last executing test programs: 17.46827771s ago: executing program 5 (id=6): syz_usb_connect(0x5, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000500)) 9.60243072s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/gve0\x00', 0x0, 0x0) 9.459301292s ago: executing program 1 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='r8a66597_udc\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/r8a66597_udc\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='pcspkr\x00', 0x7) 9.023146289s ago: executing program 1 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices\x00', 0x0, 0x0) 8.611443784s ago: executing program 1 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='4\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) 7.817995681s ago: executing program 1 (id=59): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.591421239s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) 6.023371512s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) 5.932840843s ago: executing program 3 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/perf_event_msr\x00', 0x0, 0x0) 5.726596401s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/ath11k\x00', 0x0, 0x0) 5.548324722s ago: executing program 3 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='4\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) 5.547669275s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.400465016s ago: executing program 3 (id=73): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)={0x2, 0x0, 0x12, "12000000112233445500000000dc05000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 5.195271672s ago: executing program 0 (id=75): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000100)}) 3.801405347s ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/sas_host\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1024, 0x400) 3.706062928s ago: executing program 4 (id=83): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1012}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00112233445500aabbccddee86dd600000000048044020010db800000000000000000000000120010db80000000000000000000000024500004800004000400626ae0a0000010a00000204d20050000003e800000001501004008ea700"/126], 0x7e) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00112233445500aabbccddee86dd600000000048044020010db800000000000000000000000120010db80000000000000000000000024500004800004000400626ae0a0000010a00000204d200500000040800000001501804008e7f00"/126], 0x7e) close(r0) 3.660118135s ago: executing program 3 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/100, 0x64) close(r0) 3.52853755s ago: executing program 2 (id=86): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='2\n', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='3\n', 0x2) close(r9) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) nanosleep(&(0x7f0000000680)={0x1}, 0x0) 3.425132681s ago: executing program 4 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/0000:00:01.0\x00', 0x0, 0x0) 3.287739328s ago: executing program 4 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 3.250890563s ago: executing program 4 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='7\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000801000)) clock_gettime(0x0, &(0x7f0000a00000)) clock_gettime(0x0, &(0x7f0000a01000)) madvise(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='+ 1 0 1 1 0\n', 0xc) write(r1, &(0x7f0000000280)='+ 1 0 2 1 0\n', 0xc) write(r1, &(0x7f00000002c0)='+ 1 0 3 1 0\n', 0xc) write(r1, &(0x7f0000000300)='+ 1 0 4 1 0\n', 0xc) write(r1, &(0x7f0000000340)='+ 1 0 5 1 0\n', 0xc) write(r1, &(0x7f0000000380)='+ 1 0 6 1 0\n', 0xc) write(r1, &(0x7f0000000400)='+ 1 0 8 1 0\n', 0xc) write(r1, &(0x7f0000000440)='+ 0 0 1 1 0\n', 0xc) write(r1, &(0x7f0000000480)='+ 0 0 2 1 0\n', 0xc) write(r1, &(0x7f0000000500)='+ 0 0 4 1 0\n', 0xc) write(r1, &(0x7f0000000540)='+ 0 0 5 1 0\n', 0xc) write(r1, &(0x7f0000000600)='+ 1 0 3 60 0\n', 0xd) write(r1, &(0x7f0000000640)='+ 1 0 4 60 0\n', 0xd) write(r1, &(0x7f00000006c0)='+ 1 0 6 60 0\n', 0xd) 2.590549721s ago: executing program 4 (id=90): syz_usb_connect(0x3, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040801b09e30001000000010902200001010080fa0904000001ff00000007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.532288925s ago: executing program 2 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/72) ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") ioctl(r5, 0x400c0930, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) 2.264108414s ago: executing program 2 (id=92): readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', &(0x7f0000000100), 0x100) 2.20705633s ago: executing program 32 (id=6): syz_usb_connect(0x5, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000500)) 2.093225839s ago: executing program 0 (id=94): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r0, &(0x7f0000000100)='hello\n\x00', 0x6) 1.972189595s ago: executing program 2 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364657600") ioctl(r0, 0xc138fd00, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364657600") read(r0, &(0x7f0000000300)=""/312, 0x138) 1.916098298s ago: executing program 2 (id=96): syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201900301"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x1}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 1.590811404s ago: executing program 0 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) 1.252780673s ago: executing program 0 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='4\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='64\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) 921.587483ms ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='+3 -4\n', 0x6) close(r0) 0s ago: executing program 2 (id=100): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402a1101000001010200010902270001010080320904000003ff000000070582024000000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000400)="0080002000"/16) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000500)='\x00'/16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 86.245341][ T1213] cfg80211: failed to load regulatory.db [ 87.486214][ T5599] cgroup: Unknown subsys name 'net' [ 87.586541][ T5599] cgroup: Unknown subsys name 'cpuset' [ 