last executing test programs: 5.82930041s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040330730040001000000010902220001010080320904000000ffffff000904000101ffffff0007058101ff0301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 5.676206647s ago: executing program 1 (id=2): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1d, @a_listen={0x0, 0x3, 0x5, 0x80, 0xff, 0x1, 0x0, "", 0x0, 0x0, 0x0, 0x12, 0x11, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ffm'}}, 0x20) write$nci(r0, &(0x7f0000000780)=@DATA={0x0, 0x0, 0x0, 0x0, 0x2, "0541"}, 0x5) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) 4.839575006s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3 +4.0 -4.1 -4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 4.613939937s ago: executing program 1 (id=10): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:20000:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) 4.453430174s ago: executing program 3 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x40, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000000a0)={&(0x7f0000000400)=@newtclass={0x40, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41, 0x1}}, 0x20}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r3, &(0x7f0000000600)='\x00'/1000, 0x3e8) write(r3, &(0x7f0000000600)='\x00'/1000, 0x3e8) 4.259092833s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d040000000010000005000000000000", 0x13, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000") ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./read_buf\x00', 0x42, 0x1b6) read(r4, &(0x7f0000000900)=""/32, 0x20) 3.792350585s ago: executing program 2 (id=13): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) dup2(r0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/syz/heartbeat/hb0/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='255', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/syz/heartbeat/hb0/dev\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='7\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dlm\x00', &(0x7f0000000840)='ocfs2_dlmfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dlm/mydomain\x00', 0x1ff) 3.433693731s ago: executing program 1 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @qdisc_kind_options]}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 2.696378095s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) nanosleep(&(0x7f0000000140)={0x0, 0xbebc200}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="02000000000000000102030405060708", 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x11e1a300}, 0x0) 2.282004614s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2\n', 0x2) 1.747766319s ago: executing program 2 (id=17): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000050)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="d00000000802110000000802110000015050505050500000030000000000"], 0x1e) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="c0000000ffffffffffff08021100000150505050505000000100"], 0x1a) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.747561119s ago: executing program 3 (id=18): syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff0000000705810340000a"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x2, 0x0) ioctl(r0, 0x5418, &(0x7f0000000300)) 971.909175ms ago: executing program 2 (id=19): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x158, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x1234, 0x1234, @in6=@loopback}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000200)='payload', 0x7, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 669.544919ms ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mproc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./mproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140), &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mproc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) close(r2) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000500)="80000028000000010000000000000002000186a3000000030000000100"/44, 0x2c) read(r3, &(0x7f0000000600)=""/128, 0x80) 662.50328ms ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) write(r2, &(0x7f0000001000)="01050000000000000100"/1034, 0x40a) write(r2, &(0x7f0000002000)="010400000100"/1034, 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000003100)='127.0.0.1:/\x00', &(0x7f0000003000)='./mnt\x00', &(0x7f0000003200), 0x0, &(0x7f0000003300)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1\x00']) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000004000)="010000000200"/1034, 0x40a) r3 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./nfsd/clients/1/ctl\x00', 0x2, 0x0) write(r3, &(0x7f0000005100)='expire\n', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000005200)='./nfsd/clients/2/ctl\x00', 0x2, 0x0) write(r4, &(0x7f0000005300)='expire\n', 0x7) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000006000)="010100000300"/1034, 0x40a) 624.418442ms ago: executing program 2 (id=22): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) listen(r0, 0x5) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) shutdown(r0, 0x2) close(r0) close(r1) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 339.506175ms ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) 66.954717ms ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/tcp_fastopen\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='3\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000100)=0xa, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x4e22, 