last executing test programs: 1m1.665031703s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000060)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem', 0x3) 54.939855826s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00\x00\x00', 0x8) 54.34000968s ago: executing program 3 (id=30): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050105000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050105000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x10000], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 51.809618138s ago: executing program 2 (id=34): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 51.530611498s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) 51.530357943s ago: executing program 2 (id=36): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./share\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cifs\x00', 0x0, &(0x7f0000000480)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root\x00') 51.440566907s ago: executing program 2 (id=37): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502400000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000410)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000430)={0x0, 0x0, 0x2, @string={0x2, 0x0}}, &(0x7f0000000450)={0x0, 0x0, 0x5, {0x0, 0x0, 0x5}}, &(0x7f0000000470)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000490)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000500)={0x84, &(0x7f0000000510), &(0x7f0000000520)={0x0, 0x0, 0x1}, &(0x7f0000000530)={0x0, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x4}, &(0x7f0000000550)={0x0, 0x0, 0x4}, &(0x7f0000000560)={0x0, 0x0, 0x2}, &(0x7f0000000570)={0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000000590)={0x0, 0x0, 0x2}, &(0x7f00000005a0)={0x0, 0x0, 0x6}, &(0x7f00000005b0)={0x0, 0x0, 0x6}, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f00000005d0)={0x0, 0x0, 0x2}, &(0x7f00000005e0)={0x0, 0x0, 0x1}, &(0x7f00000005f0)={0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)='AAAAAAA') syz_usb_ep_write(r0, 0x82, 0x7, &(0x7f0000000300)='BBBBBBB') syz_usb_ep_write(r0, 0x84, 0x7, &(0x7f0000000300)='CCCCCCC') nanosleep(&(0x7f0000000100)={0x1}, 0x0) 51.159822443s ago: executing program 3 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) 51.159638176s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0C0B:00/state0\x00', 0x0, 0x0) 51.07947223s ago: executing program 3 (id=40): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) (async) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/bus/usb/001/002\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 49.52964214s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 49.399961839s ago: executing program 3 (id=42): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="0101", 0x2) write(r0, &(0x7f0000000080)='\x00\x00', 0x2) read(r0, &(0x7f00000000c0)=""/2, 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="02aa", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) read(r0, &(0x7f00000001c0)=""/2, 0x2) write(r0, &(0x7f0000000200)="02fa", 0x2) write(r0, &(0x7f0000000240)="0200", 0x2) read(r0, &(0x7f0000000280)=""/2, 0x2) write(r0, &(0x7f00000002c0)="02fa", 0x2) read(r0, &(0x7f0000000300)=""/2, 0x2) write(r0, &(0x7f0000000340)="02fa", 0x2) read(r0, &(0x7f0000000380)=""/2, 0x2) write(r0, &(0x7f00000003c0)="02fa", 0x2) read(r0, &(0x7f0000000400)=""/2, 0x2) write(r0, &(0x7f0000000440)="02fa", 0x2) write(r0, &(0x7f0000000480)="0273", 0x2) write(r0, &(0x7f00000004c0)="0202", 0x2) write(r0, &(0x7f0000000500)="0264", 0x2) 47.740448142s ago: executing program 2 (id=43): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 47.45051862s ago: executing program 2 (id=44): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mem\x00', 0x3) 46.436963656s ago: executing program 32 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000060)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem', 0x3) 45.095992586s ago: executing program 4 (id=45): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) (async) nanosleep(&(0x7f0000000400)={0x2}, 0x0) 41.325522011s ago: executing program 4 (id=46): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) read(r0, &(0x7f0000000100)=""/2, 0x2) write(r0, &(0x7f0000000140)="02fa", 0x2) write(r0, &(0x7f0000000180)="02aa", 0x2) write(r0, &(0x7f00000001c0)="0200", 0x2) read(r0, &(0x7f0000000200)=""/2, 0x2) write(r0, &(0x7f0000000240)="02fa", 0x2) write(r0, &(0x7f0000000280)="0200", 0x2) 39.307447282s ago: executing program 33 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00\x00\x00', 0x8) 34.436477763s ago: executing program 34 (id=42): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="0101", 0x2) write(r0, &(0x7f0000000080)='\x00\x00', 0x2) read(r0, &(0x7f00000000c0)=""/2, 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="02aa", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) read(r0, &(0x7f00000001c0)=""/2, 0x2) write(r0, &(0x7f0000000200)="02fa", 0x2) write(r0, &(0x7f0000000240)="0200", 0x2) read(r0, &(0x7f0000000280)=""/2, 0x2) write(r0, &(0x7f00000002c0)="02fa", 0x2) read(r0, &(0x7f0000000300)=""/2, 0x2) write(r0, &(0x7f0000000340)="02fa", 0x2) read(r0, &(0x7f0000000380)=""/2, 0x2) write(r0, &(0x7f00000003c0)="02fa", 0x2) read(r0, &(0x7f0000000400)=""/2, 0x2) write(r0, &(0x7f0000000440)="02fa", 0x2) write(r0, &(0x7f0000000480)="0273", 0x2) write(r0, &(0x7f00000004c0)="0202", 0x2) write(r0, &(0x7f0000000500)="0264", 0x2) 34.378435335s ago: executing program 5 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 34.240323101s ago: executing program 5 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x0}, 0x14) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)="aa", 0x1}, {&(0x7f0000000500)="bb", 0x1}, {&(0x7f0000000600)="cc", 0x1}], 0x3}, 0x0) 34.240052233s ago: executing program 5 (id=52): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 33.930310409s ago: executing program 5 (id=53): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) 32.928752559s ago: executing program 6 (id=54): r0 = socket$netlink(0x10, 0x3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./sys\x00', &(0x7f0000000b10)='sysfs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x12, &(0x7f0000000200)=@raw=[@generic={0x79, 0x6, 0x1, 0x70}, @generic={0xbf, 0x1, 0xa}, @generic={0x7, 0x1, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x8}, @generic={0xbf, 0x3, 0x6}, @generic={0x7, 0x3, 0x0, 0x0, 0xffffffe8}, @generic={0x85, 0x0, 0x0, 0x0, 0x4}, @generic={0x62, 0xa, 0x0, 0xfffc}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0xb7}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, 0x0, 0x2a, 0x0, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000510)='show_transport_handle\x00']}}, 0x30) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/iscsi_transport/iser/handle\x00', 0x0, 0x0) read(r3, &(0x7f0000000700), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/iscsi_transport/tcp/handle\x00', 0x0, 0x0) read(r4, &(0x7f0000000700), 0x64) r5 = syz_io_uring_setup(0x1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)='H\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00', 0x18}, {&(0x7f00000009a0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f00000009b0)="0000000080008000"/40, 0x28}], 0x3}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r1, &(0x7f0000000a10)='\x00\x00\x00\x00', &(0x7f00000009a0)=""/8}, 0x20) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) 32.918884599s ago: executing program 6 (id=55): syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "401f00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x80, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]}) 31.808740819s ago: executing program 35 (id=44): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mem\x00', 0x3) 30.927578115s ago: executing program 5 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='rdma 20049\n\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, 0x0) 30.7454967s ago: executing program 6 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(0xffffffffffffffff, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) 30.628684217s ago: executing program 6 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 30.534309783s ago: executing program 6 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 30.418189371s ago: executing program 5 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem\x00', 0x4) 30.361800528s ago: executing program 7 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x2) (async) nanosleep(&(0x7f0000000380)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='127.0.0.1:/\x00', &(0x7f0000000440)='./nfs\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='vers=4.0,addr=127.0.0.1,port=2049\x00') 30.000479932s ago: executing program 6 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x5) 9.407060114s ago: executing program 36 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem\x00', 0x4) 9.348882365s ago: executing program 37 (id=46): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) read(r0, &(0x7f0000000100)=""/2, 0x2) write(r0, &(0x7f0000000140)="02fa", 0x2) write(r0, &(0x7f0000000180)="02aa", 0x2) write(r0, &(0x7f00000001c0)="0200", 0x2) read(r0, &(0x7f0000000200)=""/2, 0x2) write(r0, &(0x7f0000000240)="02fa", 0x2) write(r0, &(0x7f0000000280)="0200", 0x2) 9.305073989s ago: executing program 38 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x2) (async) nanosleep(&(0x7f0000000380)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='127.0.0.1:/\x00', &(0x7f0000000440)='./nfs\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='vers=4.0,addr=127.0.0.1,port=2049\x00') 9.259275827s ago: executing program 39 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x5) 3.299266994s ago: executing program 1 (id=65): r0 = syz_usb_connect(0x0, 0xea, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902d800010100c0000904000002ff0000000905010200020000000905810200020000000904000103ff0000000905820100020100000905010200020000000905810200020000000904000202ff0000000905010200020000000905810200020000000904000303ff0000000905820100020100000905010200020000000905810200020000000904000402ff0000000905010200020000000905810200020000000904000502ff0000000905010200020000000905810200020000000904000602ff000000090501020002000000090581020002000000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) 3.173067086s ago: executing program 8 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='./nfsd\n\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 3.153002691s ago: executing program 0 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(0xffffffffffffffff, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) 2.989072786s ago: executing program 0 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(r7, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 2.930002126s ago: executing program 0 (id=68): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b538100030000000109022700010100a0fa0904000003ffff0000070581020002000705020200020007058303080008"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000280)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000400)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, &(0x7f0000000880)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000700)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, &(0x7f0000000b80)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, &(0x7f0000000a00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000e80)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f0000000d00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001180)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)={0x84, &(0x7f0000001000)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, &(0x7f0000001480)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001400)={0x84, &(0x7f0000001300)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001800)={0x2c, &(0x7f0000001780)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001700)={0x84, &(0x7f0000001600)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001b00)={0x2c, &(0x7f0000001a80)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001a00)={0x84, &(0x7f0000001900)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001e00)={0x2c, &(0x7f0000001d80)={0x0, 0x1, 0x3, {0x3, 0x1, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001d00)={0x84, &(0x7f0000001c00)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 1.590124342s ago: executing program 9 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.37008154s ago: executing program 0 (id=71): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0), 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000140)='1', 0x1) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r2, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r3, 0x1, 0x19, &(0x7f0000000240)='bt0\x00', 0x4) sendto$inet6(r3, &(0x7f0000000280)='payload', 0x7, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 1.290306528s ago: executing program 8 (id=72): r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 989.246583ms ago: executing program 9 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r1, 0xa) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x25, '', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 900.301253ms ago: executing program 9 (id=74): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback}, {0xa, 0x4e20, 0x0, @loopback}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 758.783092ms ago: executing program 9 (id=75): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x5, "11ff000001"}}, 0xb) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x2, "11ff"}}, 0x8) 660.510494ms ago: executing program 9 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze\n', 0x7) 609.347518ms ago: executing program 9 (id=77): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102400001070501024000010904000104ffffff0007058102400001070501024000010705820140000107050601400001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 510.247908ms ago: executing program 0 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='naa.6001405123456789\x00', 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000780)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='0x1d6b\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000800)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000840)={0x1}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x1c) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f00000008c0)=""/28}, &(0x7f0000000900)="5f000000000000001c00", &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) 119.902529ms ago: executing program 8 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='1\n', 0x2) close(r6) nanosleep(&(0x7f0000000380)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1,port=2049'}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0x42, 0x1ff) close(r7) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/file2\x00', 0x0) 0s ago: executing program 1 