87.597408][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.246465][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.827762][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.838619][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.842790][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.864028][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.881179][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.883139][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.883413][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.884208][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.884733][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.889246][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.889803][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.898596][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.899116][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.899597][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.899908][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.902118][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.907547][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.907690][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.907821][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.908191][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.916589][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.950907][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.951325][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.960097][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.965056][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.965616][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.966734][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.967815][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.978116][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.999968][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.961761][ T5619] Bluetooth: hci3: command tx timeout [ 95.040886][ T5619] Bluetooth: hci5: command tx timeout [ 95.041064][ T5619] Bluetooth: hci1: command tx timeout [ 95.041154][ T5626] Bluetooth: hci2: command tx timeout [ 95.041271][ T5619] Bluetooth: hci0: command tx timeout [ 95.121475][ T52] Bluetooth: hci4: command tx timeout [ 95.801036][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.801157][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.801325][ T5613] bridge_slave_0: entered allmulticast mode [ 95.803668][ T5613] bridge_slave_0: entered promiscuous mode [ 95.837766][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.837917][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.838148][ T5616] bridge_slave_0: entered allmulticast mode [ 95.848117][ T5616] bridge_slave_0: entered promiscuous mode [ 95.915817][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.915990][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.916128][ T5613] bridge_slave_1: entered allmulticast mode [ 95.918431][ T5613] bridge_slave_1: entered promiscuous mode [ 95.959606][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.959724][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.960180][ T5616] bridge_slave_1: entered allmulticast mode [ 95.963205][ T5616] bridge_slave_1: entered promiscuous mode [ 95.964985][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.965153][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.965669][ T5614] bridge_slave_0: entered allmulticast mode [ 95.968114][ T5614] bridge_slave_0: entered promiscuous mode [ 96.070143][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.070264][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.070721][ T5614] bridge_slave_1: entered allmulticast mode [ 96.072951][ T5614] bridge_slave_1: entered promiscuous mode [ 96.202368][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.205458][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.223595][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.223783][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.223945][ T5611] bridge_slave_0: entered allmulticast mode [ 96.226363][ T5611] bridge_slave_0: entered promiscuous mode [ 96.245453][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.285561][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.288447][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.306310][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.306440][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.306595][ T5611] bridge_slave_1: entered allmulticast mode [ 96.309753][ T5611] bridge_slave_1: entered promiscuous mode [ 96.334030][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.349478][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.349598][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.349744][ T5612] bridge_slave_0: entered allmulticast mode [ 96.352973][ T5612] bridge_slave_0: entered promiscuous mode [ 96.429328][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.429475][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.429628][ T5612] bridge_slave_1: entered allmulticast mode [ 96.432739][ T5612] bridge_slave_1: entered promiscuous mode [ 96.434801][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.434933][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.435368][ T5615] bridge_slave_0: entered allmulticast mode [ 96.438856][ T5615] bridge_slave_0: entered promiscuous mode [ 96.467366][ T5616] team0: Port device team_slave_0 added [ 96.477177][ T5616] team0: Port device team_slave_1 added [ 96.500698][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.515246][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.515368][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.516420][ T5615] bridge_slave_1: entered allmulticast mode [ 96.518995][ T5615] bridge_slave_1: entered promiscuous mode [ 96.541395][ T5613] team0: Port device team_slave_0 added [ 96.546172][ T5614] team0: Port device team_slave_0 added [ 96.569086][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.599741][ T5613] team0: Port device team_slave_1 added [ 96.603005][ T5614] team0: Port device team_slave_1 added [ 96.604444][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.604466][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.604509][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.630831][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.635824][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.656576][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.656602][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.656646][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.699309][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.702918][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.777956][ T5611] team0: Port device team_slave_0 added [ 96.807228][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.807255][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.807303][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.810515][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.810645][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.810695][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.813032][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.813077][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.813120][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.817635][ T5611] team0: Port device team_slave_1 added [ 96.839473][ T5615] team0: Port device team_slave_0 added [ 96.859565][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.859594][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.859639][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.929587][ T5612] team0: Port device team_slave_0 added [ 96.936480][ T5615] team0: Port device team_slave_1 added [ 97.004106][ T5612] team0: Port device team_slave_1 added [ 97.041378][ T52] Bluetooth: hci3: command tx timeout [ 