0x12345678, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@fastopen={0x22, 0xa, "0102030405060708"}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 76.740683][ T5764] cgroup: Unknown subsys name 'net' [ 76.878518][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.616666][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.960576][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.971748][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.979765][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.987436][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.996207][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.004084][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.011537][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.012608][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.020290][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.029078][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.037565][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.040592][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.047710][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.054759][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.069400][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.071150][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.076824][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.099814][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.107521][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.124985][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.135958][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.149762][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.157826][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.168133][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.586164][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 81.621841][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.731972][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 81.747143][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 81.812451][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.819598][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.827785][ T5783] bridge_slave_0: entered allmulticast mode [ 81.835366][ T5783] bridge_slave_0: entered promiscuous mode [ 81.879812][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.887273][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.894631][ T5783] bridge_slave_1: entered allmulticast mode [ 81.901487][ T5783] bridge_slave_1: entered promiscuous mode [ 81.959209][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.966515][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.973929][ T5775] bridge_slave_0: entered allmulticast mode [ 81.983512][ T5775] bridge_slave_0: entered promiscuous mode [ 81.991890][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.999064][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.006309][ T5775] bridge_slave_1: entered allmulticast mode [ 82.013433][ T5775] bridge_slave_1: entered promiscuous mode [ 82.047731][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.055242][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.062532][ T5782] bridge_slave_0: entered allmulticast mode [ 82.069580][ T5782] bridge_slave_0: entered promiscuous mode [ 82.113881][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.126808][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.136801][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.144414][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.152170][ T5782] bridge_slave_1: entered allmulticast mode [ 82.159664][ T5782] bridge_slave_1: entered promiscuous mode [ 82.177697][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.218947][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.228446][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.240712][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.247911][ T5781] bridge_slave_0: entered allmulticast mode [ 82.255469][ T5781] bridge_slave_0: entered promiscuous mode [ 82.263266][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.271002][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.278376][ T5781] bridge_slave_1: entered allmulticast mode [ 82.285336][ T5781] bridge_slave_1: entered promiscuous mode [ 82.314532][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.360156][ T5783] team0: Port device team_slave_0 added [ 82.368590][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.388573][ T5775] team0: Port device team_slave_0 added [ 82.399086][ T5783] team0: Port device team_slave_1 added [ 82.415987][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.429667][ T5775] team0: Port device team_slave_1 added [ 82.457053][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.509919][ T5782] team0: Port device team_slave_0 added [ 82.533277][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.540679][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.567238][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.582682][ T5781] team0: Port device team_slave_0 added [ 82.590125][ T5782] team0: Port device team_slave_1 added [ 