pfx_wiimote_init_worker+0x10/0x10 [ 97.116332][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116361][ T5757] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.116407][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116436][ T5757] ? lock_acquire+0x115/0x350 [ 97.116463][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116500][ T5757] ? rcu_is_watching+0x16/0xb0 [ 97.116530][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116561][ T5757] ? process_scheduled_works+0x97a/0x1630 [ 97.116596][ T5757] process_scheduled_works+0xc3d/0x1630 [ 97.116630][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116693][ T5757] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.116734][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116763][ T5757] ? assign_work+0x3cf/0x5d0 [ 97.116802][ T5757] worker_thread+0xa47/0xfb0 [ 97.116840][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116880][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.116909][ T5757] ? __kthread_parkme+0x71/0x1f0 [ 97.116958][ T5757] kthread+0x38b/0x480 [ 97.116984][ T5757] ? __pfx_worker_thread+0x10/0x10 [ 97.117016][ T5757] ? __pfx_kthread+0x10/0x10 [ 97.117044][ T5757] ret_from_fork+0x514/0xb70 [ 97.117072][ T5757] ? __pfx_ret_from_fork+0x10/0x10 [ 97.117111][ T5757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.117140][ T5757] ? __switch_to+0xc89/0x1420 [ 97.117179][ T5757] ? __pfx_kthread+0x10/0x10 [ 97.117206][ T5757] ret_from_fork_asm+0x1a/0x30 [ 97.117267][ T5757] [ 97.121036][ T5757] wiimote 0005:057E:0306.0003: cannot register battery device [ 97.253351][ T10] usb 4-1: USB disconnect, device number 4 [ 97.479777][ T6042] block2mtd: error: cannot open device /dev/loop0 [ 97.647698][ T6042] UBIFS error (pid: 6042): cannot open "ubi0_0", error -19 [ 97.924976][ T6045] block2mtd: error: cannot open device /dev/loop0 [ 98.097034][ T6046] UBIFS error (pid: 6046): cannot open "ubi0_0", error -19 [ 98.452059][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.615833][ T10] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 98.617415][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.826108][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.835527][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.847826][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.857912][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.866878][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.930963][ T6054] CIFS: Attempting to mount //127.0.0.1/share [ 99.955269][ T6054] CIFS: VFS: Error connecting to socket. Aborting operation. [ 99.955340][ T6054] CIFS: VFS: cifs_mount failed w/return code = -111 [ 100.838044][ T10] usb 4-1: NFC: Reader power on cmd error -71 [ 100.838106][ T10] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 100.838259][ T10] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -71 [ 100.870243][ T10] usb 4-1: USB disconnect, device number 5 [ 101.452194][ T5349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.509741][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.514365][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.514841][ T6050] bridge_slave_0: entered allmulticast mode [ 101.531029][ T6050] bridge_slave_0: entered promiscuous mode [ 101.551586][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.555021][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.555156][ T6050] bridge_slave_1: entered allmulticast mode [ 101.566124][ T6050] bridge_slave_1: entered promiscuous mode [ 101.603645][ T5349] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.617434][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.617480][ T5349] usb 5-1: Product: syz [ 101.617516][ T5349] usb 5-1: Manufacturer: syz [ 101.617540][ T5349] usb 5-1: SerialNumber: syz [ 101.678366][ T6081] UBIFS error (pid: 6081): cannot open "ubi0_0", error -19 [ 101.690392][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.701887][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.800951][ T6050] team0: Port device team_slave_0 added [ 101.810340][ T6050] team0: Port device team_slave_1 added [ 101.869141][ T6077] ftl_cs: FTL header not found. [ 101.902693][ T4933] Bluetooth: hci6: command tx timeout [ 101.930790][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.930837][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.930887][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.939947][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.939963][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.939993][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.026100][ T6077] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 102.086015][ T6050] hsr_slave_0: entered promiscuous mode [ 102.093759][ T6050] hsr_slave_1: entered promiscuous mode [ 102.100391][ T6050] debugfs: 'hsr0' already exists in 'hsr' [ 102.106252][ T6050] Cannot create hsr debugfs directory [ 102.184783][ T6082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.583600][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 102.586181][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 102.586702][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 102.587756][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 102.588523][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 102.632066][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.803444][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 102.817529][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.817573][ T25] usb 3-1: Product: syz [ 102.817667][ T25] usb 3-1: Manufacturer: syz [ 102.817693][ T25] usb 3-1: SerialNumber: syz [ 102.830818][ T6050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.849031][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.853503][ T6050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.877511][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.881574][ T6050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.901911][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.908760][ T6050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.951322][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.118494][ T25] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 103.163647][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.225531][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.265510][ T6050] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.280798][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.280933][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.315940][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.316081][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.351716][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.495708][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.635549][ T6116] block2mtd: error: cannot open device /dev/loop0 [ 103.645479][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.867362][ T6116] UBIFS error (pid: 6116): cannot open "ubi0_0", error -19 [ 103.983587][ T52] Bluetooth: hci6: command tx timeout [ 104.039674][ T13] bridge_slave_1: left allmulticast mode [ 104.049894][ T13] bridge_slave_1: left promiscuous mode [ 104.065433][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.099603][ T13] bridge_slave_0: left allmulticast mode [ 104.105233][ T13] bridge_slave_0: left promiscuous mode [ 104.105921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.622907][ T52] Bluetooth: hci7: command tx timeout [ 104.793157][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.807632][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.818599][ T13] bond0 (unregistering): Released all slaves [ 104.823649][ T6140] ubi0: attaching mtd0 [ 104.846620][ T6140] ubi0: scanning is finished [ 104.850858][ T6140] ubi0: empty MTD device detected [ 104.863611][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.145843][ T6139] UBIFS error (pid: 6139): cannot open "ubi0_0", error -19 [ 105.160763][ T6140] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 105.160863][ T6140] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 105.160885][ T6140] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 105.160903][ T6140] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 105.160920][ T6140] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 105.160937][ T6140] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 105.160991][ T6140] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2344601058 [ 105.161015][ T6140] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 105.173981][ T6146] ubi0: background thread "ubi_bgt0d" started, PID 6146 [ 105.757654][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.063388][ T52] Bluetooth: hci6: command tx timeout [ 106.162440][ T5744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.326572][ T5744] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 106.328515][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.571441][ T13] hsr_slave_0: left promiscuous mode [ 106.578854][ T13] hsr_slave_1: left promiscuous mode [ 106.580456][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.580486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.585851][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.585872][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.614969][ T13] veth1_macvtap: left promiscuous mode [ 106.615451][ T13] veth0_macvtap: left promiscuous mode [ 106.615657][ T13] veth1_vlan: left promiscuous mode [ 106.615758][ T13] veth0_vlan: left promiscuous mode [ 106.702801][ T52] Bluetooth: hci7: command tx timeout [ 106.889465][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.889982][ T25] dvbdev: DVB: registering new adapter (Realtek RTL2832U reference design) [ 106.890118][ T25] usb 3-1: media controller created [ 106.925888][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.997746][ T13] team0 (unregistering): Port device team_slave_1 removed [ 107.030408][ T13] team0 (unregistering): Port device team_slave_0 removed [ 107.157396][ T25] i2c i2c-1: Added multiplexed i2c bus 2 [ 107.157452][ T25] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 107.161347][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 107.161918][ T25] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 107.286443][ T82] smbdirect: ib_dev[syz1] removed [ 107.418354][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.431300][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.431526][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.431753][ T6092] bridge_slave_0: entered allmulticast mode [ 107.439690][ T5744] ath6kl: Failed to submit usb control message: -110 [ 107.439741][ T5744] ath6kl: unable to send the bmi data to the device: -110 [ 107.439758][ T5744] ath6kl: Unable to send get target info: -110 [ 107.455361][ T6092] bridge_slave_0: entered promiscuous mode [ 107.464394][ T5744] ath6kl: Failed to init ath6kl core: -110 [ 107.472907][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.473042][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.473204][ T6092] bridge_slave_1: entered allmulticast mode [ 107.483744][ T6092] bridge_slave_1: entered promiscuous mode [ 107.504802][ T5744] ath6kl_usb 4-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 107.579119][ T5766] infiniband syz1: ib_query_port failed (-19) [ 107.589270][ T25] usb 3-1: USB disconnect, device number 4 [ 107.596326][ T5744] usb 4-1: USB disconnect, device number 6 [ 107.625895][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 107.625978][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.632187][ T5349] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 107.646933][ T5349] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 