97.051238][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.051262][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.051314][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.098713][ T5616] hsr_slave_0: entered promiscuous mode [ 97.100016][ T5616] hsr_slave_1: entered promiscuous mode [ 97.118747][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.118771][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.118819][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.121254][ T5626] Bluetooth: hci2: command tx timeout [ 97.121295][ T5626] Bluetooth: hci1: command tx timeout [ 97.121336][ T5626] Bluetooth: hci5: command tx timeout [ 97.121533][ T52] Bluetooth: hci0: command tx timeout [ 97.139713][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.139741][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.139786][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.166653][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.166681][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.166726][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.186684][ T5614] hsr_slave_0: entered promiscuous mode [ 97.188708][ T5614] hsr_slave_1: entered promiscuous mode [ 97.189759][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 97.189860][ T5614] Cannot create hsr debugfs directory [ 97.198890][ T5613] hsr_slave_0: entered promiscuous mode [ 97.200085][ T5613] hsr_slave_1: entered promiscuous mode [ 97.212850][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 97.212886][ T5613] Cannot create hsr debugfs directory [ 97.214578][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.214600][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.214645][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.221915][ T52] Bluetooth: hci4: command tx timeout [ 97.261936][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.261965][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.262009][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.621032][ T5615] hsr_slave_0: entered promiscuous mode [ 97.621954][ T5615] hsr_slave_1: entered promiscuous mode [ 97.622618][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 97.622647][ T5615] Cannot create hsr debugfs directory [ 97.663442][ T5611] hsr_slave_0: entered promiscuous mode [ 97.664421][ T5611] hsr_slave_1: entered promiscuous mode [ 97.665074][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 97.665103][ T5611] Cannot create hsr debugfs directory [ 97.735944][ T5612] hsr_slave_0: entered promiscuous mode [ 97.736899][ T5612] hsr_slave_1: entered promiscuous mode [ 97.737555][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 97.737585][ T5612] Cannot create hsr debugfs directory [ 98.367835][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.381883][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.391748][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.404082][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.406426][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.418425][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.437287][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.442917][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.509214][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.524753][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.529777][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.545711][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.546866][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.556436][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.565147][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.576645][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.685369][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.696269][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.709877][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.722379][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.729737][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.750803][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.767859][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.779527][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.870163][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.882187][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.899366][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.908090][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.920268][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.934066][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.959275][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.972166][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.021979][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.079327][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.093626][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.095214][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.100320][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.125739][ T52] Bluetooth: hci3: command tx timeout [ 99.126338][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.137810][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.155742][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.160220][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.189190][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.202217][ T5619] Bluetooth: hci5: command tx timeout [ 99.202258][ T5619] Bluetooth: hci1: command tx timeout [ 99.202292][ T5619] Bluetooth: hci2: command tx timeout [ 99.202481][ T52] Bluetooth: hci0: command tx timeout [ 99.232020][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.281157][ T52] Bluetooth: hci4: command tx timeout [ 99.305755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.305892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.334824][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.369423][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.369541][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.408243][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.417124][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.419925][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.431779][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.438254][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.438379][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.459552][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.466945][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.495083][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.499808][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.514870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.514997][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.583921][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.687873][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.760354][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.760484][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.804530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.804669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