82.597205][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.604480][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.630565][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.642213][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.649212][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.675898][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.689775][ T5781] team0: Port device team_slave_1 added [ 82.717956][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.725026][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.756218][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.829945][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.837342][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.864112][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.876007][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.885143][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.911526][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.924020][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.931056][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.957082][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.980013][ T5783] hsr_slave_0: entered promiscuous mode [ 82.987131][ T5783] hsr_slave_1: entered promiscuous mode [ 82.996933][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.004204][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.031673][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.099892][ T5775] hsr_slave_0: entered promiscuous mode [ 83.106326][ T5775] hsr_slave_1: entered promiscuous mode [ 83.113234][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.121276][ T5775] Cannot create hsr debugfs directory [ 83.151210][ T51] Bluetooth: hci0: command tx timeout [ 83.151303][ T5784] Bluetooth: hci1: command tx timeout [ 83.167460][ T5788] Bluetooth: hci2: command tx timeout [ 83.230477][ T5788] Bluetooth: hci3: command tx timeout [ 83.252266][ T5782] hsr_slave_0: entered promiscuous mode [ 83.258883][ T5782] hsr_slave_1: entered promiscuous mode [ 83.267450][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.275102][ T5782] Cannot create hsr debugfs directory [ 83.299516][ T5781] hsr_slave_0: entered promiscuous mode [ 83.306481][ T5781] hsr_slave_1: entered promiscuous mode [ 83.313268][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.320977][ T5781] Cannot create hsr debugfs directory [ 83.670778][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.685691][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.696411][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.716249][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.786386][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.807300][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.818730][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.832162][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.899172][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.920084][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.932951][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.976011][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.033908][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.044573][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.065297][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.072409][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.085812][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.142344][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.196059][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.203470][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.256374][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.263589][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.354562][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.371301][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.423305][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.448156][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.464290][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.471449][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.488650][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.495863][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.536950][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.544301][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.575513][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.582667][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.606809][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.696093][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.744088][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.787308][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.794562][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.845198][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.852466][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.964976][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.073863][ T5783] veth0_vlan: entered promiscuous mode [ 85.099448][ T5783] veth1_vlan: entered promiscuous mode [ 85.187115][ T5783] veth0_macvtap: entered promiscuous mode [ 85.213664][ T5783] veth1_macvtap: entered promiscuous mode [ 85.231150][ T5788] Bluetooth: hci0: command tx timeout [ 85.237073][ T5784] Bluetooth: hci2: command tx timeout [ 85.237086][ T51] Bluetooth: hci1: command tx timeout [ 85.290741][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.311168][ T5784] Bluetooth: hci3: command tx timeout [ 