107.744250][ T6195] CIFS: Attempting to mount //127.0.0.1/share [ 107.752271][ T6195] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.761403][ T6195] CIFS: VFS: cifs_mount failed w/return code = -111 [ 107.777858][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.809254][ T5349] usb 5-1: USB disconnect, device number 2 [ 107.819612][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.000360][ T6092] team0: Port device team_slave_0 added [ 108.005697][ T6092] team0: Port device team_slave_1 added [ 108.042530][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.076046][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.076087][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.076469][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.079117][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.079133][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.079163][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.154763][ T52] Bluetooth: hci6: command tx timeout [ 108.203011][ T25] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 108.208793][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.208819][ T25] usb 3-1: Product: syz [ 108.208837][ T25] usb 3-1: Manufacturer: syz [ 108.208869][ T25] usb 3-1: SerialNumber: syz [ 108.217351][ T6092] hsr_slave_0: entered promiscuous mode [ 108.219383][ T6092] hsr_slave_1: entered promiscuous mode [ 108.222929][ T6092] debugfs: 'hsr0' already exists in 'hsr' [ 108.222950][ T6092] Cannot create hsr debugfs directory [ 108.266832][ T6050] veth0_vlan: entered promiscuous mode [ 108.331157][ T25] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 108.578634][ T6203] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 108.614998][ T6203] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 108.785466][ T52] Bluetooth: hci7: command tx timeout [ 108.840606][ T6050] veth1_vlan: entered promiscuous mode [ 108.929497][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.938855][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.939913][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.955483][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.966611][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.221063][ T6050] veth0_macvtap: entered promiscuous mode [ 109.319949][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.325191][ T6050] veth1_macvtap: entered promiscuous mode [ 109.346529][ T6226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.526828][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.554946][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.590005][ T6092] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.617024][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.626237][ T6092] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.647293][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.651884][ T6092] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.661696][ T25] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 109.674525][ T6214] ceph: No mds server is up or the cluster is laggy [ 109.679979][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.702697][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.703389][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.703460][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.703511][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715926][ T6092] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.775974][ T6092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.166286][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.166334][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.250436][ T5744] usb 3-1: USB disconnect, device number 5 [ 110.454828][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.454884][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.632866][ T6092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.664814][ T10] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 110.690502][ T10] wiimote 0005:057E:0306.0004: New device registered [ 110.709127][ T6092] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.721532][ T6257] block2mtd: error: cannot open device /dev/loop0 [ 110.745581][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.745737][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.781499][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.781632][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.862570][ T52] Bluetooth: hci7: command tx timeout [ 111.025305][ T52] Bluetooth: hci3: command tx timeout [ 111.149194][ T6257] UBIFS error (ubi0:0 pid 6257): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 111.397169][ T6253] wiimote 0005:057E:0306.0004: Device removed [ 111.675373][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 111.745579][ T10] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 111.845212][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input13 [ 111.880818][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input14 [ 111.901471][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input12 [ 112.292316][ T5757] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.454523][ T5757] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 112.470302][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.704309][ T5757] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 112.812950][ T6272] infiniband syz0: set active [ 112.818488][ T6272] infiniband syz0: added veth0 [ 112.825736][ T6272] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 112.829655][ T6272] infiniband syz0: Couldn't open port 1 [ 112.844679][ T6272] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 112.859915][ T6272] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 112.879249][ T6272] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 112.940271][ T6272] RDS/IB: syz0: added [ 112.956504][ T6272] smc: adding ib device syz0 with port count 1 [ 112.956567][ T6272] smc: ib device syz0 port 1 has no pnetid [ 113.077438][ T6092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.102608][ T52] Bluetooth: hci3: command tx timeout [ 113.202460][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.202590][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.202745][ T6216] bridge_slave_0: entered allmulticast mode [ 113.216909][ T6216] bridge_slave_0: entered promiscuous mode [ 113.227972][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.228084][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.228231][ T6216] bridge_slave_1: entered allmulticast mode [ 113.234702][ T6216] bridge_slave_1: entered promiscuous mode [ 113.381814][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.394868][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.560502][ T6216] team0: Port device team_slave_0 added [ 113.571688][ T6216] team0: Port device team_slave_1 added [ 113.719852][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.719900][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.719930][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.726850][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.726866][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.726995][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.876233][ T6216] hsr_slave_0: entered promiscuous mode [ 113.888218][ T6216] hsr_slave_1: entered promiscuous mode [ 113.890228][ T6216] debugfs: 'hsr0' already exists in 'hsr' [ 113.890249][ T6216] Cannot create hsr debugfs directory [ 114.360957][ T6092] veth0_vlan: entered promiscuous mode [ 114.444816][ T6092] veth1_vlan: entered promiscuous mode [ 114.578734][ T6216] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 114.605552][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.611854][ T6216] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 114.634730][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.636064][ T6216] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 114.655729][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.675382][ T6216] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 114.695907][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.728824][ T6092] veth0_macvtap: entered promiscuous mode [ 114.757745][ T6092] veth1_macvtap: entered promiscuous mode [ 114.846614][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.878846][ T6092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.022898][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.023486][ T3302] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.023942][ T3302] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.024272][ T3302] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.182171][ T52] Bluetooth: hci3: command tx timeout [ 115.228853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.228901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.320813][ T5606] usb 3-1: USB disconnect, device number 6 [ 115.410060][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.443825][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.443871][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.468691][ T6323] exFAT-fs (loop3): unable to read boot sector [ 115.476296][ T6323] exFAT-fs (loop3): failed to read boot sector [ 115.482650][ T6323] exFAT-fs (loop3): failed to recognize exfat type [ 115.520059][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.547657][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.547812][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.600113][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.600246][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.769659][ T6329] CIFS: Attempting to mount //127.0.0.1/share [ 115.804178][ T5606] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.963569][ T5606] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 115.965653][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.242145][ T5606] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 86:21:80:d3:b4:ee [ 116.593100][ T6329] CIFS: VFS: cifs_mount failed w/return code = -112 [ 117.012214][ T5724] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.062539][ T6333] NFSD: Unable to initialize client recovery tracking! (-110) [ 117.064305][ T6333] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 117.064320][ T6333] NFSD: starting 90-second grace period (net f00004f2) [ 117.100196][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.172868][ T5724] usb 8-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 117.185701][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.230512][ T5724] em28xx 8-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 117.241611][ T5724] em28xx 8-1:1.0: Audio interface 0 found (Vendor Class) [ 117.262420][ T52] Bluetooth: hci3: command tx timeout [ 117.640831][ T5724] em28xx 8-1:1.0: unknown em28xx chip ID (0) [ 117.848326][ T5724] em28xx 8-1:1.0: Config register raw data: 0x00 [ 117.872111][ T6367] net1080 3-1:1.0 usb0: port A, peer connected [ 117.919382][ T6377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.263729][ T5724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.423039][ T5724] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 118.439874][ T6216] veth0_vlan: entered promiscuous mode [ 118.446031][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.446060][ T5724] usb 4-1: Product: syz [ 118.446078][ T5724] usb 4-1: Manufacturer: syz [ 118.446131][ T5724] usb 4-1: SerialNumber: syz [ 118.499703][ T6216] veth1_vlan: entered promiscuous mode [ 118.589533][ T6216] veth0_macvtap: entered promiscuous mode [ 118.616300][ T6216] veth1_macvtap: entered promiscuous mode [ 118.656638][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.670363][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.704373][ T5724] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 118.724977][ T552] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.725851][ T82] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.725898][ T82] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.774445][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.956893][ T552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.956947][ T552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.049795][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.049847][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.539401][ T5766] usb 3-1: USB disconnect, device number 7 [ 119.543640][ T5766] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 119.913514][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.075436][ T10] usb 5-1: New USB device found, idVendor=06a2, idProduct=6810, bcdDevice= 0.00 [ 120.085931][ T5766] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.086106][ T10] usb 5-1: config index 0 descriptor too short (expected 34, got 25) [ 120.086270][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 120.086384][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.154902][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:6810 [ 120.274524][ T5766] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 1.00 [ 120.285245][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.594162][ T5757] usb 8-1: USB disconnect, device number 2 [ 120.621859][ T5757] em28xx 8-1:1.0: Disconnecting em28xx [ 120.653782][ T5752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.667365][ T10] gspca_topro: reg_w err -110 [ 120.701523][ T5757] em28xx: Freeing device [ 120.713299][ T10] gspca_topro: Sensor soi763a [ 120.825117][ T5752] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 120.835842][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.887978][ T5752] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 120.902397][ T6424] ubi1: attaching mtd1 [ 120.973499][ T6424] ubi1: scanning is finished [ 120.979531][ T6424] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 121.082255][ T6429] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 121.089975][ T6429] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 121.131644][ T6429] UBIFS error (ubi0:0 pid 6429): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 121.208073][ T6424] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 121.244091][ T6421] ftl_cs: FTL header not found. [ 121.295633][ T552] usb 7-1: Unsupported hardware version: 0x41000168 [ 121.295681][ T552] usb 7-1: could not get hw params (-22) [ 121.295975][ T552] usb 7-1: could not probe fw (-22) [ 121.369756][ T6421] block2mtd: mtd2: [/dev/ram1] erase_size = 64KiB [65536] [ 121.546680][ T5731] usb 3-1: USB disconnect, device number 8 [ 121.597645][ T6440] siw: device registration error -23 [ 122.217826][ T5731] hid_parser_main: 1 callbacks suppressed [ 122.217900][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.217928][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.217948][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.217968][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.217990][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.218013][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.218035][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.218058][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.218081][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.218102][ T5731] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 122.228320][ T5731] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 122.228643][ T5731] wiimote 0005:057E:0306.0005: New device registered [ 122.722206][ T5752] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.872880][ T5752] usb 3-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 1.00 [ 122.885081][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.906288][ T5752] r8152-cfgselector 3-1: Unknown version 0x0000 [ 122.995781][ T6453] wiimote 0005:057E:0306.0005: Device removed [ 123.124169][ T5724] dvb_usb_rtl28xxu 4-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.162180][ T5724] usb 4-1: USB disconnect, device number 7 [ 123.262468][ T5731] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) [ 123.294601][ T5752] r8152-cfgselector 3-1: reset high-speed USB device number 9 using dummy_hcd [ 123.365398][ T10] usb 5-1: USB disconnect, device number 3 [ 123.368352][ T5731] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input16 [ 123.399581][ T5731] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input17 [ 123.451144][ T5731] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input15 [ 123.482482][ T5752] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 123.536339][ T5744] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 123.672342][ T5724] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.695648][ T5744] usb 8-1: not running at top speed; connect to a high speed hub [ 123.695707][ T5744] usb 8-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 123.696918][ T5744] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 123.696953][ T5744] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 123.700417][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.700443][ T5744] usb 8-1: Product: syz [ 123.700461][ T5744] usb 8-1: Manufacturer: syz [ 123.700478][ T5744] usb 8-1: SerialNumber: syz [ 123.708032][ T6482] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 123.708176][ T6482] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 123.726005][ T5752] r8152-cfgselector 3-1: reset high-speed USB device number 9 using dummy_hcd [ 123.875055][ T5724] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 123.891293][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.891341][ T5724] usb 4-1: Product: syz [ 