.828994][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.927504][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.996511][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.088577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.088706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.122457][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.142577][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.159081][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.159208][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.205196][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.205395][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.246106][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.246258][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.284554][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.530956][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.582205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.582336][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.676525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.676655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.201086][ T52] Bluetooth: hci3: command tx timeout [ 101.282060][ T52] Bluetooth: hci0: command tx timeout [ 101.282106][ T52] Bluetooth: hci2: command tx timeout [ 101.282140][ T52] Bluetooth: hci1: command tx timeout [ 101.282172][ T52] Bluetooth: hci5: command tx timeout [ 101.361944][ T5626] Bluetooth: hci4: command tx timeout [ 101.391181][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.437599][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.778384][ T5616] veth0_vlan: entered promiscuous mode [ 101.820193][ T5616] veth1_vlan: entered promiscuous mode [ 102.015758][ T5616] veth0_macvtap: entered promiscuous mode [ 102.064459][ T5616] veth1_macvtap: entered promiscuous mode [ 102.093625][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.234426][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.279006][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.407548][ T116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.485272][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.501745][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.552938][ T3283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.627078][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.657578][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.733893][ T5614] veth0_vlan: entered promiscuous mode [ 102.886225][ T5614] veth1_vlan: entered promiscuous mode [ 102.937799][ T5613] veth0_vlan: entered promiscuous mode [ 102.997777][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.001057][ T5613] veth1_vlan: entered promiscuous mode [ 103.014244][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.014275][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.145043][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.145077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.205038][ T5611] veth0_vlan: entered promiscuous mode [ 103.221936][ T5614] veth0_macvtap: entered promiscuous mode [ 103.262101][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.264032][ T5614] veth1_macvtap: entered promiscuous mode [ 103.267541][ T5611] veth1_vlan: entered promiscuous mode [ 103.307257][ T5613] veth0_macvtap: entered promiscuous mode [ 103.374958][ T5613] veth1_macvtap: entered promiscuous mode [ 103.429393][ T5612] veth0_vlan: entered promiscuous mode [ 103.443519][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.453297][ T5615] veth0_vlan: entered promiscuous mode [ 103.484227][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.536879][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.539185][ T5615] veth1_vlan: entered promiscuous mode [ 103.557133][ T5612] veth1_vlan: entered promiscuous mode [ 103.575003][ T5611] veth0_macvtap: entered promiscuous mode [ 103.579844][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.591864][ T769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.594011][ T769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.594436][ T769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.601841][ T5611] veth1_macvtap: entered promiscuous mode [ 103.673497][ T3283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.674567][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.674633][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.674695][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.674757][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.780513][ T5615] veth0_macvtap: entered promiscuous mode [ 103.818588][ T5612] veth0_macvtap: entered promiscuous mode [ 103.831460][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.851114][ T5615] veth1_macvtap: entered promiscuous mode [ 103.861470][ T5612] veth1_macvtap: entered promiscuous mode [ 103.903396][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.927891][ T769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.927925][ T769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.991631][ T116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.996098][ T3283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.996127][ T3283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.050311][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.074404][ T3283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.074477][ T3283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.117335][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.117874][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.117902][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.162196][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.218894][ T3283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.218927][ T3283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.228614][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.396958][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.397032][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.397093][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.397154][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.398291][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.398326][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.511564][ T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.583746][ T5852] svc: failed to register lockdv1 RPC service (errno 111). [ 104.583988][ T5852] lockd_up: makesock failed, error=-111 [ 104.653434][ T769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.656596][ T3283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.656663][ T3283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.656724][ T3283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.698480][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.698513][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.938766][ T5858] ptp ptp0: new virtual clock ptp1 [ 104.938803][ T5858] ptp ptp0: guarantee physical clock free running [ 105.031595][ T5852] svc: failed to register nfsdv3 RPC service (errno 111). [ 