85.324800][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.345890][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.417329][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.433060][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.443748][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.453581][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.462537][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.564864][ T5782] veth0_vlan: entered promiscuous mode [ 85.576954][ T5775] veth0_vlan: entered promiscuous mode [ 85.591256][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.606290][ T5775] veth1_vlan: entered promiscuous mode [ 85.656654][ T5782] veth1_vlan: entered promiscuous mode [ 85.686240][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.707323][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.758363][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.769489][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.798655][ T5781] veth0_vlan: entered promiscuous mode [ 85.824236][ T5775] veth0_macvtap: entered promiscuous mode [ 85.845514][ T5782] veth0_macvtap: entered promiscuous mode [ 85.857847][ T5781] veth1_vlan: entered promiscuous mode [ 85.879892][ T5775] veth1_macvtap: entered promiscuous mode [ 85.903984][ T5782] veth1_macvtap: entered promiscuous mode [ 85.952728][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.970109][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.992159][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.026199][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.038188][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.054453][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.066121][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.077678][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.089815][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.100407][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.113016][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.136061][ T5781] veth0_macvtap: entered promiscuous mode [ 86.146399][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.157841][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167182][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.176357][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.188704][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.201077][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.211690][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.222810][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.234196][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.245441][ T5781] veth1_macvtap: entered promiscuous mode [ 86.266112][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.278436][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287978][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.297984][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439170][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.462140][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.472632][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.484701][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.514361][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.526360][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.542205][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.569514][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.583435][ T5851] Bluetooth: MGMT ver 1.22 [ 86.593489][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.604252][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.615380][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.627964][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.638540][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.650205][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.678014][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688334][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.698137][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.708164][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724877][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.740834][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.752407][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.762506][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.855599][ T5854] input: syz0 as /devices/virtual/input/input5 [ 86.876548][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.886701][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.940133][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.972416][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.059852][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.101702][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.211951][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.219856][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.310541][ T5788] Bluetooth: hci2: command tx timeout [ 87.314695][ T51] Bluetooth: hci1: command tx timeout [ 87.316067][ T5780] Bluetooth: hci0: command tx timeout [ 87.323070][ T5858] loop0: detected capacity change from 0 to 2048 [ 87.391366][ T5788] Bluetooth: hci3: command tx timeout [ 87.527630][ T5846] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 87.796908][ T5846] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice= 1.00 [ 87.807835][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.834022][ T5846] gspca_main: spca505-2.14.0 probing 0733:0430 [ 88.590583][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.895911][ T5888] block device autoloading is deprecated and will be removed. [ 89.046723][ T5887] md/raid1:md0: active with 1 out of 1 mirrors [ 89.080892][ T5887] md0: detected capacity change from 0 to 1920 [ 89.303419][ T1191] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 89.305583][ T5880] ceph: No mds server is up or the cluster is laggy [ 89.392035][ T5784] Bluetooth: hci2: command tx timeout [ 89.392097][ T5788] Bluetooth: hci0: command 0x0419 tx timeout [ 89.403635][ T5784] Bluetooth: hci1: command tx timeout [ 89.428571][ T5893] o2cb: Local heartbeat has not been started. [ 89.460383][ T5893] o2cb: Cluster check failed. Fix errors before retrying. [ 89.470604][ T5788] Bluetooth: hci3: command tx timeout [ 89.488747][ T5893] (syz.2.13,5893,0):user_dlm_register:674 ERROR: status = -22 [ 89.509214][ T5893] (syz.2.13,5893,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydomain" [ 90.586772][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.304939][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.325462][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.480474][ T5788] Bluetooth: hci0: command 0x0419 tx timeout [ 91.490754][ T1191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.675938][ T1191] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 91.685265][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.707576][ T1191] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 91.728575][ T1191] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 91.980414][ T5901] NFSD: attempt to initialize umh client tracking in a container ignored. [ 92.006427][ T5901] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 92.021154][ T5901] NFSD: Unable to initialize client recovery tracking! (-22) [ 92.027564][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19'. [ 92.028948][ T5901] NFSD: starting 90-second grace period (net f00003d0) [ 92.060624][ T1191] usb 4-1: USB disconnect, device number 2 [ 92.078807][ T1191] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 92.132062][ T1191] metro_usb 4-1:1.0: device disconnected [ 92.136014][ T23] cfg80211: failed to load regulatory.db [ 92.263482][ T5846] gspca_spca505: reg write: error -71 [ 92.290381][ T5846] spca505: probe of 1-1:1.0 failed with error -5 [ 92.330670][ T5846] usb 1-1: USB disconnect, device number 2 [ 92.652074][ T5925] bridge_slave_1: left allmulticast mode [ 92.657897][ T5925] bridge_slave_1: left promiscuous mode [ 92.666273][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.688606][ T5925] bridge_slave_0: left allmulticast mode [ 92.697326][ T5925] bridge_slave_0: left promiscuous mode [ 92.705451][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.009962][ T5933] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 93.052326][ T5933] [ 93.054693][ T5933] ====================================================== [ 93.061705][ T5933] WARNING: possible circular locking dependency detected [ 93.068733][ T5933] syzkaller #0 Not tainted [ 93.073142][ T5933] ------------------------------------------------------ [ 93.080146][ T5933] syz.3.25/5933 is trying to acquire lock: [ 93.085940][ T5933] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x21/0x2d0 [ 93.094831][ T5933] [ 93.094831][ T5933] but task is already holding lock: [ 93.102199][ T5933] ffff88802ee8a398 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x59/0x250 [ 93.111281][ T5933] [ 93.111281][ T5933] which lock already depends on the new lock. [ 93.111281][ T5933] [ 93.121723][ T5933] [ 93.121723][ T5933] the existing dependency chain (in reverse order) is: [ 93.130745][ T5933] [ 93.130745][ T5933] -> #2 (&gi->lock){+.+.}-{3:3}: [ 93.137891][ T5933] __mutex_lock+0x135/0xc80 [ 93.142926][ T5933] config_usb_cfg_link+0x59/0x250 [ 93.148495][ T5933] configfs_symlink+0x5a5/0xfe0 [ 93.153881][ T5933] vfs_symlink+0x138/0x2b0 [ 93.158813][ T5933] do_symlinkat+0x1ba/0x400 [ 93.163851][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 93.169336][ T5933] do_syscall_64+0x55/0xb0 [ 93.174386][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.180818][ T5933] [ 93.180818][ T5933] -> #1 (&sb->s_type->i_mutex_key#20){++++}-{3:3}: [ 93.189610][ T5933] down_write+0x97/0x200 [ 93.194379][ T5933] configfs_depend_item_unlocked+0x157/0x430 [ 93.200886][ T5933] usbg_make_tpg+0x1e1/0x550 [ 93.206008][ T5933] target_fabric_make_tpg+0xa4/0x6d0 [ 93.211831][ T5933] configfs_mkdir+0x515/0x9e0 [ 93.217041][ T5933] vfs_mkdir+0x2a5/0x470 [ 93.221830][ T5933] do_mkdirat+0x1dc/0x450 [ 93.226684][ T5933] __x64_sys_mkdirat+0x89/0xa0 [ 93.231977][ T5933] do_syscall_64+0x55/0xb0 [ 93.236933][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.243358][ T5933] [ 93.243358][ T5933] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 93.251272][ T5933] __lock_acquire+0x37ef/0x7d80 [ 93.256650][ T5933] lock_acquire+0x19e/0x420 [ 93.261691][ T5933] __mutex_lock+0x135/0xc80 [ 93.266722][ T5933] tcm_alloc+0x21/0x2d0 [ 93.271400][ T5933] usb_get_function+0x5d/0xb0 [ 93.276687][ T5933] config_usb_cfg_link+0x148/0x250 [ 93.282322][ T5933] configfs_symlink+0x5a5/0xfe0 [ 93.287695][ T5933] vfs_symlink+0x138/0x2b0 [ 93.292639][ T5933] do_symlinkat+0x1ba/0x400 [ 93.297665][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 93.303127][ T5933] do_syscall_64+0x55/0xb0 [ 