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/self/mem\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x7f000000100e, &(0x7f0000000180)=[{&(0x7f00000001c0)='08', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0xa, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='e100\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='0000:00:02.0\x00', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36773' (ED25519) to the list of known hosts. [ 41.375043][ T5721] cgroup: Unknown subsys name 'net' [ 41.496908][ T5721] cgroup: Unknown subsys name 'cpuset' [ 41.500975][ T5721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.573604][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.414681][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.414869][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.416488][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.416723][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.419154][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.419721][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.420280][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.421851][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.422336][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.424194][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.426113][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.426691][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.427050][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.427768][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.428052][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.428367][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.430690][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.431383][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.434001][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.435782][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.990142][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.992886][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.995548][ T5740] bridge_slave_0: entered allmulticast mode [ 46.998366][ T5740] bridge_slave_0: entered promiscuous mode [ 47.008083][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.010340][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.012960][ T5740] bridge_slave_1: entered allmulticast mode [ 47.015680][ T5740] bridge_slave_1: entered promiscuous mode [ 47.018423][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.020657][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.023167][ T5749] bridge_slave_0: entered allmulticast mode [ 47.026443][ T5749] bridge_slave_0: entered promiscuous mode [ 47.030636][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.032933][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.035309][ T5749] bridge_slave_1: entered allmulticast mode [ 47.038268][ T5749] bridge_slave_1: entered promiscuous mode [ 47.114989][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.119570][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.137563][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.142754][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.166891][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.169932][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.173049][ T5739] bridge_slave_0: entered allmulticast mode [ 47.177347][ T5739] bridge_slave_0: entered promiscuous mode [ 47.209848][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.212239][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.215349][ T5739] bridge_slave_1: entered allmulticast mode [ 47.218092][ T5739] bridge_slave_1: entered promiscuous mode [ 47.220825][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.224016][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.226386][ T5741] bridge_slave_0: entered allmulticast mode [ 47.229198][ T5741] bridge_slave_0: entered promiscuous mode [ 47.243334][ T5749] team0: Port device team_slave_0 added [ 47.253202][ T5749] team0: Port device team_slave_1 added [ 47.255932][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.258261][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.260668][ T5741] bridge_slave_1: entered allmulticast mode [ 47.263579][ T5741] bridge_slave_1: entered promiscuous mode [ 47.267387][ T5740] team0: Port device team_slave_0 added [ 47.282660][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.293559][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.297480][ T5740] team0: Port device team_slave_1 added [ 47.326400][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.336206][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.339120][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.349615][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.368457][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.378332][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.380539][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.388740][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.394998][ T5739] team0: Port device team_slave_0 added [ 47.403080][ T5739] team0: Port device team_slave_1 added [ 47.405519][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.407788][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.415606][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.423571][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.425919][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.433989][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.458725][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.460954][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.469019][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.474195][ T5741] team0: Port device team_slave_0 added [ 47.477691][ T5741] team0: Port device team_slave_1 added [ 47.486487][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.488736][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.496890][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.529467][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.531765][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.539704][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.552735][ T5740] hsr_slave_0: entered promiscuous mode [ 47.555234][ T5740] hsr_slave_1: entered promiscuous mode [ 47.558861][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.561058][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.569373][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.575743][ T5749] hsr_slave_0: entered promiscuous mode [ 47.577970][ T5749] hsr_slave_1: entered promiscuous mode [ 47.580091][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 47.581970][ T5749] Cannot create hsr debugfs directory [ 47.600287][ T5739] hsr_slave_0: entered promiscuous mode [ 47.602505][ T5739] hsr_slave_1: entered promiscuous mode [ 47.604934][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.607177][ T5739] Cannot create hsr debugfs directory [ 47.704274][ T5741] hsr_slave_0: entered promiscuous mode [ 47.706575][ T5741] hsr_slave_1: entered promiscuous mode [ 47.708690][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.710491][ T5741] Cannot create hsr debugfs directory [ 47.887967][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.894341][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.897307][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.901915][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.905339][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.909953][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.912897][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.917083][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.964792][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.972268][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.975884][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.980158][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.982815][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.987500][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.990194][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.993927][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.041540][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.045717][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.048416][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.052333][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.056176][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.060013][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.062754][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.066632][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.112661][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.116873][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.120440][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.125129][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.127825][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.132150][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.140542][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.145365][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.167000][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.202505][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.228474][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.231109][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.238923][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.241209][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.268027][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.276552][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.291845][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.304735][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.307666][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.315363][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.322914][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.328751][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.331041][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.335277][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.342289][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.344635][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.358233][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.360971][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.371697][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.383564][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.385871][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.396664][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.399202][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.431609][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.445752][ T5753] Bluetooth: hci0: command tx timeout [ 48.446749][ T5751] Bluetooth: hci3: command tx timeout [ 48.448391][ T5743] Bluetooth: hci1: command tx timeout [ 48.525460][ T5743] Bluetooth: hci2: command tx timeout [ 48.616123][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.642964][ T5749] veth0_vlan: entered promiscuous mode [ 48.651392][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.657892][ T5749] veth1_vlan: entered promiscuous mode [ 48.681274][ T5749] veth0_macvtap: entered promiscuous mode [ 48.686779][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.695176][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.699487][ T5749] veth1_macvtap: entered promiscuous mode [ 48.708727][ T5739] veth0_vlan: entered promiscuous mode [ 48.715223][ T5739] veth1_vlan: entered promiscuous mode [ 48.731896][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.746470][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.764839][ T5739] veth0_macvtap: entered promiscuous mode [ 48.770987][ T5740] veth0_vlan: entered promiscuous mode [ 48.784883][ T5739] veth1_macvtap: entered promiscuous mode [ 48.800595][ T5741] veth0_vlan: entered promiscuous mode [ 48.812335][ T5741] veth1_vlan: entered promiscuous mode [ 48.815610][ T5740] veth1_vlan: entered promiscuous mode [ 48.840537][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.844704][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.848885][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.865046][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.870737][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.870880][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.873911][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.891279][ T5740] veth0_macvtap: entered promiscuous mode [ 48.899650][ T5741] veth0_macvtap: entered promiscuous mode [ 48.904421][ T5740] veth1_macvtap: entered promiscuous mode [ 48.910364][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.911342][ T5741] veth1_macvtap: entered promiscuous mode [ 48.922998][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.928653][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.934269][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.944815][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.947024][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.960912][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.977431][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.981220][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.005141][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.007777][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.010828][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.052294][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.056926][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.082344][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.088407][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.093983][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.111091][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.118698][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.160470][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.166024][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.180285][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.183803][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.187386][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.204299][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.209178][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.218841][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.222044][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.230858][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.253946][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.262502][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.272352][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.287727][ T5901] loop0: detected capacity change from 0 to 32768 [ 49.295967][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.303555][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.333829][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.338667][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.355980][ T41] audit: type=1800 audit(1785856552.047:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idVendor" dev="configfs" ino=10410 res=0 errno=0 [ 49.367152][ T41] audit: type=1800 audit(1785856552.047:3): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idProduct" dev="configfs" ino=10411 res=0 errno=0 [ 49.380604][ T41] audit: type=1800 audit(1785856552.047:4): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="process_ump" dev="configfs" ino=10417 res=0 errno=0 [ 49.387252][ T5910] PM: suspend entry (deep) [ 49.391904][ T41] audit: type=1800 audit(1785856552.057:5): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="direction" dev="configfs" ino=10418 res=0 errno=0 [ 49.404683][ T5901] ftl_cs: FTL header not found. [ 49.410630][ T41] audit: type=1800 audit(1785856552.057:6): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="active" dev="configfs" ino=10419 res=0 errno=0 [ 49.426107][ T41] audit: type=1800 audit(1785856552.057:7): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="direction" dev="configfs" ino=10422 res=0 errno=0 [ 49.435860][ T41] audit: type=1800 audit(1785856552.057:8): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="active" dev="configfs" ino=10423 res=0 errno=0 [ 49.443354][ T5819] Filesystems sync: 0.051 seconds [ 49.449212][ T41] audit: type=1800 audit(1785856552.067:9): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="UDC" dev="configfs" ino=10425 res=0 errno=0 [ 49.469770][ T5901] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 49.714389][ T5826] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.873563][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.878945][ T5826] usb 5-1: Dual-Role OTG device on HNP port [ 49.881658][ T5826] usb 5-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 7.02 [ 49.884722][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.895180][ T5826] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.898280][ T5826] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 49.905871][ T5826] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.908277][ T5826] usb 5-1: invalid MIDI out EP 0 [ 49.979750][ T5826] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 50.022399][ T5925] e1000e 0000:00:02.0 eth1: removed PHC [ 50.048091][ T5889] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 50.051275][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.060241][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 50.063137][ T5889] usb 7-1: setting power ON [ 50.136558][ T5925] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.214649][ T5910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.217587][ T5910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.230551][ T5910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.234998][ T5910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.237151][ T5910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.240920][ T5910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.244891][ T5910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.246905][ T5910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.251339][ T5910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.259667][ T5910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.261784][ T5910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.268683][ T5910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.288706][ T5928] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 50.413869][ T5899] NFSD: Unable to initialize client recovery tracking! (-110) [ 50.416686][ T5899] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 50.419476][ T5899] NFSD: starting 90-second grace period (net f0000503) [ 50.460963][ T5949] (syz.3.12,5949,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 50.464669][ T5949] (syz.3.12,5949,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 50.467382][ T5949] (syz.3.12,5949,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 50.470812][ T5949] (syz.3.12,5949,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 50.693407][ T5960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.744562][ T5960] md: invalid raid superblock magic on ram1 [ 50.747037][ T5960] md: ram1 does not have a valid v0.90 superblock, not importing! [ 51.033620][ T5846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.050887][ T41] audit: type=1800 audit(1785856553.737:10): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13" name="attr_allow_any_host" dev="configfs" ino=10442 res=0 errno=0 [ 51.052468][ T5980] nvmet: adding nsid 1 to subsystem testnqn [ 51.072358][ T41] audit: type=1800 audit(1785856553.757:11): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13" name="device_path" dev="configfs" ino=10444 res=0 errno=0 [ 51.134136][ T106] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:9f7a34f7-c12e-49eb-a698-ec9186480220. [ 51.146977][ T5980] nvme nvme0: creating 4 I/O queues. [ 51.152342][ T5980] nvme nvme0: new ctrl: "testnqn" [ 51.211203][ T5846] usb 8-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 51.215811][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.218886][ T5846] usb 8-1: Product: syz [ 51.220348][ T5846] usb 8-1: Manufacturer: syz [ 51.221917][ T5846] usb 8-1: SerialNumber: syz [ 51.227453][ T5984] block2mtd: error: cannot open device /dev/loop0 [ 51.239061][ T5846] uvcvideo 8-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 51.286181][ T5985] ubi0: attaching mtd1 [ 51.364328][ T5985] ubi0: scanning is finished [ 51.365912][ T5985] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 51.546443][ T5986] UBIFS error (pid: 5986): cannot open "ubi0_0", error -19 [ 51.556913][ T5985] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 51.563794][ T5743] Bluetooth: hci1: command 0x040f tx timeout [ 52.134678][ T5889] dvb-usb: bulk message failed: -110 (2/0) [ 52.145001][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 52.148465][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 52.151627][ T5889] usb 7-1: media controller created [ 52.155973][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.159271][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.159846][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 52.171433][ T5889] usb 7-1: selecting invalid altsetting 6 [ 52.173284][ T5889] usb 7-1: digital interface selection failed (-22) [ 52.175729][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 52.178940][ T5889] usb 7-1: setting power OFF [ 52.283635][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 52.283687][ T5751] Bluetooth: hci2: command 0x040f tx timeout [ 52.283700][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 52.874891][ T5889] dvb-usb: bulk message failed: -71 (2/0) [ 52.877351][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 52.880442][ T5889] usb 7-1: setting power ON [ 52.882115][ T5889] dvb-usb: bulk message failed: -71 (2/0) [ 52.884726][ T5889] usb 7-1: analog interface selection failed (-71) [ 52.904216][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 52.907782][ T5889] dvb_usb_cxusb 7-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 52.914216][ T5889] usb 7-1: USB disconnect, device number 2 [ 53.203646][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.357383][ T5889] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 53.360963][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.365166][ T5889] usb 7-1: Product: syz [ 53.366926][ T5889] usb 7-1: Manufacturer: syz [ 53.368461][ T5889] usb 7-1: SerialNumber: syz [ 53.376716][ T5889] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 53.644771][ T5751] Bluetooth: hci1: command 0x040f tx timeout [ 53.760246][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.764451][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.363894][ T5751] Bluetooth: hci0: command 0x040f tx timeout [ 54.363982][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 54.363996][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 54.445536][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.448898][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.241400][ T5846] uvcvideo 8-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 55.245090][ T5846] uvcvideo 8-1:1.0: No streaming interface found for terminal 32770. [ 55.257397][ T5846] usb 8-1: USB disconnect, device number 2 [ 55.283564][ T6013] block2mtd: error: cannot open device /dev/loop0 [ 55.339797][ T6014] ubi0: attaching mtd1 [ 55.347594][ T6014] ubi0: scanning is finished [ 55.349184][ T6014] ubi0: empty MTD device detected [ 55.514959][ T6014] ubi0: attached mtd1 (name "block2mtd: /dev/loop0", size 16 MiB) [ 55.518166][ T6014] ubi0: PEB size: 65536 bytes (64 KiB), LEB size: 65408 bytes [ 55.521086][ T6014] ubi0: min./max. I/O unit sizes: 1/4096, sub-page size 1 [ 55.523867][ T6014] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 55.526777][ T6014] ubi0: good PEBs: 256, bad PEBs: 0, corrupted PEBs: 0 [ 55.529263][ T6014] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128 [ 55.531758][ T6014] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2660959308 [ 55.535324][ T6014] ubi0: available PEBs: 252, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 55.539296][ T6017] ubi0: background thread "ubi_bgt0d" started, PID 6017 [ 55.606769][ T6013] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 55.609482][ T6013] UBIFS error (pid: 6013): cannot open "ubi0_0", error -19 [ 55.723537][ T5743] Bluetooth: hci1: command 0x040f tx timeout [ 55.723554][ T6022] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 55.736194][ T6022] CIFS: Attempting to mount //127.0.0.1/test [ 56.443571][ T5743] Bluetooth: hci0: command 0x040f tx timeout [ 56.443604][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 56.444289][ T5753] Bluetooth: hci2: command 0x040f tx timeout [ 56.553932][ T6022] CIFS: VFS: cifs_mount failed w/return code = -112 [ 56.693667][ T5889] gspca_mr97310a: reg write [21] error -110 [ 56.695540][ T5889] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -110 [ 56.863680][ T5846] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.018214][ T5846] usb 8-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 57.021352][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.024070][ T5846] usb 8-1: Product: syz [ 57.025396][ T5846] usb 8-1: Manufacturer: syz [ 57.026915][ T5846] usb 8-1: SerialNumber: syz [ 57.460757][ T10] usb 7-1: USB disconnect, device number 3 [ 57.803518][ T5751] Bluetooth: hci1: command 0x040f tx timeout [ 58.523637][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 58.523670][ T5743] Bluetooth: hci2: command 0x040f tx timeout [ 58.523724][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 58.614357][ T6035] NFSD: Unable to initialize client recovery tracking! (-110) [ 58.617151][ T6035] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 58.620734][ T6035] NFSD: starting 90-second grace period (net f0000440) [ 59.076995][ T6041] Zero length message leads to an empty skb [ 59.107650][ T6043] block2mtd: error: cannot open device /dev/loop0 [ 59.137895][ T6043] ubi: mtd1 is already attached to ubi0 [ 59.264367][ T5846] usb 8-1: USB disconnect, device number 3 [ 59.286351][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 59.345818][ T6043] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 59.349207][ T6043] UBIFS error (pid: 6043): cannot open "ubi0_0", error -19 [ 59.444413][ T6048] CIFS: VFS: UNC: path must begin with // or \\ [ 59.450017][ T6048] Malformed UNC in devname [ 59.450017][ T6048] [ 59.453021][ T6048] CIFS: VFS: Malformed UNC in devname [ 59.733663][ T5818] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.883711][ T5743] Bluetooth: hci1: command 0x040f tx timeout [ 59.884892][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 59.889327][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 59.892317][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 59.895486][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 59.898588][ T5818] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 59.901881][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.910710][ T6050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.913103][ T6050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.916619][ T6050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.919727][ T6050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.924085][ T5818] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 60.093646][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.245146][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 60.248836][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.258819][ T34] usbtest 8-1:1.0: Linux gadget zero [ 60.261165][ T34] usbtest 8-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 60.603688][ T5743] Bluetooth: hci2: command 0x040f tx timeout [ 60.603842][ T5751] Bluetooth: hci3: command 0x040f tx timeout [ 60.603927][ T5753] Bluetooth: hci0: command 0x040f tx timeout [ 60.860779][ T1487] usb 8-1: USB disconnect, device number 4 [ 61.487703][ T6062] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 63.152422][ T5818] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 63.162784][ T5818] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 63.170235][ T5818] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 63.179199][ T5818] usb 7-1: USB disconnect, device number 4 [ 63.188799][ T6067] block2mtd: error: cannot open device /dev/loop0 [ 63.191469][ T5818] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 63.198163][ T5818] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 63.201686][ T5818] mos7720 7-1:1.0: device disconnected [ 63.220033][ T6067] ubi: mtd1 is already attached to ubi0 [ 63.429554][ T6067] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 63.432494][ T6067] UBIFS error (pid: 6067): cannot open "ubi0_0", error -19 [ 63.520893][ T6070] PM: suspend entry (deep) [ 63.524692][ T6070] PM: suspend exit [ 64.598462][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.603249][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.605995][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.609342][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.611966][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.683947][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 64.935868][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.938105][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.940495][ T6072] bridge_slave_0: entered allmulticast mode [ 64.943134][ T6072] bridge_slave_0: entered promiscuous mode [ 64.946600][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.948866][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.951130][ T6072] bridge_slave_1: entered allmulticast mode [ 64.953918][ T6072] bridge_slave_1: entered promiscuous mode [ 64.970844][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.975669][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.991715][ T6072] team0: Port device team_slave_0 added [ 64.995201][ T6072] team0: Port device team_slave_1 added [ 