105.038732][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.038762][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.047651][ T5852] svc: failed to register nfsaclv3 RPC service (errno 512). [ 105.047680][ T5852] failed to unregister tcp with rpcbind [ 105.048519][ T5852] svc: failed to register nfsdv3 RPC service (errno 97). [ 105.048547][ T5852] svc: failed to register nfsaclv3 RPC service (errno 97). [ 105.048570][ T5852] failed to unregister tcp with rpcbind [ 105.189828][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.189863][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.388191][ T5875] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 105.465477][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.465512][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.568201][ T5871] svc: failed to register lockdv1 RPC service (errno 111). [ 105.789238][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.789275][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.857422][ T5871] svc: failed to register nfsdv3 RPC service (errno 111). [ 105.859636][ T5871] svc: failed to register nfsaclv3 RPC service (errno 111). [ 105.859664][ T5871] failed to unregister tcp with rpcbind [ 105.859874][ T5871] svc: failed to register nfsdv3 RPC service (errno 97). [ 105.859901][ T5871] svc: failed to register nfsaclv3 RPC service (errno 97). [ 105.859924][ T5871] failed to unregister tcp with rpcbind [ 106.332302][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.335308][ T5883] svc: failed to register lockdv1 RPC service (errno 111). [ 106.496039][ T5847] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 106.517777][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.517812][ T5847] usb 1-1: Product: syz [ 106.517831][ T5847] usb 1-1: Manufacturer: syz [ 106.517851][ T5847] usb 1-1: SerialNumber: syz [ 106.545342][ T5618] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.585994][ T5883] svc: failed to register nfsdv3 RPC service (errno 512). [ 106.586265][ T5883] svc: failed to register nfsaclv3 RPC service (errno 512). [ 106.586291][ T5883] failed to unregister udp with rpcbind [ 106.590294][ T5883] svc: failed to register nfsdv3 RPC service (errno 97). [ 106.590330][ T5883] svc: failed to register nfsaclv3 RPC service (errno 97). [ 106.590351][ T5883] failed to unregister udp with rpcbind [ 106.653472][ T5847] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 106.734828][ T5618] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 0.00 [ 106.738385][ T5618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.776190][ T5618] usbtest 6-1:1.0: Linux user mode test driver [ 106.776227][ T5618] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 107.107873][ T5897] NFSD: Failed to start, no listeners configured. [ 107.143460][ T5904] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 107.165854][ T3283] maxtcpc 0-0022: error -EIO: Failed to read TCPC_POWER_STATUS [ 107.177591][ T3283] maxtcpc 0-0022: probe with driver maxtcpc failed with error -5 [ 107.326505][ T5912] lo speed is unknown, defaulting to 1000 [ 107.355198][ T5912] lo speed is unknown, defaulting to 1000 [ 107.415030][ T5912] lo speed is unknown, defaulting to 1000 [ 107.663894][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.812165][ T5846] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 107.815875][ T5846] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 107.815991][ T5846] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.818936][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 107.819004][ T5846] usb 5-1: Product: syz [ 107.819031][ T5846] usb 5-1: Manufacturer: syz [ 107.931419][ T5846] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 107.954678][ T5736] lo speed is unknown, defaulting to 1000 [ 107.955299][ T5912] infiniband syz0: set active [ 107.955320][ T5912] infiniband syz0: added lo [ 107.999701][ T5912] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 107.999772][ T5912] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 107.999851][ T5912] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 108.075305][ T5912] RDS/IB: syz0: added [ 108.075894][ T5912] smc: adding ib device syz0 with port count 1 [ 108.076031][ T5912] smc: ib device syz0 port 1 has no pnetid [ 108.078136][ T5744] lo speed is unknown, defaulting to 1000 [ 108.098114][ T5912] lo speed is unknown, defaulting to 1000 [ 108.428855][ T5912] lo speed is unknown, defaulting to 1000 [ 108.670946][ T5908] NFSD: Unable to initialize client recovery tracking! (-110) [ 108.671015][ T5908] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 108.671034][ T5908] NFSD: starting 90-second grace period (net f0000576) [ 108.712388][ T5912] lo speed is unknown, defaulting to 1000 [ 108.965473][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -110) [ 108.966274][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -32) [ 108.992148][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -32) [ 109.003567][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -32) [ 109.007134][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -32) [ 109.007827][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -32) [ 109.010366][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -32) [ 109.021037][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -32) [ 109.055747][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -32) [ 109.077526][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -32) [ 109.080432][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -32) [ 109.100871][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -32) [ 109.111286][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -32) [ 109.111927][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -32) [ 109.112371][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -32) [ 109.112839][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -32) [ 109.113309][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -32) [ 109.113780][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -32) [ 109.114341][ T5846] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -32) [ 109.192784][ T5846] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 109.241968][ T5846] usb 5-1: USB disconnect, device number 2 [ 109.277701][ T5922] CacheFiles: Failed to register: -95 [ 109.294440][ T2351] pvrusb2: Failed to submit write-control URB status=-2 [ 109.325832][ T5847] usb 1-1: USB disconnect, device number 2 [ 109.353748][ T2351] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 109.353790][ T2351] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 109.539643][ T5912] lo speed is unknown, defaulting to 1000 [ 109.775189][ T5932] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99) [ 109.878863][ T5932] nvme nvme0: rdma connection establishment failed (-104) [ 110.108844][ T5912] lo speed is unknown, defaulting to 1000 [ 110.406087][ T5912] lo speed is unknown, defaulting to 1000 [ 110.646422][ T5927] rdma_rxe: rxe_newlink: failed to add dummy0 [ 110.657393][ T5931] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.657459][ T5931] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.657539][ T5931] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.707626][ T5931] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.740046][ T5931] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.933519][ T5618] libceph: mon0 (1)[::1]:6789 socket error on write [ 110.959996][ T5618] libceph: mon0 (1)[::1]:6789 socket error on write [ 111.160757][ T5936] NFSD: Unable to initialize client recovery tracking! (-110) [ 111.160784][ T5936] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 111.160806][ T5936] NFSD: starting 90-second grace period (net f00004ec) [ 111.161317][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.224267][ T5618] libceph: mon0 (1)[::1]:6789 socket error on write [ 111.505552][ T5613] svc: failed to register nfsdv3 RPC service (errno 111). [ 111.506974][ T5613] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.506999][ T5613] failed to unregister tcp with rpcbind [ 111.507279][ T5613] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.507306][ T5613] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.507347][ T5613] failed to unregister tcp with rpcbind [ 111.528342][ T5618] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.694236][ T5618] usb 4-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 111.696603][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.727610][ T5943] ceph: No mds server is up or the cluster is laggy [ 111.738777][ T5736] libceph: mon0 (1)[::1]:6789 socket error on write [ 111.821278][ T5736] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 111.823091][ T5736] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 112.050424][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.093525][ T5846] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 112.310757][ T5736] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.471785][ T5736] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 112.473395][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.602403][ T5846] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 112.603318][ T5618] aiptek 4-1:1.0: Aiptek using 400 ms programming speed [ 112.625400][ T5618] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 112.638394][ T5960] ceph: No mds server is up or the cluster is laggy [ 112.920251][ T5972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.936005][ T5973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.939230][ T5973] block device autoloading is deprecated and will be removed. [ 113.107469][ T5618] usb 4-1: USB disconnect, device number 2 [ 113.107575][ C0] aiptek 4-1:1.0: aiptek_irq - usb_submit_urb failed with result -19 [ 113.108890][ T5978] loop0: detected capacity change from 0 to 262144 [ 113.181944][ T5978] loop1: detected capacity change from 0 to 262144 [ 113.205049][ T5978] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.633829][ T5980] md/raid1:md0: active with 2 out of 2 mirrors [ 113.638151][ T5980] md0: detected capacity change from 0 to 262144 [ 113.825348][ T5993] o2cb: This node has not been configured. [ 113.825364][ T5993] o2cb: Cluster check failed. Fix errors before retrying. [ 113.825396][ T5993] (syz.3.45,5993,1):user_dlm_register:674 ERROR: status = -22 [ 113.825428][ T5993] (syz.3.45,5993,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 113.892339][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 113.894108][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 113.894527][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 114.111154][ T31] audit: type=1804 audit(1789441482.613:2): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.46" name="/newroot/6/nfsd/versions" dev="nfsd" ino=12 res=1 errno=0 [ 114.256386][ T6000] i2c i2c-0: Failed to register i2c client maxtcpc at 0x22 (-16) [ 114.340032][ T6001] r8a66597_udc pcspkr: error -EINVAL: invalid resource (null) [ 114.340083][ T6001] r8a66597_udc pcspkr: probe with driver r8a66597_udc failed with error -22 [ 114.815884][ T6003] ftl_cs: FTL header not found. [ 114.979420][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.995525][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 114.997810][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 115.011666][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 115.023845][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 115.037351][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 115.064608][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 115.065152][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 115.067193][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 115.068284][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 115.069107][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 115.069840][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 115.103467][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 115.114650][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 115.159630][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 115.171831][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 115.172346][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 115.172821][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 115.173303][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 115.173760][ T5736] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.255669][ T5736] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 0e:65:3a:61:e6:a7 [ 115.261664][ T5736] usb 3-1: USB disconnect, device number 2 [ 115.266500][ T5736] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 115.293802][ T6011] null_blk: rnullb0: using native zone append [ 115.310750][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.462955][ T5846] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.473929][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.473970][ T5846] usb 4-1: Product: syz [ 115.473996][ T5846] usb 4-1: Manufacturer: syz [ 115.474022][ T5846] usb 4-1: SerialNumber: syz [ 115.482324][ T6003] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072] [ 115.604343][ T6011] null_blk: disk rnullb0 created [ 116.241648][ T6039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.247144][ T6040] block2mtd: error: cannot open device /dev/ram0 [ 116.319712][ T6040] ubi0: attaching mtd0 [ 116.399352][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 116.399459][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.416035][ T5846] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.430354][ T6039] md: couldn't update array info. -22 [ 116.474207][ T6045] md: could not open device unknown-block(7,0). [ 116.474330][ T6045] md: md_import_device returned -16 [ 116.474512][ T6048] md: could not open device unknown-block(7,1). [ 116.474574][ T6048] md: md_import_device returned -16 [ 116.489757][ T5846] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 116.559550][ T6040] ubi0: scanning is finished [ 116.559583][ T6040] ubi0: empty MTD device detected [ 116.615560][ T5846] usb 4-1: USB disconnect, device number 3 [ 116.690156][ T6039] syz.0.61: attempt to access beyond end of device [ 116.690156][ T6039] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 116.709844][ T6039] syz.0.61: attempt to access beyond end of device [ 116.709844][ T6039] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 116.710111][ T6039] syz.0.61: attempt to access beyond end of device [ 116.710111][ T6039] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 116.710162][ T6039] syz.0.61: attempt to access beyond end of device [ 116.710162][ T6039] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 116.710206][ T6039] md: md0: failed to read bitmap from any device [ 116.781326][ T6052] siw: device registration error -23 [ 116.796842][ T6052] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99) [ 117.083164][ T6040] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 117.100163][ T6052] nvme nvme0: rdma connection establishment failed (-104) [ 117.527583][ T6061] o2cb: This node has not been configured. [ 117.527605][ T6061] o2cb: Cluster check failed. Fix errors before retrying. [ 117.527634][ T6061] (syz.4.66,6061,0):user_dlm_register:674 ERROR: status = -22 [ 117.527677][ T6061] (syz.4.66,6061,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 117.740790][ T6042] NFSD: Unable to initialize client recovery tracking! (-110) [ 117.740824][ T6042] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 117.740892][ T6042] NFSD: starting 90-second grace period (net f00004ec) [ 118.501938][ T5618] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.686532][ T5618] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 118.701038][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.701092][ T5618] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.722926][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.722968][ T5618] usb 4-1: Product: syz [ 118.722994][ T5618] usb 4-1: Manufacturer: syz [ 118.723020][ T5618] usb 4-1: SerialNumber: syz [ 118.849133][ T6088] null_blk: nullb1: using native zone append [ 118.906054][ T6091] nvmet: adding nsid 1 to subsystem testsubsys [ 118.910196][ T6091] nvmet: failed to open block device /dev/nullb1: (-2) [ 118.992272][ T6088] null_blk: disk nullb1 created [ 119.001909][ T5618] kaweth 4-1:1.0: Firmware present in device. [ 119.078958][ T116] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:15b1e408-b2cc-4e1b-a37e-e3036c7db588. [ 119.102090][ T6091] nvme nvme0: creating 2 I/O queues. [ 119.110426][ T6091] nvme nvme0: new ctrl: "testsubsys" [ 119.212037][ T6097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.260877][ T6097] md: couldn't update array info. -22 [ 119.279229][ T5618] kaweth 4-1:1.0: Error reading configuration (-71), no net device created [ 119.279439][ T5618] kaweth 4-1:1.0: probe with driver kaweth failed with error -5 [ 119.303096][ T5618] usb 4-1: USB disconnect, device number 4 [ 119.317334][ T6097] md: could not open device unknown-block(7,0). [ 119.317397][ T6097] md: md_import_device returned -16 [ 119.351497][ T6097] md: could not open device unknown-block(7,1). [ 119.351571][ T6097] md: md_import_device returned -16 [ 119.390839][ T6097] syz.2.78: attempt to access beyond end of device [ 119.390839][ T6097] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 119.391042][ T6097] syz.2.78: attempt to access beyond end of device [ 119.391042][ T6097] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 119.391156][ T6097] syz.2.78: attempt to access beyond end of device [ 119.391156][ T6097] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 119.391203][ T6097] syz.2.78: attempt to access beyond end of device [ 119.391203][ T6097] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 119.391241][ T6097] md: md0: failed to read bitmap from any device [ 119.727390][ T6101] cgroup: Unknown subsys name 'cpuset' [ 120.129549][ T6114] o2cb: This node has not been configured. [ 120.129574][ T6114] o2cb: Cluster check failed. Fix errors before retrying. [ 120.129606][ T6114] (syz.2.86,6114,1):user_dlm_register:674 ERROR: status = -22 [ 120.129650][ T6114] (syz.2.86,6114,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 121.067140][ T6123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.131538][ T6123] md: couldn't update array info. -22 [ 121.175036][ T6126] md: could not open device unknown-block(7,0). [ 121.175109][ T6126] md: md_import_device returned -16 [ 121.211763][ T6123] md: could not open device unknown-block(7,1). [ 121.211840][ T6123] md: md_import_device returned -16 [ 121.241596][ T6123] syz.2.91: attempt to access beyond end of device [ 121.241596][ T6123] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 121.241672][ T6123] syz.2.91: attempt to access beyond end of device [ 121.241672][ T6123] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 121.241807][ T6123] md: md0: failed to read bitmap from any device [ 121.372415][ T5618] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.530130][ T5618] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice= 1.00 [ 121.533441][ T5618] usb 5-1: config index 0 descriptor too short (expected 32, got 25) [ 121.533521][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.634885][ T5618] em28xx 5-1:1.0: New device @ 480 Mbps (1b80:e309, interface 0, class 0) [ 121.634944][ T5618] em28xx 5-1:1.0: Video interface 0 found: bulk [ 121.835129][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.838846][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.856584][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.857776][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.858530][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.950786][ T4970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.102852][ T4970] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 122.104702][ T4970] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 122.104780][ T4970] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 122.107306][ T4970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 122.107347][ T4970] usb 3-1: Product: syz [ 122.107369][ T4970] usb 3-1: Manufacturer: syz [ 122.791124][ T5618] em28xx 5-1:1.0: unknown em28xx chip ID (0) [ 122.846219][ T1158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.901721][ T4970] dvb_ttusb_budget: ttusb_init_controller: error [ 122.901839][ T4970] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 122.945553][ T5618] em28xx 5-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 122.945624][ T5618] em28xx 5-1:1.0: board has no eeprom [ 123.000872][ T5618] em28xx 5-1:1.0: Identified as Easy Cap Capture DC-60 (card=64) [ 123.000919][ T5618] em28xx 5-1:1.0: analog set to bulk mode. [ 123.003360][ T5846] em28xx 5-1:1.0: Registering V4L2 extension [ 123.038379][ T5618] usb 5-1: USB disconnect, device number 3 [ 123.050065][ T5618] em28xx 5-1:1.0: Disconnecting em28xx [ 123.083507][ T1158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.124902][ T6137] lo speed is unknown, defaulting to 1000 [ 123.152738][ T5846] em28xx 5-1:1.0: Config register raw data: 0xffffffed [ 123.152778][ T5846] em28xx 5-1:1.0: AC97 chip type couldn't be determined [ 123.152802][ T5846] em28xx 5-1:1.0: No AC97 audio processor [ 123.187151][ T5846] usb 5-1: Decoder not found [ 123.187183][ T5846] em28xx 5-1:1.0: failed to create