123.891379][ T5724] usb 4-1: Manufacturer: syz [ 123.891404][ T5724] usb 4-1: SerialNumber: syz [ 123.923676][ T5752] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 123.935113][ T6482] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 123.935668][ T6482] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 123.976774][ T5724] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 123.987398][ T5724] usb 4-1: setting power ON [ 124.019826][ T5744] asix 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 124.020136][ T5744] asix 8-1:1.0: probe with driver asix failed with error -61 [ 124.172058][ T5752] r8152-cfgselector 3-1: reset high-speed USB device number 9 using dummy_hcd [ 124.245493][ T5757] usb 8-1: USB disconnect, device number 3 [ 124.320349][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.332396][ T5724] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 124.342062][ T5724] usb 4-1: media controller created [ 124.386496][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.419016][ T5724] usb 4-1: selecting invalid altsetting 6 [ 124.429262][ T5724] usb 4-1: digital interface selection failed (-22) [ 124.437115][ T5724] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 124.447330][ T5724] usb 4-1: setting power OFF [ 124.468597][ T5724] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 124.478735][ T5724] usb 4-1: setting power ON [ 124.675776][ T5744] usb 7-1: USB disconnect, device number 2 [ 125.002061][ T5349] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 125.174111][ T5349] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 125.186011][ T5349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.415539][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.434058][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.479808][ T5724] dvb-usb: bulk message failed: -71 (2/0) [ 126.503035][ T5724] usb 4-1: analog interface selection failed (-71) [ 126.598213][ T5724] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 126.611545][ T5724] dvb_usb_cxusb 4-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 126.632714][ T5724] usb 4-1: USB disconnect, device number 8 [ 126.746502][ T6529] block2mtd: error: cannot open device /dev/loop0 [ 126.859059][ T6529] ubi0 error: ubi_create_volume: volume 0 already exists [ 126.859174][ T6529] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 126.927285][ T6528] UBIFS error (ubi0:0 pid 6528): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 127.502768][ T5724] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.662140][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 127.669821][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.683594][ T5724] usb 4-1: config index 0 descriptor too short (expected 43, got 41) [ 127.691926][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.692878][ T5724] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 127.692975][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.783468][ T5349] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 127.808239][ T5349] usb 8-1: USB disconnect, device number 4 [ 128.232295][ T5349] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 128.384459][ T5349] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 128.393920][ T5349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.393965][ T5349] usb 8-1: Product: syz [ 128.394001][ T5349] usb 8-1: Manufacturer: syz [ 128.394019][ T5349] usb 8-1: SerialNumber: syz [ 128.424668][ T5349] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input18 [ 129.263642][ T5752] r8152-cfgselector 3-1: device descriptor read/8, error -110 [ 129.502342][ T5752] r8152-cfgselector 3-1: reset high-speed USB device number 9 using dummy_hcd [ 129.535416][ T5752] r8152-cfgselector 3-1: device descriptor read/8, error -32 [ 129.657415][ T5752] r8152 3-1:1.0: USB reset failed, errno=-19 [ 129.709060][ T5752] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 129.939730][ T6541] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.955971][ T6541] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.956135][ T6541] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.956165][ T6541] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 130.334007][ T5724] usbhid 4-1:1.0: can't add hid device: -71 [ 130.334142][ T5724] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 130.364464][ T5724] usb 4-1: USB disconnect, device number 9 [ 130.773625][ T5724] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.934111][ T5724] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 1.00 [ 130.948903][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.069521][ T5766] usb 8-1: USB disconnect, device number 5 [ 131.132511][ T5752] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.292722][ T5752] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.316179][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.326405][ T5752] usb 5-1: Product: syz [ 131.326461][ T5752] usb 5-1: Manufacturer: syz [ 131.326486][ T5752] usb 5-1: SerialNumber: syz [ 131.484433][ T5724] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.542164][ T5766] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 131.696047][ T5766] usb 8-1: not running at top speed; connect to a high speed hub [ 131.696160][ T5766] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 131.725478][ T5766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.725529][ T5766] usb 8-1: Product: syz [ 131.725620][ T5766] usb 8-1: Manufacturer: syz [ 131.725647][ T5766] usb 8-1: SerialNumber: syz [ 131.783464][ T5766] gspca_main: spca501-2.14.0 probing 0000:0000 [ 132.154799][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.154920][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882481][ T5766] gspca_spca501: reg write: error -110 [ 132.888194][ T5766] spca501 8-1:1.0: Reg write failed for 0x01,0x16,0x11 [ 132.896076][ T5766] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 132.909879][ T5766] uvcvideo 8-1:1.0: Found UVC 1.00 device syz (0000:0000) [ 132.924499][ T5766] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.935413][ T5766] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 132.944956][ T5766] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 132.972243][ T5766] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -5 [ 133.518641][ T5752] usb 4-1: USB disconnect, device number 10 [ 133.657871][ T5766] usb 8-1: USB disconnect, device number 6 [ 134.095684][ T6615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.266829][ T6617] rdma_rxe: rxe_newlink: failed to add lo [ 134.704499][ T5724] usb 5-1: Service connection timeout for: 262 [ 134.711096][ T5724] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 134.749727][ T5724] ath9k_htc: Failed to initialize the device [ 134.770420][ T5724] usb 5-1: ath9k_htc: USB layer deinitialized [ 134.899290][ T5766] usb 5-1: USB disconnect, device number 4 [ 135.307213][ T6629] kAFS: unable to lookup cell '127.0.0.1' [ 135.466851][ T4933] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 135.479720][ T4933] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 135.487262][ T4933] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 135.501618][ T4933] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 135.515277][ T4933] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 135.633490][ T5766] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.784392][ T5766] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 135.786570][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.810127][ ** replaying previous printk message ** [ 135.810127][ T6645] ================================================================== [ 135.810148][ T6645] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x6a/0x130 [ 135.810183][ T6645] Read of size 8 at addr ffffc90003c67930 by task syz.4.106/6645 [ 135.810203][ T6645] [ 135.810215][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT(full) [ 135.810243][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 135.810257][ T6645] Call Trace: [ 135.810267][ T6645] [ 135.810277][ T6645] dump_stack_lvl+0xe8/0x150 [ 135.810314][ T6645] print_address_description+0x55/0x1e0 [ 135.810352][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 135.810378][ T6645] print_report+0x58/0x70 [ 135.810408][ T6645] kasan_report+0x117/0x150 [ 135.810440][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 135.810471][ T6645] __list_add_valid_or_report+0x6a/0x130 [ 135.810499][ T6645] rpc_queue_upcall+0x86/0x320 [ 135.810539][ T6645] nfsd4_cld_tracking_init+0xd85/0x13a0 [ 135.810577][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.810612][ T6645] ? __pfx_nfsd4_cld_tracking_init+0x10/0x10 [ 135.810656][ T6645] ? net_generic+0x1e/0x240 [ 135.810693][ T6645] ? net_generic+0x1e/0x240 [ 135.810725][ T6645] ? net_generic+0x1e/0x240 [ 135.810757][ T6645] ? net_generic+0x1e/0x240 [ 135.810796][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.810828][ T6645] nfsd4_client_tracking_init+0xca/0x1c0 [ 135.810865][ T6645] nfs4_state_start_net+0xc95/0x1180 [ 135.810899][ T6645] nfsd_svc+0x481/0x710 [ 135.810926][ T6645] write_threads+0x434/0x610 [ 135.810958][ T6645] ? __pfx_write_threads+0x10/0x10 [ 135.810992][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.811027][ T6645] ? _copy_from_user+0x94/0xb0 [ 135.811054][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.811083][ T6645] ? simple_transaction_get+0x12d/0x160 [ 135.811119][ T6645] nfsctl_transaction_write+0x10f/0x160 [ 135.811150][ T6645] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 135.811181][ T6645] vfs_write+0x296/0xba0 [ 135.811222][ T6645] ? __pfx_vfs_write+0x10/0x10 [ 135.811258][ T6645] ? __fget_files+0x2a/0x420 [ 135.811292][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.811321][ T6645] ? __fget_files+0x3a2/0x420 [ 135.811353][ T6645] ? __fget_files+0x2a/0x420 [ 135.811387][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.811419][ T6645] ksys_write+0x150/0x270 [ 135.811456][ T6645] ? __pfx_ksys_write+0x10/0x10 [ 135.811499][ T6645] do_syscall_64+0x166/0x520 [ 135.811536][ T6645] ? trace_irq_disable+0x3b/0x140 [ 135.811561][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.811590][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.811615][ T6645] RIP: 0033:0x7f50b1d9e159 [ 135.811636][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.811657][ T6645] RSP: 002b:00007f50b2ce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.811683][ T6645] RAX: ffffffffffffffda RBX: 00007f50b2026090 RCX: 00007f50b1d9e159 [ 135.811702][ T6645] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000005 [ 135.811718][ T6645] RBP: 00007f50b1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 135.811734][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.811750][ T6645] R13: 00007f50b2026128 R14: 00007f50b2026090 R15: 00007ffcc5c17248 [ 135.811779][ T6645] [ 135.811798][ T6645] [ 135.811805][ T6645] The buggy address belongs to stack of task syz.4.106/6645 [ 135.811818][ T6645] and is located at offset 112 in frame: [ 135.811829][ T6645] nfsd4_cld_tracking_init+0x0/0x13a0 [ 135.811863][ T6645] [ 135.811869][ T6645] This frame has 2 objects: [ 135.811881][ T6645] [32, 80) 'msg.i.i.i50' [ 135.811895][ T6645] [112, 160) 'msg.i.i.i' [ 135.811907][ T6645] [ 135.811915][ T6645] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003c60000 allocated at copy_process+0x820/0x43e0 [ 135.811967][ T6645] The buggy address belongs to the physical page: [ 135.811977][ T6645] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89b6f [ 135.811998][ T6645] memcg:ffff88802a48c882 [ 135.812009][ T6645] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.812038][ T6645] raw: 