65.008479][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.010568][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.018400][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.022540][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.024895][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.032432][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.056919][ T6072] hsr_slave_0: entered promiscuous mode [ 65.059181][ T6072] hsr_slave_1: entered promiscuous mode [ 65.061238][ T6072] debugfs: 'hsr0' already exists in 'hsr' [ 65.062936][ T6072] Cannot create hsr debugfs directory [ 65.154179][ T6072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.158584][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.161310][ T6072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.167218][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.170021][ T6072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.174485][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.178160][ T6072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.183375][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.208872][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.211572][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.214218][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.216444][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.268071][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.278432][ T224] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.281908][ T224] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.288988][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.296507][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.298713][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.307582][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.310577][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.562771][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.712319][ T6072] veth0_vlan: entered promiscuous mode [ 65.719524][ T6072] veth1_vlan: entered promiscuous mode [ 65.737559][ T6072] veth0_macvtap: entered promiscuous mode [ 65.741941][ T6072] veth1_macvtap: entered promiscuous mode [ 65.750978][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.757747][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.793611][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.797189][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.804398][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.806799][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.822274][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.824823][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.833683][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.837475][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.123594][ T5818] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 66.294827][ T5818] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 66.297751][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.302783][ T5818] usb 9-1: NFC: intf ffff88804693b000 id ffffffff8fc6b7a0 [ 66.313724][ T5818] nfcmrvl 9-1:1.0: NFC: registered with nci successfully [ 66.560281][ T5819] nfcmrvl 9-1:1.0: NFC: send entry, len 4 [ 66.683788][ T5751] Bluetooth: hci4: command tx timeout [ 68.043664][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 68.763528][ T5751] Bluetooth: hci4: command tx timeout [ 69.568109][ T6117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.573104][ C3] nfcmrvl 9-1:1.0: NFC: urb ffff888071354a00 status -2 count 0 [ 69.590353][ T59] usb 9-1: USB disconnect, device number 2 [ 69.597413][ T59] usb 9-1: NFC: intf ffff88804693b000 [ 70.853653][ T5751] Bluetooth: hci4: command tx timeout [ 70.926247][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.929479][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413552][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 71.719500][ T5743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.727561][ T5743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.731149][ T5743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.735405][ T5743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.738593][ T5743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.127337][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.131012][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.133579][ T6126] bridge_slave_0: entered allmulticast mode [ 72.136258][ T6126] bridge_slave_0: entered promiscuous mode [ 72.139627][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.141949][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.144348][ T6126] bridge_slave_1: entered allmulticast mode [ 72.147055][ T6126] bridge_slave_1: entered promiscuous mode [ 72.162049][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.166730][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.190596][ T6126] team0: Port device team_slave_0 added [ 72.195663][ T6126] team0: Port device team_slave_1 added [ 72.221295][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.224271][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.234570][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.241037][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.243965][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.254294][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.296692][ T6126] hsr_slave_0: entered promiscuous mode [ 72.299691][ T6126] hsr_slave_1: entered promiscuous mode [ 72.302404][ T6126] debugfs: 'hsr0' already exists in 'hsr' [ 72.305039][ T6126] Cannot create hsr debugfs directory [ 72.400804][ T6126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.405623][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.408896][ T6126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.412675][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.415459][ T6126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.419347][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.422006][ T6126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.425766][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.446630][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.449428][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.452343][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.455146][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.508766][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.520090][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.525122][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.536445][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.544753][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.547787][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.556515][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.559685][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.863249][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.923640][ T5743] Bluetooth: hci4: command tx timeout [ 73.028731][ T6126] veth0_vlan: entered promiscuous mode [ 73.034298][ T6126] veth1_vlan: entered promiscuous mode [ 73.049390][ T6126] veth0_macvtap: entered promiscuous mode [ 73.054374][ T6126] veth1_macvtap: entered promiscuous mode [ 73.064246][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.069833][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.107456][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110356][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.118603][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.121790][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.133734][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.136620][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142873][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.146058][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.473608][ T5846] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 73.655989][ T5846] usb 10-1: not running at top speed; connect to a high speed hub [ 73.661959][ T5846] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 73.665639][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.668690][ T5846] usb 10-1: Product: syz [ 73.670356][ T5846] usb 10-1: Manufacturer: syz [ 73.672209][ T5846] usb 10-1: SerialNumber: syz [ 73.805261][ T5743] Bluetooth: hci5: command tx timeout [ 74.833608][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 75.883684][ T5743] Bluetooth: hci5: command tx timeout [ 76.459839][ T5846] cxacru_cm: 3 callbacks suppressed [ 76.459856][ T5846] cxacru 10-1:1.0: send of cm 0x90 failed (-71) [ 76.466604][ T6171] cxacru 10-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 76.469720][ T6171] cxacru 10-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 76.479016][ T5846] usb 10-1: USB disconnect, device number 2 [ 76.644182][ T5751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.648850][ T6176] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 76.651319][ T5751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.654877][ T5751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.658470][ T5751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.660918][ T5751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.721303][ T6186] block2mtd: error: cannot open device /dev/loop0 [ 76.755072][ T6186] ubi: mtd1 is already attached to ubi0 [ 76.964222][ T6186] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 76.967361][ T6186] UBIFS error (pid: 6186): cannot open "ubi0_0", error -19 [ 77.012912][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.018364][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.020824][ T6177] bridge_slave_0: entered allmulticast mode [ 77.023808][ T6177] bridge_slave_0: entered promiscuous mode [ 77.029244][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.031822][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.034218][ T6177] bridge_slave_1: entered allmulticast mode [ 77.037117][ T6177] bridge_slave_1: entered promiscuous mode [ 77.060313][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.065120][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.081658][ T6177] team0: Port device team_slave_0 added [ 77.085557][ T6177] team0: Port device team_slave_1 added [ 77.098600][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.100674][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.108616][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.112907][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.115118][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.122865][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.145687][ T6177] hsr_slave_0: entered promiscuous mode [ 77.148026][ T6177] hsr_slave_1: entered promiscuous mode [ 77.150031][ T6177] debugfs: 'hsr0' already exists in 'hsr' [ 77.151760][ T6177] Cannot create hsr debugfs directory [ 77.240983][ T6177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.245676][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.248523][ T6177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 77.253021][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.255878][ T6177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.259831][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.262535][ T6177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.267471][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.282526][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.284824][ T6177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.287249][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.289425][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.332941][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.341274][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.345512][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.354537][ T6177] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.361828][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.364849][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.371665][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.374180][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.608274][ T6177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.765697][ T6177] veth0_vlan: entered promiscuous mode [ 77.772334][ T6177] veth1_vlan: entered promiscuous mode [ 77.800250][ T6177] veth0_macvtap: entered promiscuous mode [ 77.807527][ T6177] veth1_macvtap: entered promiscuous mode [ 77.820054][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.827003][ T6177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.843889][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.847023][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.883839][ T5819] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.884181][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.887434][ T5819] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.888997][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.911053][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.913569][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.965247][ T5743] Bluetooth: hci5: command tx timeout [ 78.284785][ T59] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 78.450784][ T59] usb 11-1: unable to get BOS descriptor or descriptor too short [ 78.454739][ T59] usb 11-1: not running at top speed; connect to a high speed hub [ 78.460655][ T59] usb 11-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 78.464305][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.467509][ T59] usb 11-1: Product: syz [ 78.469181][ T59] usb 11-1: Manufacturer: syz [ 78.471098][ T59] usb 11-1: SerialNumber: syz [ 78.693645][ T5743] Bluetooth: hci6: command tx timeout [ 79.083775][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 79.272501][ T5751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.276842][ T5751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.280745][ T5751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.284366][ T5751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.287116][ T5751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.612943][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.615741][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.618025][ T6232] bridge_slave_0: entered allmulticast mode [ 79.620643][ T6232] bridge_slave_0: entered promiscuous mode [ 79.624817][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.627165][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.629481][ T6232] bridge_slave_1: entered allmulticast mode [ 79.632234][ T6232] bridge_slave_1: entered promiscuous mode [ 79.649901][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.655535][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.671026][ T6232] team0: Port device team_slave_0 added [ 79.674433][ T6232] team0: Port device team_slave_1 added [ 79.688897][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.691145][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.693204][ T59] usb 11-1: 1:1: cannot set freq 8000 to ep 0x1 [ 