media graph [ 123.187220][ T5846] em28xx 5-1:1.0: V4L2 device video103 deregistered [ 123.187470][ T4970] DVB: Unable to find symbol cx22700_attach() [ 123.241901][ T5846] INFO: trying to register non-static key. [ 123.247762][ T5846] The code is fine but needs lockdep annotation, or maybe [ 123.254934][ T5846] you didn't initialize this object before use? [ 123.261188][ T5846] turning off the locking correctness validator. [ 123.267539][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 123.276955][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.287045][ T5846] Workqueue: events request_module_async [ 123.292743][ T5846] Call Trace: [ 123.296040][ T5846] [ 123.298990][ T5846] dump_stack_lvl+0x100/0x190 [ 123.303720][ T5846] register_lock_class+0x79b/0x7b0 [ 123.308872][ T5846] __lock_acquire+0x25d/0x1f40 [ 123.313677][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.319361][ T5846] ? lock_acquire+0x1d1/0x380 [ 123.324062][ T5846] ? vb2_video_unregister_device+0x12b/0x2e0 [ 123.330167][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.332998][ T4970] DVB: Unable to find symbol tda10046_attach() [ 123.333015][ T4970] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 123.338258][ T4970] usb 3-1: USB disconnect, device number 3 [ 123.356077][ T5846] lock_acquire+0x1d1/0x380 [ 123.360637][ T5846] ? __wake_up+0x1c/0x60 [ 123.364926][ T5846] ? vb2_video_unregister_device+0x12b/0x2e0 [ 123.371114][ T5846] ? kobject_put+0xb9/0x640 [ 123.375668][ T5846] ? _raw_spin_lock_irqsave+0x52/0x60 [ 123.381082][ T5846] _raw_spin_lock_irqsave+0x3a/0x60 [ 123.386322][ T5846] ? __wake_up+0x1c/0x60 [ 123.390609][ T5846] __wake_up+0x1c/0x60 [ 123.394805][ T5846] __vb2_queue_cancel+0x348/0xe90 [ 123.399901][ T5846] ? __pfx_device_del+0x10/0x10 [ 123.404791][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.410492][ T5846] ? kobject_put+0xb9/0x640 [ 123.415027][ T5846] vb2_core_queue_release+0x27/0x190 [ 123.420394][ T5846] vb2_video_unregister_device+0x152/0x2e0 [ 123.426327][ T5846] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 123.431745][ T5846] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 123.437376][ T5846] em28xx_init_extension+0x13a/0x200 [ 123.442802][ T5846] request_module_async+0x1e/0x30 [ 123.448022][ T5846] process_one_work+0xac7/0x1b10 [ 123.453026][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 123.458531][ T5846] ? lock_acquire+0x1d1/0x380 [ 123.463328][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.469183][ T5846] worker_thread+0x5ef/0xe50 [ 123.473865][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 123.479030][ T5846] ? kthread+0x13a/0x450 [ 123.483566][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 123.488714][ T5846] kthread+0x373/0x450 [ 123.492827][ T5846] ? __pfx_kthread+0x10/0x10 [ 123.497464][ T5846] ret_from_fork+0x730/0xd60 [ 123.502170][ T5846] ? __pfx_ret_from_fork+0x10/0x10 [ 123.507393][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.513143][ T5846] ? __switch_to+0x800/0x10f0 [ 123.517867][ T5846] ? __switch_to_asm+0x39/0x70 [ 123.522751][ T5846] ? __pfx_kthread+0x10/0x10 [ 123.527385][ T5846] ret_from_fork_asm+0x1a/0x30 [ 123.532358][ T5846] [ 123.535427][ T5846] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 123.547601][ T5846] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 123.556436][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 123.566128][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.576379][ T5846] Workqueue: events request_module_async [ 123.582212][ T5846] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 123.587855][ T5846] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 123.607582][ T5846] RSP: 0018:ffffc90004b0f9a0 EFLAGS: 00010056 [ 123.613767][ T5846] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.621760][ T5846] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88802332d790 [ 123.629928][ T5846] RBP: ffff88802332d790 R08: 0000000000000000 R09: fffff52000961f2b [ 123.637959][ T5846] R10: 0000000000000003 R11: 0000000034383554 R12: 0000000000000003 [ 123.646218][ T5846] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802332d7d0 [ 123.654250][ T5846] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 123.663678][ T5846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.670398][ T5846] CR2: 00007f4197e1a6b0 CR3: 000000004ed6b000 CR4: 0000000000350ef0 [ 123.678476][ T5846] Call Trace: [ 123.681766][ T5846] [ 123.684713][ T5846] __wake_up+0x31/0x60 [ 123.688998][ T5846] __vb2_queue_cancel+0x348/0xe90 [ 123.694057][ T5846] ? __pfx_device_del+0x10/0x10 [ 123.698975][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.704753][ T5846] ? kobject_put+0xb9/0x640 [ 123.709391][ T5846] vb2_core_queue_release+0x27/0x190 [ 123.714898][ T5846] vb2_video_unregister_device+0x152/0x2e0 [ 123.720964][ T5846] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 123.726400][ T5846] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 123.731829][ T5846] em28xx_init_extension+0x13a/0x200 [ 123.737163][ T5846] request_module_async+0x1e/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.742228][ T5846] process_one_work+0xac7/0x1b10 [ 123.747231][ T5846] ? __pfx_process_one_work+0x10/0x10 [ 123.752637][ T5846] ? lock_acquire+0x1d1/0x380 [ 123.757380][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.763080][ T5846] worker_thread+0x5ef/0xe50 [ 123.767737][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 123.772894][ T5846] ? kthread+0x13a/0x450 [ 123.777170][ T5846] ? __pfx_worker_thread+0x10/0x10 [ 123.782325][ T5846] kthread+0x373/0x450 [ 123.786431][ T5846] ? __pfx_kthread+0x10/0x10 [ 123.791056][ T5846] ret_from_fork+0x730/0xd60 [ 123.795672][ T5846] ? __pfx_ret_from_fork+0x10/0x10 [ 123.800809][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.806483][ T5846] ? __switch_to+0x800/0x10f0 [ 123.811220][ T5846] ? __switch_to_asm+0x39/0x70 [ 123.816271][ T5846] ? __pfx_kthread+0x10/0x10 [ 123.821166][ T5846] ret_from_fork_asm+0x1a/0x30 [ 123.826052][ T5846] [ 123.829070][ T5846] Modules linked in: [ 123.832974][ T5846] ---[ end trace 0000000000000000 ]--- [ 123.838618][ T5846] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 123.838683][ T5846] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 123.838715][ T5846] RSP: 0018:ffffc90004b0f9a0 EFLAGS: 00010056 [ 123.838742][ T5846] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.838764][ T5846] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88802332d790 [ 123.838786][ T5846] RBP: ffff88802332d790 R08: 0000000000000000 R09: fffff52000961f2b [ 123.838807][ T5846] R10: 0000000000000003 R11: 0000000034383554 R12: 0000000000000003 [ 123.838828][ T5846] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802332d7d0 [ 123.838852][ T5846] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 123.838881][ T5846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.838904][ T5846] CR2: 00007f4197e1a6b0 CR3: 000000004ed6b000 CR4: 0000000000350ef0 [ 123.838928][ T5846] Kernel panic - not syncing: Fatal exception [ 123.940727][ T5846] Kernel Offset: disabled [ 123.945050][ T5846] Rebooting in 86400 seconds..