93.308069][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.314753][ T5933] [ 93.314753][ T5933] other info that might help us debug this: [ 93.314753][ T5933] [ 93.324979][ T5933] Chain exists of: [ 93.324979][ T5933] tpg_instances_lock --> &sb->s_type->i_mutex_key#20 --> &gi->lock [ 93.324979][ T5933] [ 93.338822][ T5933] Possible unsafe locking scenario: [ 93.338822][ T5933] [ 93.346270][ T5933] CPU0 CPU1 [ 93.351633][ T5933] ---- ---- [ 93.357023][ T5933] lock(&gi->lock); [ 93.360924][ T5933] lock(&sb->s_type->i_mutex_key#20); [ 93.368934][ T5933] lock(&gi->lock); [ 93.375363][ T5933] lock(tpg_instances_lock); [ 93.380083][ T5933] [ 93.380083][ T5933] *** DEADLOCK *** [ 93.380083][ T5933] [ 93.388227][ T5933] 3 locks held by syz.3.25/5933: [ 93.393164][ T5933] #0: ffff88801fe92418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 93.402414][ T5933] #1: ffff88805ef89090 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 93.413222][ T5933] #2: ffff88802ee8a398 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x59/0x250 [ 93.422631][ T5933] [ 93.422631][ T5933] stack backtrace: [ 93.428516][ T5933] CPU: 1 PID: 5933 Comm: syz.3.25 Not tainted syzkaller #0 [ 93.435714][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.445772][ T5933] Call Trace: [ 93.449057][ T5933] [ 93.451992][ T5933] dump_stack_lvl+0x18c/0x250 [ 93.456693][ T5933] ? load_image+0x420/0x420 [ 93.461227][ T5933] ? show_regs_print_info+0x20/0x20 [ 93.466438][ T5933] ? print_circular_bug+0x12b/0x1a0 [ 93.471654][ T5933] check_noncircular+0x2fc/0x400 [ 93.476609][ T5933] ? print_deadlock_bug+0x5d0/0x5d0 [ 93.481836][ T5933] ? lockdep_lock+0xf5/0x230 [ 93.486435][ T5933] ? _find_first_zero_bit+0xd6/0x100 [ 93.491725][ T5933] __lock_acquire+0x37ef/0x7d80 [ 93.496592][ T5933] ? verify_lock_unused+0x140/0x140 [ 93.501797][ T5933] ? __lock_acquire+0x1336/0x7d80 [ 93.506830][ T5933] ? verify_lock_unused+0x140/0x140 [ 93.512045][ T5933] lock_acquire+0x19e/0x420 [ 93.516554][ T5933] ? tcm_alloc+0x21/0x2d0 [ 93.520892][ T5933] ? __might_sleep+0xe0/0xe0 [ 93.525495][ T5933] ? read_lock_is_recursive+0x20/0x20 [ 93.530875][ T5933] ? __mutex_trylock_common+0x160/0x270 [ 93.536437][ T5933] __mutex_lock+0x135/0xc80 [ 93.540956][ T5933] ? tcm_alloc+0x21/0x2d0 [ 93.545291][ T5933] ? trace_contention_end+0x39/0xe0 [ 93.550494][ T5933] ? __mutex_lock+0x30d/0xc80 [ 93.555176][ T5933] ? tcm_alloc+0x21/0x2d0 [ 93.559511][ T5933] ? mutex_lock_nested+0x20/0x20 [ 93.564455][ T5933] ? read_lock_is_recursive+0x20/0x20 [ 93.569853][ T5933] ? config_usb_cfg_link+0x59/0x250 [ 93.575086][ T5933] ? mutex_lock_nested+0x20/0x20 [ 93.580040][ T5933] ? configfs_symlink+0x469/0xfe0 [ 93.585080][ T5933] tcm_alloc+0x21/0x2d0 [ 93.589254][ T5933] usb_get_function+0x5d/0xb0 [ 93.593945][ T5933] config_usb_cfg_link+0x148/0x250 [ 93.599073][ T5933] configfs_symlink+0x5a5/0xfe0 [ 93.603939][ T5933] ? from_kgid+0x153/0x6a0 [ 93.608366][ T5933] ? generic_permission+0x1ed/0x590 [ 93.613569][ T5933] ? detach_groups+0x370/0x370 [ 93.618341][ T5933] ? inode_permission+0xf3/0x480 [ 93.623280][ T5933] ? bpf_lsm_inode_symlink+0x9/0x10 [ 93.628485][ T5933] ? security_inode_symlink+0xb6/0x100 [ 93.633961][ T5933] vfs_symlink+0x138/0x2b0 [ 93.638385][ T5933] do_symlinkat+0x1ba/0x400 [ 93.642896][ T5933] ? vfs_symlink+0x2b0/0x2b0 [ 93.647492][ T5933] __x64_sys_symlinkat+0x99/0xb0 [ 93.652445][ T5933] do_syscall_64+0x55/0xb0 [ 93.656872][ T5933] ? clear_bhb_loop+0x40/0x90 [ 93.661560][ T5933] ? clear_bhb_loop+0x40/0x90 [ 93.666246][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.672340][ T5933] RIP: 0033:0x7fcaa519e159 [ 93.676761][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.696483][ T5933] RSP: 002b:00007fcaa5fdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 93.704908][ T5933] RAX: ffffffffffffffda RBX: 00007fcaa5425fa0 RCX: 00007fcaa519e159 [ 93.712886][ T5933] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 93.720862][ T5933] RBP: 00007fcaa523506b R08: 0000000000000000 R09: 0000000000000000 [ 93.728834][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.736808][ T5933] R13: 00007fcaa5426038 R14: 00007fcaa5425fa0 R15: 00007ffc53ab8548 [ 93.744800][ T5933] [ 94.030425][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.232175][ T8] usb 1-1: Dual-Role OTG device on HNP port [ 94.238386][ T8] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 94.247579][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.257428][ T1191] Using the BOT protocol [ 94.267628][ T1191] Using the UAS protocol [ 94.275153][ T8] scsi host1: uas [ 94.287454][ T59] scsi 1:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 94.307960][ T59] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 94.309894][ T34] sd 1:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 94.329774][ T34] sd 1:0:0:0: [sdb] Write Protect is off [ 94.336074][ T34] sd 1:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 94.344744][ T34] sd 1:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 94.360548][ T5920] NFSD: attempt to initialize umh client tracking in a container ignored. [ 94.372014][ T5920] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 94.381167][ T5920] NFSD: Unable to initialize client recovery tracking! (-22) [ 94.381378][ T34] sd 1:0:0:0: [sdb] Attached SCSI disk [ 94.388648][ T5920] NFSD: starting 90-second grace period (net f00003d0) [ 94.497937][ T5846] target: Unknown data direction for SCSI Opcode 0xa1