79.700010][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.703503][ T59] usb 11-1: 2:1: cannot set freq 8000 to ep 0x81 [ 79.709632][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.712474][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.722844][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.728256][ T59] usb 11-1: USB disconnect, device number 2 [ 79.771380][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 79.794294][ T6232] hsr_slave_0: entered promiscuous mode [ 79.797447][ T6232] hsr_slave_1: entered promiscuous mode [ 79.799929][ T6232] debugfs: 'hsr0' already exists in 'hsr' [ 79.801815][ T6232] Cannot create hsr debugfs directory [ 79.903769][ T6232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.908798][ T6232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.911573][ T6232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.916343][ T6232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.919125][ T6232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.923515][ T6232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.926222][ T6232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.930358][ T6232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.949122][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.951401][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.953697][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.955878][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.988600][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.996641][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.000355][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.011710][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.018094][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.021117][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.027502][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.029877][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.043913][ T5743] Bluetooth: hci5: command tx timeout [ 80.111525][ T6260] NFSD: Failed to start, no listeners configured. [ 80.269658][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.341354][ T6278] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 80.378467][ T34] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 80.388540][ T41] audit: type=1800 audit(1785856583.077:15): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="idVendor" dev="configfs" ino=10013 res=0 errno=0 [ 80.396166][ T41] audit: type=1800 audit(1785856583.077:16): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="idProduct" dev="configfs" ino=10014 res=0 errno=0 [ 80.405376][ T41] audit: type=1800 audit(1785856583.077:17): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="process_ump" dev="configfs" ino=10015 res=0 errno=0 [ 80.412028][ T41] audit: type=1800 audit(1785856583.077:18): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="direction" dev="configfs" ino=10016 res=0 errno=0 [ 80.416882][ T6232] veth0_vlan: entered promiscuous mode [ 80.421881][ T41] audit: type=1800 audit(1785856583.077:19): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="active" dev="configfs" ino=10017 res=0 errno=0 [ 80.427166][ T6232] veth1_vlan: entered promiscuous mode [ 80.428290][ T41] audit: type=1800 audit(1785856583.077:20): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="direction" dev="configfs" ino=10018 res=0 errno=0 [ 80.436078][ T41] audit: type=1800 audit(1785856583.077:21): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="active" dev="configfs" ino=10019 res=0 errno=0 [ 80.442097][ T41] audit: type=1800 audit(1785856583.077:22): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.60" name="UDC" dev="configfs" ino=10020 res=0 errno=0 [ 80.448068][ T6232] veth0_macvtap: entered promiscuous mode [ 80.454856][ T6232] veth1_macvtap: entered promiscuous mode [ 80.467636][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.476844][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.529486][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.533880][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.557905][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.560682][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.573942][ T5819] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.577469][ T5819] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595860][ T5819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.599451][ T5819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.613718][ T34] psmouse serio2: Failed to enable mouse on [ 80.763631][ T5743] Bluetooth: hci6: command tx timeout [ 81.168517][ T29] cfg80211: failed to load regulatory.db [ 81.171143][ T5910] Freezing user space processes [ 81.333612][ T5743] Bluetooth: hci7: command tx timeout [ 81.773744][ T6289] NFSD: Unable to initialize client recovery tracking! (-110) [ 81.776209][ T6289] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 81.779018][ T6289] NFSD: starting 10-second grace period (net f00009f7) [ 82.843737][ T5743] Bluetooth: hci6: command tx timeout [ 83.403786][ T5743] Bluetooth: hci7: command tx timeout [ 84.923695][ T5743] Bluetooth: hci6: command tx timeout [ 85.483886][ T5743] Bluetooth: hci7: command tx timeout [ 87.564597][ T5743] Bluetooth: hci7: command tx timeout [ 101.184142][ T5910] Freezing user space processes failed after 20.008 seconds (4 tasks refusing to freeze, wq_busy=0): [ 101.188726][ T5910] task:syz-executor state:S stack:22552 pid:5739 tgid:5739 ppid:1 task_flags:0x40054c flags:0x08080001 [ 101.192378][ T5910] Call Trace: [ 101.193395][ T5910] [ 101.194384][ T5910] __schedule+0x125c/0x6730 [ 101.195796][ T5910] ? __pfx___schedule+0x10/0x10 [ 101.197339][ T5910] ? find_held_lock+0x2b/0x80 [ 101.198753][ T5910] ? schedule+0x225/0x2c0 [ 101.200061][ T5910] schedule+0xdd/0x2c0 [ 101.201292][ T5910] do_wait+0x1a7/0x570 [ 101.202572][ T5910] kernel_wait4+0x16d/0x280 [ 101.204678][ T5910] ? __pfx_kernel_wait4+0x10/0x10 [ 101.206194][ T5910] ? lockdep_hardirqs_on+0x78/0x100 [ 101.207837][ T5910] ? __pfx_child_wait_callback+0x10/0x10 [ 101.209473][ T5910] ? find_held_lock+0x2b/0x80 [ 101.210884][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.212486][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.214171][ T5910] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.215800][ T5910] ? do_raw_write_lock+0x11e/0x260 [ 101.217493][ T5910] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.219290][ T5910] ? do_exit+0x2205/0x2ae0 [ 101.220710][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.222132][ T5910] do_exit+0x2377/0x2ae0 [ 101.223430][ T5910] ? __pfx_do_exit+0x10/0x10 [ 101.224901][ T5910] ? do_raw_spin_lock+0x128/0x260 [ 101.226438][ T5910] ? find_held_lock+0x2b/0x80 [ 101.227980][ T5910] ? get_signal+0x7e0/0x21e0 [ 101.229437][ T5910] do_group_exit+0xd5/0x2a0 [ 101.230867][ T5910] get_signal+0x1ec7/0x21e0 [ 101.232304][ T5910] ? __pfx_get_signal+0x10/0x10 [ 101.233874][ T5910] ? __fput+0x68d/0xb50 [ 101.235198][ T5910] arch_do_signal_or_restart+0x91/0x7a0 [ 101.236950][ T5910] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 101.238747][ T5910] ? __fput+0x692/0xb50 [ 101.240052][ T5910] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.241948][ T5910] exit_to_user_mode_loop+0x139/0x6f0 [ 101.243681][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.245179][ T5910] do_int80_emulation+0x513/0x720 [ 101.246777][ T5910] asm_int80_emulation+0x1a/0x20 [ 101.248325][ T5910] RIP: 0023:0xf71773eb [ 101.249565][ T5910] RSP: 002b:00000000ffbe895c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 101.252096][ T5910] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffbe8af8 [ 101.254540][ T5910] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.256962][ T5910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.259391][ T5910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.261790][ T5910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.264204][ T5910] [ 101.265184][ T5910] task:syz-executor state:S stack:22968 pid:5740 tgid:5740 ppid:1 task_flags:0x40054c flags:0x08080001 [ 101.268768][ T5910] Call Trace: [ 101.269798][ T5910] [ 101.270728][ T5910] __schedule+0x125c/0x6730 [ 101.272152][ T5910] ? __pfx___schedule+0x10/0x10 [ 101.273698][ T5910] ? find_held_lock+0x2b/0x80 [ 101.275156][ T5910] ? schedule+0x225/0x2c0 [ 101.276570][ T5910] schedule+0xdd/0x2c0 [ 101.278086][ T5910] do_wait+0x1a7/0x570 [ 101.279346][ T5910] kernel_wait4+0x16d/0x280 [ 101.280751][ T5910] ? __pfx_kernel_wait4+0x10/0x10 [ 101.282299][ T5910] ? __pfx_child_wait_callback+0x10/0x10 [ 101.284048][ T5910] ? find_held_lock+0x2b/0x80 [ 101.286392][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.288123][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.289805][ T5910] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.291453][ T5910] ? do_raw_write_lock+0x11e/0x260 [ 101.293063][ T5910] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.294813][ T5910] ? do_exit+0x2205/0x2ae0 [ 101.296151][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.297687][ T5910] do_exit+0x2377/0x2ae0 [ 101.298956][ T5910] ? __pfx_do_exit+0x10/0x10 [ 101.300353][ T5910] ? do_raw_spin_lock+0x128/0x260 [ 101.301842][ T5910] ? find_held_lock+0x2b/0x80 [ 101.303284][ T5910] ? get_signal+0x7e0/0x21e0 [ 101.304715][ T5910] do_group_exit+0xd5/0x2a0 [ 101.306078][ T5910] get_signal+0x1ec7/0x21e0 [ 101.307756][ T5910] ? __pfx_get_signal+0x10/0x10 [ 101.309393][ T5910] ? __fput+0x68d/0xb50 [ 101.310673][ T5910] arch_do_signal_or_restart+0x91/0x7a0 [ 101.312338][ T5910] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 101.314123][ T5910] ? __fput+0x692/0xb50 [ 101.315398][ T5910] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.317293][ T5910] exit_to_user_mode_loop+0x139/0x6f0 [ 101.318891][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.320329][ T5910] do_int80_emulation+0x513/0x720 [ 101.321834][ T5910] asm_int80_emulation+0x1a/0x20 [ 101.323310][ T5910] RIP: 0023:0xf71f73eb [ 101.324662][ T5910] RSP: 002b:00000000ffff457c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 101.327300][ T5910] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffff4718 [ 101.329738][ T5910] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.332069][ T5910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.334467][ T5910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.337082][ T5910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.339603][ T5910] [ 101.340604][ T5910] task:syz-executor state:S stack:23272 pid:5741 tgid:5741 ppid:1 task_flags:0x40054c flags:0x08080001 [ 101.344272][ T5910] Call Trace: [ 101.345308][ T5910] [ 101.346201][ T5910] __schedule+0x125c/0x6730 [ 101.347741][ T5910] ? __pfx___schedule+0x10/0x10 [ 101.349207][ T5910] ? find_held_lock+0x2b/0x80 [ 101.350601][ T5910] ? schedule+0x225/0x2c0 [ 101.351917][ T5910] schedule+0xdd/0x2c0 [ 101.353182][ T5910] do_wait+0x1a7/0x570 [ 101.354460][ T5910] kernel_wait4+0x16d/0x280 [ 101.355822][ T5910] ? __pfx_kernel_wait4+0x10/0x10 [ 101.357352][ T5910] ? lockdep_hardirqs_on+0x78/0x100 [ 101.358908][ T5910] ? __pfx_child_wait_callback+0x10/0x10 [ 101.360577][ T5910] ? find_held_lock+0x2b/0x80 [ 101.361982][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.363594][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.365172][ T5910] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.366705][ T5910] ? do_raw_write_lock+0x11e/0x260 [ 101.368223][ T5910] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.369858][ T5910] ? do_exit+0x2205/0x2ae0 [ 101.371215][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.372728][ T5910] do_exit+0x2377/0x2ae0 [ 101.374101][ T5910] ? __pfx_do_exit+0x10/0x10 [ 101.375480][ T5910] ? do_raw_spin_lock+0x128/0x260 [ 101.376974][ T5910] ? find_held_lock+0x2b/0x80 [ 101.378368][ T5910] ? get_signal+0x7e0/0x21e0 [ 101.379814][ T5910] do_group_exit+0xd5/0x2a0 [ 101.381245][ T5910] get_signal+0x1ec7/0x21e0 [ 101.382681][ T5910] ? __pfx_get_signal+0x10/0x10 [ 101.384279][ T5910] ? __fput+0x68d/0xb50 [ 101.385603][ T5910] arch_do_signal_or_restart+0x91/0x7a0 [ 101.387722][ T5910] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 101.389460][ T5910] ? __fput+0x692/0xb50 [ 101.391222][ T5910] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.393122][ T5910] exit_to_user_mode_loop+0x139/0x6f0 [ 101.394826][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.396319][ T5910] do_int80_emulation+0x513/0x720 [ 101.397890][ T5910] asm_int80_emulation+0x1a/0x20 [ 101.399413][ T5910] RIP: 0023:0xf71f73eb [ 101.400661][ T5910] RSP: 002b:00000000fffde8dc EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 101.403196][ T5910] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000fffdea78 [ 101.406016][ T5910] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.408398][ T5910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.410793][ T5910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.413180][ T5910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.415710][ T5910] [ 101.416734][ T5910] task:syz-executor state:S stack:21880 pid:5749 tgid:5749 ppid:1 task_flags:0x40054c flags:0x08080001 [ 101.420386][ T5910] Call Trace: [ 101.421491][ T5910] [ 101.422399][ T5910] __schedule+0x125c/0x6730 [ 101.423836][ T5910] ? __pfx___schedule+0x10/0x10 [ 101.425190][ T5910] ? find_held_lock+0x2b/0x80 [ 101.426504][ T5910] ? schedule+0x225/0x2c0 [ 101.427758][ T5910] schedule+0xdd/0x2c0 [ 101.428889][ T5910] do_wait+0x1a7/0x570 [ 101.430028][ T5910] kernel_wait4+0x16d/0x280 [ 101.431296][ T5910] ? __pfx_kernel_wait4+0x10/0x10 [ 101.432685][ T5910] ? lockdep_hardirqs_on+0x78/0x100 [ 101.434227][ T5910] ? __pfx_child_wait_callback+0x10/0x10 [ 101.435880][ T5910] ? find_held_lock+0x2b/0x80 [ 101.437409][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.439112][ T5910] ? zap_pid_ns_processes+0x286/0x6a0 [ 101.440839][ T5910] zap_pid_ns_processes+0x2ca/0x6a0 [ 101.442400][ T5910] ? do_raw_write_lock+0x11e/0x260 [ 101.443991][ T5910] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 101.445724][ T5910] ? do_exit+0x2205/0x2ae0 [ 101.447089][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.448539][ T5910] do_exit+0x2377/0x2ae0 [ 101.449854][ T5910] ? __pfx_do_exit+0x10/0x10 [ 101.451297][ T5910] ? do_raw_spin_lock+0x128/0x260 [ 101.452797][ T5910] ? find_held_lock+0x2b/0x80 [ 101.454269][ T5910] ? get_signal+0x7e0/0x21e0 [ 101.455670][ T5910] do_group_exit+0xd5/0x2a0 [ 101.457183][ T5910] get_signal+0x1ec7/0x21e0 [ 101.458996][ T5910] ? __pfx_get_signal+0x10/0x10 [ 101.460694][ T5910] ? __fput+0x68d/0xb50 [ 101.461989][ T5910] arch_do_signal_or_restart+0x91/0x7a0 [ 101.463709][ T5910] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 101.465426][ T5910] ? __fput+0x692/0xb50 [ 101.466723][ T5910] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.468622][ T5910] exit_to_user_mode_loop+0x139/0x6f0 [ 101.470253][ T5910] ? rcu_is_watching+0x12/0xc0 [ 101.471775][ T5910] do_int80_emulation+0x513/0x720 [ 101.473342][ T5910] asm_int80_emulation+0x1a/0x20 [ 101.474883][ T5910] RIP: 0023:0xf71273eb [ 101.476128][ T5910] RSP: 002b:00000000ffb3074c EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 101.478650][ T5910] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ffb308e8 [ 101.481114][ T5910] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.483644][ T5910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.486067][ T5910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.488511][ T5910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.491332][ T5910] [ 101.493050][ T5910] OOM killer enabled. [ 101.494583][ T5910] Restarting tasks: Starting [ 101.503085][ T5910] Restarting tasks: Done [ 101.504864][ T5910] random: crng reseeded on system resumption [ 101.517303][ T5910] PM: suspend exit [ 101.520836][ T6025] PM: hibernation: hibernation entry [ 101.576842][ T6025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.579383][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.583119][ T6025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.586610][ T6025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.591536][ T6025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.595494][ T6025] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.616762][ T6025] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.658564][ T6025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 101.671731][ T6025] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 101.728325][ T6025] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 101.748194][ T6025] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 101.754828][ T6025] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 101.766403][ T6025] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 101.775326][ T6025] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 101.777862][ T6025] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 101.783157][ T6025] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 101.812773][ T5100] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 101.823276][ T5754] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 101.826417][ T64] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 101.827450][ T5100] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 101.827896][ T5750] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 101.831322][ T64] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 101.834119][ T5754] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 101.837986][ T5100] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 101.838541][ T5100] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 101.839320][ T5750] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 101.840565][ T5750] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 101.841056][ T5754] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 101.841939][ T64] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 101.842914][ T5754] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 101.845341][ T5754] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 101.848677][ T5100] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 101.855487][ T5754] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 101.860576][ T5756] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 101.871038][ T5743] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 101.874844][ T5100] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 102.147031][ T5819] Filesystems sync: 0.356 seconds [ 102.152991][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.259508][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.396070][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.525429][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.763380][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.765803][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.768193][ T6307] bridge_slave_0: entered allmulticast mode [ 102.771264][ T6307] bridge_slave_0: entered promiscuous mode [ 102.806333][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.808807][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.811038][ T6307] bridge_slave_1: entered allmulticast mode [ 102.814540][ T6307] bridge_slave_1: entered promiscuous mode [ 102.829092][ T13] bridge_slave_1: left allmulticast mode [ 102.831706][ T13] bridge_slave_1: left promiscuous mode [ 102.833981][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.845785][ T13] bridge_slave_0: left allmulticast mode [ 102.847759][ T13] bridge_slave_0: left promiscuous mode [ 102.850040][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.991364][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.997524][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.001029][ T13] bond0 (unregistering): Released all slaves [ 103.034639][ T6307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.059079][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.062640][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.065894][ T6311] bridge_slave_0: entered allmulticast mode [ 103.069783][ T6311] bridge_slave_0: entered promiscuous mode [ 103.075938][ T6307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.099704][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.103753][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.106205][ T6311] bridge_slave_1: entered allmulticast mode [ 103.109025][ T6311] bridge_slave_1: entered promiscuous mode [ 103.127717][ T6307] team0: Port device team_slave_0 added [ 103.130579][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.134278][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.136696][ T6305] bridge_slave_0: entered allmulticast mode [ 103.139977][ T6305] bridge_slave_0: entered promiscuous mode [ 103.163274][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.168205][ T6307] team0: Port device team_slave_1 added [ 103.176301][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.178736][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.181073][ T6305] bridge_slave_1: entered allmulticast mode [ 103.184067][ T6305] bridge_slave_1: entered promiscuous mode [ 103.228133][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.245258][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.247815][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.257560][ T6307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.263414][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.267619][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.277291][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.281862][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.285031][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.289114][ T6306] bridge_slave_0: entered allmulticast mode [ 103.293141][ T6306] bridge_slave_0: entered promiscuous mode [ 103.297747][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.300620][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.303551][ T6306] bridge_slave_1: entered allmulticast mode [ 103.307230][ T6306] bridge_slave_1: entered promiscuous mode [ 103.328871][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.364732][ T6311] team0: Port device team_slave_0 added [ 103.369140][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.412128][ T6311] team0: Port device team_slave_1 added [ 103.440562][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.460844][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.466901][ T6305] team0: Port device team_slave_0 added [ 103.471989][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.493059][ T6305] team0: Port device team_slave_1 added [ 103.504792][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.507038][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.515708][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.523808][ T6307] hsr_slave_0: entered promiscuous mode [ 103.526656][ T6307] hsr_slave_1: entered promiscuous mode [ 103.529208][ T6307] debugfs: 'hsr0' already exists in 'hsr' [ 103.531194][ T6307] Cannot create hsr debugfs directory [ 103.554110][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.556268][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.570970][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.583217][ T13] hsr_slave_0: left promiscuous mode [ 103.586702][ T13] hsr_slave_1: left promiscuous mode [ 103.589481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.592467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.596694][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.599646][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.609117][ T13] veth1_macvtap: left promiscuous mode [ 103.611444][ T13] veth0_macvtap: left promiscuous mode [ 103.614487][ T13] veth1_vlan: left promiscuous mode [ 103.616650][ T13] veth0_vlan: left promiscuous mode [ 103.653620][ T5753] Bluetooth: hci3: command 0x040f tx timeout [ 103.653646][ T5743] Bluetooth: hci0: command 0x040f tx timeout [ 103.761337][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.769914][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.803624][ T5743] Bluetooth: hci6: command 0x0c1a tx timeout [ 103.847274][ T6306] team0: Port device team_slave_0 added [ 103.849862][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.852174][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.861543][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.867008][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.871689][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.880128][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.883634][ T5743] Bluetooth: hci10: command tx timeout [ 103.893706][ T5743] Bluetooth: hci11: command tx timeout [ 103.909209][ T6306] team0: Port device team_slave_1 added [ 103.950148][ T6311] hsr_slave_0: entered promiscuous mode [ 103.952770][ T6311] hsr_slave_1: entered promiscuous mode [ 103.955384][ T6311] debugfs: 'hsr0' already exists in 'hsr' [ 103.957307][ T6311] Cannot create hsr debugfs directory [ 103.963636][ T5743] Bluetooth: hci8: command tx timeout [ 103.973610][ T5743] Bluetooth: hci9: command tx timeout [ 103.975533][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.977996][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.987289][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.000504][ T6305] hsr_slave_0: entered promiscuous mode [ 104.003018][ T6305] hsr_slave_1: entered promiscuous mode [ 104.006011][ T6305] debugfs: 'hsr0' already exists in 'hsr' [ 104.008375][ T6305] Cannot create hsr debugfs directory [ 104.030062][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.032227][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.039734][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.121923][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.186815][ T6306] hsr_slave_0: entered promiscuous mode [ 104.189224][ T6306] hsr_slave_1: entered promiscuous mode [ 104.191352][ T6306] debugfs: 'hsr0' already exists in 'hsr' [ 104.193131][ T6306] Cannot create hsr debugfs directory [ 104.345492][ T6307] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 104.349968][ T6307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.352583][ T6307] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 104.357691][ T6307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.361269][ T6307] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 104.376326][ T6307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.403917][ T6311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.411966][ T6307] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 104.416484][ T6307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.437416][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.455207][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.481736][ T6311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.509130][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.519682][ T6307] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.525095][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.527405][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.532813][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.534988][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.552284][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.597432][ T6311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.619291][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.657575][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.715674][ T6311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.761509][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.841815][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.934897][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.012793][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.031521][ T6307] veth0_vlan: entered promiscuous mode [ 105.039351][ T6307] veth1_vlan: entered promiscuous mode [ 105.057629][ T6307] veth0_macvtap: entered promiscuous mode [ 105.064951][ T6307] veth1_macvtap: entered promiscuous mode [ 105.094135][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.100352][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.162861][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.177992][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.181097][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.221469][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.225026][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.261796][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.273765][ T6373] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.277239][ T6373] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.293651][ T5791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.302256][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.313539][ T5791] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.365192][ T6306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.372498][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.381444][ T6306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.392116][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.395043][ T6306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.400554][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.413899][ T6306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.418188][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.475221][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 105.477833][ T6311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.481607][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.485857][ T6311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.491349][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.494036][ T6311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.499954][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.514252][ T6311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.518215][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.543678][ T5888] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 105.588292][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.630469][ T6305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.635683][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.638602][ T6305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.642201][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.647622][ T6305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.655233][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.660001][ T6305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.664613][ T6305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.689145][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.696040][ T5888] usb 14-1: not running at top speed; connect to a high speed hub [ 105.701107][ T5888] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 105.707651][ T5888] usb 14-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 105.711501][ T5888] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.720245][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 105.722979][ T6444] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 105.751820][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.787927][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.800156][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.812822][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.815604][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.829224][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.831553][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.859830][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.884427][ T5743] Bluetooth: hci6: command 0x0c1a tx timeout [ 105.894188][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.903209][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.925356][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.933936][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.936882][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.962921][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.964105][ T5743] Bluetooth: hci11: command tx timeout [ 105.965642][ T5888] usb 14-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 105.974208][ T5743] Bluetooth: hci10: command tx timeout [ 105.976802][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.978989][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.982958][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 106.028350][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.030683][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.043760][ T5743] Bluetooth: hci9: command tx timeout [ 106.045572][ T5753] Bluetooth: hci8: command tx timeout [ 106.051297][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.054030][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.096164][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.154832][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.252049][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.348519][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.370372][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.502720][ T13] bridge_slave_1: left allmulticast mode [ 106.505800][ T13] bridge_slave_1: left promiscuous mode [ 106.509998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.519708][ T13] bridge_slave_0: left allmulticast mode [ 106.524889][ T13] bridge_slave_0: left promiscuous mode [ 106.526779][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.538095][ T13] bridge_slave_1: left allmulticast mode [ 106.539858][ T13] bridge_slave_1: left promiscuous mode [ 106.541590][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.548485][ T13] bridge_slave_0: left allmulticast mode [ 106.550333][ T13] bridge_slave_0: left promiscuous mode [ 106.552046][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.561307][ T13] bridge_slave_1: left allmulticast mode [ 106.562977][ T13] bridge_slave_1: left promiscuous mode [ 106.566722][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.570466][ T13] bridge_slave_0: left allmulticast mode [ 106.572205][ T13] bridge_slave_0: left promiscuous mode [ 106.574249][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.582066][ T13] bridge_slave_1: left allmulticast mode [ 106.583878][ T13] bridge_slave_1: left promiscuous mode [ 106.585608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.589225][ T13] bridge_slave_0: left allmulticast mode [ 106.591032][ T13] bridge_slave_0: left promiscuous mode [ 106.592746][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.768384][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.777307][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.783966][ T13] bond0 (unregistering): Released all slaves [ 106.869694][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.880130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.884159][ T13] bond0 (unregistering): Released all slaves [ 106.953043][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.958740][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.963244][ T13] bond0 (unregistering): Released all slaves [ 107.018886][ T5888] dvb_usb_rtl28xxu 14-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 107.046300][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.050314][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.053837][ T13] bond0 (unregistering): Released all slaves [ 107.068296][ T6305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.144724][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.172644][ T6305] veth0_vlan: entered promiscuous mode [ 107.180046][ T6305] veth1_vlan: entered promiscuous mode [ 107.201491][ T6306] veth0_vlan: entered promiscuous mode [ 107.220141][ T6306] veth1_vlan: entered promiscuous mode [ 107.235933][ T6311] veth0_vlan: entered promiscuous mode [ 107.266095][ T6305] veth0_macvtap: entered promiscuous mode [ 107.270507][ T6305] veth1_macvtap: entered promiscuous mode [ 107.273981][ T6311] veth1_vlan: entered promiscuous mode [ 107.300517][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.310478][ T6305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.325428][ T6306] veth0_macvtap: entered promiscuous mode [ 107.349842][ T6311] veth0_macvtap: entered promiscuous mode [ 107.378786][ T6306] veth1_macvtap: entered promiscuous mode [ 107.385966][ T6311] veth1_macvtap: entered promiscuous mode [ 107.418466][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.433356][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.463324][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.474918][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.480076][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.493896][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.524112][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.524294][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.529497][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.583283][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.585883][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.654221][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.691560][ T5453] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.701934][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.704712][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.708640][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.710935][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.728568][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.732186][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.771672][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.776604][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.785815][ T6379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.790124][ T6379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.794681][ T6379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.798431][ T6379] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.805530][ T6379] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.809180][ T6379] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.812757][ T6379] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.817155][ T6379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.922168][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.924635][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.963661][ T5743] Bluetooth: hci6: command 0x0c1a tx timeout [ 107.968510][ T6573] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 108.002581][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.008359][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.051128][ T13] hsr_slave_0: left promiscuous mode [ 108.053422][ T13] hsr_slave_1: left promiscuous mode [ 108.053863][ T5743] Bluetooth: hci10: command tx timeout [ 108.054662][ T5753] Bluetooth: hci11: command tx timeout [ 108.056706][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.061875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.066676][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.069050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.079698][ T13] hsr_slave_0: left promiscuous mode [ 108.081742][ T13] hsr_slave_1: left promiscuous mode [ 108.084066][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.086451][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.089357][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.091668][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.096613][ T34] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 108.100892][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.104133][ T13] hsr_slave_0: left promiscuous mode [ 108.107250][ T13] hsr_slave_1: left promiscuous mode [ 108.109467][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.111729][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.113373][ T34] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 108.120709][ T34] usb 6-1: setting power ON [ 108.121130][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.123646][ T5743] Bluetooth: hci9: command tx timeout [ 108.124991][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.125411][ T5753] Bluetooth: hci8: command tx timeout [ 108.134453][ T13] hsr_slave_0: left promiscuous mode [ 108.136658][ T13] hsr_slave_1: left promiscuous mode [ 108.138669][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.141055][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.143971][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.146751][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.161378][ T13] veth1_macvtap: left promiscuous mode [ 108.164153][ T13] veth0_macvtap: left promiscuous mode [ 108.165933][ T13] veth1_vlan: left promiscuous mode [ 108.167691][ T13] veth0_vlan: left promiscuous mode [ 108.171566][ T13] veth1_macvtap: left promiscuous mode [ 108.174826][ T13] veth0_macvtap: left promiscuous mode [ 108.177310][ T13] veth1_vlan: left promiscuous mode [ 108.179549][ T13] veth0_vlan: left promiscuous mode [ 108.185971][ T13] veth1_macvtap: left promiscuous mode [ 108.188415][ T13] veth0_macvtap: left promiscuous mode [ 108.190855][ T13] veth1_vlan: left promiscuous mode [ 108.192873][ T13] veth0_vlan: left promiscuous mode [ 108.196083][ T13] veth1_macvtap: left promiscuous mode [ 108.197827][ T13] veth0_macvtap: left promiscuous mode [ 108.199513][ T13] veth1_vlan: left promiscuous mode [ 108.201149][ T13] veth0_vlan: left promiscuous mode [ 108.440975][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.448494][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.578751][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.585906][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.765967][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.776173][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.932497][ T13] team0 (unregistering): Port device team_slave_1 removed [ 108.942595][ T13] team0 (unregistering): Port device team_slave_0 removed [ 108.973625][ T6564] NFSD: Unable to initialize client recovery tracking! (-110) [ 108.975919][ T6564] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 108.978566][ T6564] NFSD: starting 90-second grace period (net f000075c) [ 109.040491][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.235354][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 109.299831][ T59] usb 14-1: USB disconnect, device number 2 [ 109.387213][ T41] audit: type=1800 audit(1785856612.077:23): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="idVendor" dev="configfs" ino=14866 res=0 errno=0 [ 109.394198][ T41] audit: type=1800 audit(1785856612.077:24): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="idProduct" dev="configfs" ino=18670 res=0 errno=0 [ 109.401538][ T41] audit: type=1800 audit(1785856612.077:25): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="process_ump" dev="configfs" ino=18671 res=0 errno=0 [ 109.407312][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 109.412053][ T41] audit: type=1800 audit(1785856612.077:26): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="direction" dev="configfs" ino=18672 res=0 errno=0 [ 109.418368][ T41] audit: type=1800 audit(1785856612.087:27): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="active" dev="configfs" ino=16972 res=0 errno=0 [ 109.425940][ T41] audit: type=1800 audit(1785856612.087:28): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="direction" dev="configfs" ino=16973 res=0 errno=0 [ 109.433425][ T41] audit: type=1800 audit(1785856612.087:29): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="active" dev="configfs" ino=16974 res=0 errno=0 [ 109.441462][ T41] audit: type=1800 audit(1785856612.097:30): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.70" name="UDC" dev="configfs" ino=14867 res=0 errno=0 [ 109.577415][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 109.755944][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 109.884085][ T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 109.929497][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 109.945496][ T6627] kAFS: No cell specified [ 110.025332][ T6634] lo speed is unknown, defaulting to 1000 [ 110.027979][ T6634] lo speed is unknown, defaulting to 1000 [ 110.030859][ T6634] lo speed is unknown, defaulting to 1000 [ 110.033381][ T6634] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.038177][ T6634] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.046353][ T6634] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.053781][ T6634] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.055078][ T10] usb 13-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 110.059870][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.064692][ T6634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.072447][ T10] cx231xx 13-1:1.1: New device @ 480 Mbps (2040:b120) with 2 interfaces [ 110.086257][ T6634] lo speed is unknown, defaulting to 1000 [ 110.089698][ T6634] lo speed is unknown, defaulting to 1000 [ 110.090990][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 110.096488][ T6634] lo speed is unknown, defaulting to 1000 [ 110.099569][ T6634] lo speed