00fff00000000000 0000000000000000 ffffea000226dbc8 0000000000000000 [ 135.812060][ T6645] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88802a48c882 [ 135.812073][ T6645] page dumped because: kasan: bad access detected [ 135.812084][ T6645] page_owner tracks the page as allocated [ 135.812093][ T6645] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 6642, tgid 6642 (syz.4.106), ts 135646602440 [ 135.812129][ T6645] post_alloc_hook+0x1f9/0x250 [ 135.812163][ T6645] get_page_from_freelist+0x2209/0x2280 [ 135.812186][ T6645] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 135.812209][ T6645] alloc_pages_mpol+0x21e/0x390 [ 135.812236][ T6645] alloc_pages_noprof+0xb1/0x2b0 [ 135.812263][ T6645] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 135.812296][ T6645] __vmalloc_node_noprof+0xc2/0x100 [ 135.812328][ T6645] dup_task_struct+0x2c6/0xa00 [ 135.812357][ T6645] copy_process+0x820/0x43e0 [ 135.812386][ T6645] kernel_clone+0x2d7/0x940 [ 135.812417][ T6645] __se_sys_clone3+0x33c/0x360 [ 135.812450][ T6645] do_syscall_64+0x166/0x520 [ 135.812484][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.812508][ T6645] page last free pid 6050 tgid 6050 ts 135618725119 stack trace: [ 135.812524][ T6645] __free_frozen_pages+0xc93/0xd90 [ 135.812558][ T6645] __slab_free+0x274/0x2c0 [ 135.812578][ T6645] qlist_free_all+0x99/0x100 [ 135.812598][ T6645] kasan_quarantine_reduce+0x148/0x160 [ 135.812635][ T6645] __kasan_slab_alloc+0x22/0x80 [ 135.812659][ T6645] kmem_cache_alloc_noprof+0x2b9/0x600 [ 135.812693][ T6645] do_getname+0x2e/0x250 [ 135.812718][ T6645] __se_sys_unlink+0x1e/0x140 [ 135.812742][ T6645] do_syscall_64+0x166/0x520 [ 135.812776][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.812805][ T6645] [ 135.812811][ T6645] Memory state around the buggy address: [ 135.812824][ T6645] ffffc90003c67800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.812840][ T6645] ffffc90003c67880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 135.812856][ T6645] >ffffc90003c67900: 00 00 f2 f2 f2 f2 f8 f8 f8 f8 f8 f8 f3 f3 f3 f3 [ 135.812869][ T6645] ^ [ 135.812882][ T6645] ffffc90003c67980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.812898][ T6645] ffffc90003c67a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.812911][ T6645] ================================================================== [ 135.813721][ T6645] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.464315][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT(full) [ 136.473507][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 136.483549][ T6645] Call Trace: [ 136.486816][ T6645] [ 136.489733][ T6645] vpanic+0x56d/0xa60 [ 136.493725][ T6645] ? __pfx_vpanic+0x10/0x10 [ 136.498236][ T6645] panic+0xc5/0xd0 [ 136.501958][ T6645] ? __pfx_panic+0x10/0x10 [ 136.506377][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 136.512182][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 136.517982][ T6645] check_panic_on_warn+0x89/0xb0 [ 136.522914][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 136.528714][ T6645] end_report+0x73/0x170 [ 136.532952][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 136.538750][ T6645] kasan_report+0x128/0x150 [ 136.543256][ T6645] ? __list_add_valid_or_report+0x6a/0x130 [ 136.549077][ T6645] __list_add_valid_or_report+0x6a/0x130 [ 136.554702][ T6645] rpc_queue_upcall+0x86/0x320 [ 136.559471][ T6645] nfsd4_cld_tracking_init+0xd85/0x13a0 [ 136.565018][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.570652][ T6645] ? __pfx_nfsd4_cld_tracking_init+0x10/0x10 [ 136.576633][ T6645] ? net_generic+0x1e/0x240 [ 136.581140][ T6645] ? net_generic+0x1e/0x240 [ 136.585644][ T6645] ? net_generic+0x1e/0x240 [ 136.590146][ T6645] ? net_generic+0x1e/0x240 [ 136.594648][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.600276][ T6645] nfsd4_client_tracking_init+0xca/0x1c0 [ 136.605915][ T6645] nfs4_state_start_net+0xc95/0x1180 [ 136.611199][ T6645] nfsd_svc+0x481/0x710 [ 136.615348][ T6645] write_threads+0x434/0x610 [ 136.619936][ T6645] ? __pfx_write_threads+0x10/0x10 [ 136.625045][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.630680][ T6645] ? _copy_from_user+0x94/0xb0 [ 136.635440][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.641074][ T6645] ? simple_transaction_get+0x12d/0x160 [ 136.646625][ T6645] nfsctl_transaction_write+0x10f/0x160 [ 136.652171][ T6645] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 136.658236][ T6645] vfs_write+0x296/0xba0 [ 136.662486][ T6645] ? __pfx_vfs_write+0x10/0x10 [ 136.667253][ T6645] ? __fget_files+0x2a/0x420 [ 136.671845][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.677481][ T6645] ? __fget_files+0x3a2/0x420 [ 136.682168][ T6645] ? __fget_files+0x2a/0x420 [ 136.686761][ T6645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.692392][ T6645] ksys_write+0x150/0x270 [ 136.696726][ T6645] ? __pfx_ksys_write+0x10/0x10 [ 136.701584][ T6645] do_syscall_64+0x166/0x520 [ 136.706178][ T6645] ? trace_irq_disable+0x3b/0x140 [ 136.711194][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.717255][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.723142][ T6645] RIP: 0033:0x7f50b1d9e159 [ 136.727555][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.747151][ T6645] RSP: 002b:00007f50b2ce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.755559][ T6645] RAX: ffffffffffffffda RBX: 00007f50b2026090 RCX: 00007f50b1d9e159 [ 136.763519][ T6645] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000005 [ 136.771477][ T6645] RBP: 00007f50b1e35024 R08: 0000000000000000 R09: 0000000000000000 [ 136.779434][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.787394][ T6645] R13: 00007f50b2026128 R14: 00007f50b2026090 R15: 00007ffcc5c17248 [ 136.795369][ T6645] [ 136.798593][ T6645] Kernel Offset: disabled [ 136.802906][ T6645] Rebooting in 86400 seconds..