is unknown, defaulting to 1000 [ 110.102462][ T6634] lo speed is unknown, defaulting to 1000 [ 110.105461][ T6634] lo speed is unknown, defaulting to 1000 [ 110.108217][ T6634] lo speed is unknown, defaulting to 1000 [ 110.124799][ T5743] Bluetooth: hci10: command tx timeout [ 110.133661][ T5743] Bluetooth: hci11: command tx timeout [ 110.134488][ T34] dvb-usb: bulk message failed: -110 (2/0) [ 110.144700][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.155928][ T34] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.167348][ T34] usb 6-1: media controller created [ 110.179375][ T6641] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (5) [ 110.184489][ T6641] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (2) [ 110.195921][ T10] cx231xx 13-1:1.1: Failed to read PCB config [ 110.197267][ T5818] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 110.198625][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.198811][ T10] cx231xx 13-1:1.1: probe with driver cx231xx failed with error -110 [ 110.205667][ T5743] Bluetooth: hci9: command tx timeout [ 110.207699][ T5753] Bluetooth: hci8: command tx timeout [ 110.272503][ T10] usb 13-1: USB disconnect, device number 2 [ 110.290048][ T6648] PM: suspend entry (s2idle) [ 110.292271][ T6648] PM: suspend exit [ 110.292765][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.316263][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 110.440451][ T41] audit: type=1800 audit(1785856613.127:31): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="enable" dev="configfs" ino=18699 res=0 errno=0 [ 110.452544][ T41] audit: type=1800 audit(1785856613.127:32): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="idVendor" dev="configfs" ino=18705 res=0 errno=0 [ 110.498828][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 110.593864][ T5818] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 110.661695][ T5453] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.766582][ T5818] usb 14-1: not running at top speed; connect to a high speed hub [ 110.771448][ T5818] usb 14-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 110.774810][ T5818] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.777371][ T5818] usb 14-1: Product: syz [ 110.778670][ T5818] usb 14-1: Manufacturer: syz [ 110.780131][ T5818] usb 14-1: SerialNumber: syz [ 110.895610][ T34] usb 6-1: digital interface selection failed (-71) [ 110.899249][ T34] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 110.903198][ T34] usb 6-1: setting power OFF [ 110.905908][ T34] dvb-usb: bulk message failed: -2 (2/0) [ 110.908851][ T34] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 110.912971][ T34] usb 6-1: setting power ON [ 110.915105][ T34] dvb-usb: bulk message failed: -2 (2/0) [ 110.917741][ T34] usb 6-1: analog interface selection failed (-71) [ 110.946310][ T34] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 110.951270][ T34] dvb_usb_cxusb 6-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 110.960110][ T34] usb 6-1: USB disconnect, device number 2 [ 111.005649][ T6678] ------------[ cut here ]------------ [ 111.007772][ T6678] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21 [ 111.010361][ T6678] shift exponent 65529 is too large for 32-bit type 'int' [ 111.014086][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 111.014103][ T6678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.014110][ T6678] Call Trace: [ 111.014115][ T6678] [ 111.014119][ T6678] dump_stack_lvl+0x100/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.014137][ T6678] ubsan_epilogue+0xa/0x30 [ 111.014149][ T6678] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 111.014168][ T6678] e100_eeprom_load.cold+0x55/0x9e [ 111.014183][ T6678] ? dma_alloc_attrs+0x1cd/0x3a0 [ 111.014197][ T6678] ? __pfx_e100_eeprom_load+0x10/0x10 [ 111.014213][ T6678] ? lockdep_init_map_type+0x5c/0x250 [ 111.014227][ T6678] e100_probe+0xd07/0x1ab0 [ 111.014244][ T6678] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.014259][ T6678] ? __pfx_e100_probe+0x10/0x10 [ 111.014275][ T6678] local_pci_probe+0xdd/0x1b0 [ 111.014294][ T6678] pci_call_probe+0x176/0x800 [ 111.014309][ T6678] ? __pfx_pci_call_probe+0x10/0x10 [ 111.014324][ T6678] ? find_held_lock+0x2b/0x80 [ 111.014342][ T6678] ? pci_match_device+0x450/0x5f0 [ 111.014355][ T6678] ? pci_match_device+0x450/0x5f0 [ 111.014376][ T6678] ? pci_match_id+0x34d/0x3f0 [ 111.014391][ T6678] ? pci_match_device+0xb4/0x5f0 [ 111.014407][ T6678] pci_device_probe+0x1cd/0x370 [ 111.014421][ T6678] ? __pfx_pci_device_probe+0x10/0x10 [ 111.014435][ T6678] really_probe+0x241/0xa60 [ 111.014453][ T6678] __driver_probe_device+0x20e/0x450 [ 111.014471][ T6678] device_driver_attach+0xd1/0x220 [ 111.014489][ T6678] bind_store+0xf4/0x190 [ 111.014501][ T6678] ? __pfx_bind_store+0x10/0x10 [ 111.014515][ T6678] drv_attr_store+0x74/0xb0 [ 111.014526][ T6678] ? __pfx_drv_attr_store+0x10/0x10 [ 111.014537][ T6678] sysfs_kf_write+0xf2/0x150 [ 111.014555][ T6678] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.014567][ T6678] ? __pfx_sysfs_kf_write+0x10/0x10 [ 111.014583][ T6678] vfs_write+0x6ac/0x1050 [ 111.014595][ T6678] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 111.014609][ T6678] ? __pfx_vfs_write+0x10/0x10 [ 111.014619][ T6678] ? find_held_lock+0x2b/0x80 [ 111.014640][ T6678] ksys_write+0x12a/0x250 [ 111.014650][ T6678] ? __pfx_ksys_write+0x10/0x10 [ 111.014665][ T6678] __do_fast_syscall_32+0xe7/0x970 [ 111.014682][ T6678] do_fast_syscall_32+0x32/0x70 [ 111.014698][ T6678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.014713][ T6678] RIP: 0023:0xf7f44fec [ 111.014727][ T6678] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 111.014731][ T6678] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 111.014743][ T6678] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 111.014750][ T6678] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 111.014756][ T6678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.014762][ T6678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.014768][ T6678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.014781][ T6678] [ 111.014786][ T6678] ---[ end trace ]--- [ 111.123927][ T6678] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 111.126142][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 111.128868][ T6678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.131793][ T6678] Call Trace: [ 111.132823][ T6678] [ 111.133745][ T6678] dump_stack_lvl+0x100/0x190 [ 111.135301][ T6678] vpanic+0x552/0x970 [ 111.136534][ T6678] ? __pfx_vpanic+0x10/0x10 [ 111.137950][ T6678] panic+0xd1/0xe0 [ 111.139078][ T6678] ? __pfx_panic+0x10/0x10 [ 111.140425][ T6678] check_panic_on_warn.cold+0x19/0x34 [ 111.142036][ T6678] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 111.143949][ T6678] e100_eeprom_load.cold+0x55/0x9e [ 111.145471][ T6678] ? dma_alloc_attrs+0x1cd/0x3a0 [ 111.147010][ T6678] ? __pfx_e100_eeprom_load+0x10/0x10 [ 111.148705][ T6678] ? lockdep_init_map_type+0x5c/0x250 [ 111.150389][ T6678] e100_probe+0xd07/0x1ab0 [ 111.151810][ T6678] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.153661][ T6678] ? __pfx_e100_probe+0x10/0x10 [ 111.155204][ T6678] local_pci_probe+0xdd/0x1b0 [ 111.156693][ T6678] pci_call_probe+0x176/0x800 [ 111.158159][ T6678] ? __pfx_pci_call_probe+0x10/0x10 [ 111.159721][ T6678] ? find_held_lock+0x2b/0x80 [ 111.161157][ T6678] ? pci_match_device+0x450/0x5f0 [ 111.162707][ T6678] ? pci_match_device+0x450/0x5f0 [ 111.164199][ T6678] ? pci_match_id+0x34d/0x3f0 [ 111.165617][ T6678] ? pci_match_device+0xb4/0x5f0 [ 111.167149][ T6678] pci_device_probe+0x1cd/0x370 [ 111.168600][ T6678] ? __pfx_pci_device_probe+0x10/0x10 [ 111.170223][ T6678] really_probe+0x241/0xa60 [ 111.171620][ T6678] __driver_probe_device+0x20e/0x450 [ 111.173208][ T6678] device_driver_attach+0xd1/0x220 [ 111.174807][ T6678] bind_store+0xf4/0x190 [ 111.176118][ T6678] ? __pfx_bind_store+0x10/0x10 [ 111.177615][ T6678] drv_attr_store+0x74/0xb0 [ 111.178980][ T6678] ? __pfx_drv_attr_store+0x10/0x10 [ 111.180602][ T6678] sysfs_kf_write+0xf2/0x150 [ 111.181995][ T6678] kernfs_fop_write_iter+0x3e0/0x5f0 [ 111.183578][ T6678] ? __pfx_sysfs_kf_write+0x10/0x10 [ 111.185219][ T6678] vfs_write+0x6ac/0x1050 [ 111.186576][ T6678] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 111.188356][ T6678] ? __pfx_vfs_write+0x10/0x10 [ 111.189821][ T6678] ? find_held_lock+0x2b/0x80 [ 111.191380][ T6678] ksys_write+0x12a/0x250 [ 111.192835][ T6678] ? __pfx_ksys_write+0x10/0x10 [ 111.194484][ T6678] __do_fast_syscall_32+0xe7/0x970 [ 111.196251][ T6678] do_fast_syscall_32+0x32/0x70 [ 111.198005][ T6678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.200190][ T6678] RIP: 0023:0xf7f44fec [ 111.201580][ T6678] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 111.203733][ T6678] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 111.206518][ T6678] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 111.208936][ T6678] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 111.211496][ T6678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.214046][ T6678] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.216705][ T6678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.219408][ T6678] [ 111.221157][ T6678] Kernel Offset: disabled [ 111.222679][ T6678] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:16:53 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90004a07320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002d R14=ffffffff9b6f721f R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002ee23ffc CR3=00000000505dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011800000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffea000174da40 RCX=ffffffff824bd441 RDX=1ffffd40002e9b48 RSI=0000000000000008 RDI=ffffea000174da40 RBP=ffffea000174da48 RSP=ffffc900045975c8 R8 =0000000000000000 R9 =fffff940002e9b48 R10=ffffea000174da47 R11=0000000000000000 R12=ffff888040448048 R13=0000000000000000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff824bd45c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe3bdde2300 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a804a9cf40 CR3=000000004b596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1f28cafbce863196 87d5bb5ea8d07f8c 1f28cafbce863196 87d5bb5ea8d07f8c 1f28cafbce863196 87d5bb5ea8d07f8c 1f28cafbce863196 87d5bb5ea8d07f8c ZMM18=54943723653f9e33 a1727dc611502397 54943723653f9e33 a1727dc611502397 54943723653f9e33 a1727dc611502397 54943723653f9e33 a1727dc611502397 ZMM19=5f02000000000000 0000000000000004 5f02000000000000 0000000000000003 5f02000000000000 0000000000000002 5f02000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200026808000408 00080079c4000800 10a0030fffffffff 0210980300080010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90030fffffffff02 1088030008001080 0301020001810507 00ffffff01010004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0900ffffff000000 0409fa8000010100 2202090103020101 00401c041e40ffff ZMM24=1150239711502397 1150239711502397 1150239711502397 1150239711502397 1150239711502397 1150239711502397 1150239711502397 1150239711502397 ZMM25=a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 a1727dc6a1727dc6 ZMM26=653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 653f9e33653f9e33 ZMM27=5494372354943723 5494372354943723 5494372354943723 5494372354943723 5494372354943723 5494372354943723 5494372354943723 5494372354943723 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5e0200005e020000 5e0200005e020000 5e0200005e020000 5e0200005e020000 5e0200005e020000 5e0200005e020000 5e0200005e020000 5e0200005e020000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802b43b660 RBP=ffff88802b43b660 RSP=ffffc90003ec79a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81edce80 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4252dc4c80 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561de5c11768 CR3=000000002a77d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000efffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffe7fffffff ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 00007f1c23d0d310 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef0e408d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c23d0d6b0 00007ffef0e408e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c239d0e00 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef0e40940 00007ffef0e40950 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef0e40950 00007ffef0e40960 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c23a3dc58 00000000ffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000072 656c6c616b7a7973 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746f7571206465 74616e696d726574 6e75002729292720 676e697373696d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 584952484c1d5958 495c5354504f5849 5348001a14141a1d 5a53544e4e545000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000f RBX=ffff88802b53c680 RCX=ffffffff82120171 RDX=1ffffffff1d7e676 RSI=ffffffff8c400a00 RDI=ffffffff8ebf33b0 RBP=ffff888013982580 RSP=ffffc900005bf980 R8 =0000000000000000 R9 =fffffbfff22455fa R10=ffffffff9122afd7 R11=000000000000756b R12=ffffffff8ebf3340 R13=0000000000000200 R14=0000000000000008 R15=0000000000000000 RIP=ffffffff81eecd3d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080001000 CR3=000000004ff45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=000000000007ffff Opmask02=000000000007ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc9fc8019adbefab 29653cad2798493a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ac711733e6fbab7 5277c525643d15ec ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17825c237a0062ca 80539e83049a0439 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45d5718d3bd22a79 138b0278f23a1a66 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000058c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19adb400aec72c00 0000446e00004470 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0259800e2c7b800 f8e9a80000004470 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd3624000000446d 000000010000446d ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f76cec0080010000 800100000000446b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a981a125e7149833 9920c97821df2a79 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc57e51afca5f399 7f23732247968633 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7834302578302074 6e65766520646574 63657078656e7520 3a7325006b636f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d1115005d150551 4b40534005414051 4640555d404b5005 1f5600004e464a56 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0016000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b5f2cf9b10 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733322065640a37 3332003633325f63 6566695f6570695f 2074656800696220 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33320a2033320a37 3332003633325f5f 2066655f20696220 2033322000333220 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000