last executing test programs: 2m31.351126053s ago: executing program 4 (id=3375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 2m30.288084458s ago: executing program 4 (id=3376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 2m29.392042083s ago: executing program 4 (id=3378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000700), 0x1000) 2m21.753483228s ago: executing program 32 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m14.134014566s ago: executing program 33 (id=3378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000700), 0x1000) 2m5.873202227s ago: executing program 34 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='localhost /tmp 2147483647 131072 0 0 0\n', 0x27) 1m49.311397613s ago: executing program 35 (id=3425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9) 1m47.690330676s ago: executing program 7 (id=3420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/ci_hdrc\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/1024, 0x400) 1m47.227399996s ago: executing program 7 (id=3460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp\n', 0x4) close(r0) 1m45.939643547s ago: executing program 7 (id=3464): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x0, 0x47524247, 0x2, @discrete={0x8000, 0x43}}) keyctl$clear(0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xdd5e}, 0x8) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x701, 0x10003, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4088040) 1m44.799782359s ago: executing program 6 (id=3468): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x2d6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x8, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 1m44.624439096s ago: executing program 6 (id=3469): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/sdio/drivers_autoprobe\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x10) 1m44.471588494s ago: executing program 6 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xffffffffffffff1b) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() tkill(r7, 0x14) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f00000003c0)=[{r10, 0xc0}], 0x1, 0xffbffff5) dup2(r9, r10) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) 1m44.146184493s ago: executing program 6 (id=3474): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100001002bbd7000fddbdf25fe880000000000000000000000000001ac141429000000000000000000000000000107144e230005000000803c", @ANYRES32=0x0, @ANYBLOB="ac141417"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180), 0x0}, 0x20) 1m44.008916289s ago: executing program 6 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl(r2, 0x40084d02, &(0x7f0000000300)="0000000000000001") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x401c6f40, &(0x7f0000000380)="ffffffff00"/28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000480)="ffffffff01000000000080000000000003000400000000007465737400"/150) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./ubifs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0:test\x00', &(0x7f0000000500)='./ubifs_mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./ubifs_mnt/testfile\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000640)='hello ubifs\x00', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000740)='another file\x00', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x0) close(r6) sync() 1m38.010252053s ago: executing program 36 (id=3447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 1m33.245201478s ago: executing program 8 (id=3495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100001002bbd7000fddbdf25fe880000000000000000000000000001ac141429000000000000000000000000000107144e230005000000803c", @ANYRES32=0x0, @ANYBLOB="ac141417"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180), 0x0}, 0x20) 1m33.147172508s ago: executing program 8 (id=3496): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc}) 1m33.005150149s ago: executing program 8 (id=3497): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x800) 1m32.885270875s ago: executing program 8 (id=3498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='2049\n', 0x5) 1m30.581055965s ago: executing program 37 (id=3464): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x0, 0x47524247, 0x2, @discrete={0x8000, 0x43}}) keyctl$clear(0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xdd5e}, 0x8) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x701, 0x10003, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4088040) 1m28.625602062s ago: executing program 38 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl(r2, 0x40084d02, &(0x7f0000000300)="0000000000000001") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x401c6f40, &(0x7f0000000380)="ffffffff00"/28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000480)="ffffffff01000000000080000000000003000400000000007465737400"/150) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./ubifs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0:test\x00', &(0x7f0000000500)='./ubifs_mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./ubifs_mnt/testfile\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000640)='hello ubifs\x00', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000740)='another file\x00', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x0) close(r6) sync() 1m26.71595108s ago: executing program 39 (id=3481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='4\n', 0x2) close(r2) 1m16.789212933s ago: executing program 40 (id=3498): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='2049\n', 0x5) 1m12.664615548s ago: executing program 9 (id=3518): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0x2, 0xfff3}, {0x1, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 1m12.47161093s ago: executing program 9 (id=3520): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'ni_at_a2150\x00', [0x20, 0x5, 0x1]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'ni_at_a2150\x00', [0x80, 0x5, 0x1]}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'ni_at_a2150\x00', [0x200, 0x5, 0x1]}) 1m12.292629937s ago: executing program 9 (id=3521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='balance-rr\n', 0xb) 1m11.996394058s ago: executing program 9 (id=3522): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48008}, 0x800) 1m11.638983159s ago: executing program 9 (id=3523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200c01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x440d4) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}, 0x1, 0x0, 0x0, 0x8800}, 0xc000) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xffff, 0x5}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12000, 0x0) 1m10.094558945s ago: executing program 9 (id=3524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 testdom\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='testdom 1 \\x00000000 2147483647 ./export\n', 0x29) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='testdom ./export 2147483647 9218 0 0 0\n', 0x27) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,proto=tcp,clientaddr=127.0.0.1\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/dir\x00', 0x1ff) symlinkat(&(0x7f0000000540)='target\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./mnt/link\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/fifo\x00', 0x11a4, 0x0) 1m5.865712243s ago: executing program 1 (id=3527): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0x2, 0xfff3}, {0x1, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 1m5.547632607s ago: executing program 1 (id=3528): socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 1m5.464835838s ago: executing program 1 (id=3529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='balance-rr\n', 0xb) 1m5.323044865s ago: executing program 1 (id=3530): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x48008}, 0x800) 1m5.2884759s ago: executing program 1 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/sdio/drivers/btmrvl_sdio\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000543), 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='uevent\x00', 0x0, 0x0) 1m5.099060337s ago: executing program 1 (id=3532): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x2, 0x2, 0x2, 0xff, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xc0, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xb, 0x5, 0x9}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='devices\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='freeze\n\x00', 0x7) close(r2) 55.425936467s ago: executing program 4 (id=3500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xffffff6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd2a, 0x3503, 0xa, 0x5, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}}, 0x2000c0c4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x4800) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x5, 0x1, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.178372076s ago: executing program 41 (id=3524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 testdom\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='testdom 1 \\x00000000 2147483647 ./export\n', 0x29) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='testdom ./export 2147483647 9218 0 0 0\n', 0x27) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,proto=tcp,clientaddr=127.0.0.1\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/dir\x00', 0x1ff) symlinkat(&(0x7f0000000540)='target\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./mnt/link\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/fifo\x00', 0x11a4, 0x0) 53.772347021s ago: executing program 4 (id=3541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r1, &(0x7f0000000380)={0x0, ""/214}, 0xde, 0x2, 0x2000) 53.507025157s ago: executing program 4 (id=3542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='10\n', 0x3) close(r1) 49.776707143s ago: executing program 42 (id=3532): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x2, 0x2, 0x2, 0xff, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xc0, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xb, 0x5, 0x9}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='devices\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='freeze\n\x00', 0x7) close(r2) 47.988865032s ago: executing program 3 (id=3552): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.920263694s ago: executing program 3 (id=3553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f6d00") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dummy\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors\x00', 0x59) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001000000000000000000000000000000000000000000000000000000746573745f6d00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f6d00") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/dm-0\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='\x00'/4096, 0x1000) fsync(r2) read(r2, &(0x7f0000000700)=""/4096, 0x1000) syncfs(r2) nanosleep(&(0x7f0000000800)={0x1}, 0x0) 46.103178906s ago: executing program 3 (id=3555): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/slots\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100), 0x30) getdents64(r0, &(0x7f0000000200), 0x1000) close(0xffffffffffffffff) 45.620501531s ago: executing program 3 (id=3556): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 44.670845133s ago: executing program 3 (id=3560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:test\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='external_bbl\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/dev-ram0/bad_blocks\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0 8\n', 0x4) 44.205121525s ago: executing program 3 (id=3563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='Y\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00000000 2147483647 /\n', 0x24) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='localhost / 2147483647 9218 0 0 0\n', 0x22) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,proto=tcp,vers=4.0\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/dir0\x00', 0x1ed) 42.812876852s ago: executing program 0 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.67092362s ago: executing program 0 (id=3568): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 41.798406538s ago: executing program 0 (id=3569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/dm-0\x00', 0x81b6, 0xfe00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/dm-0\x00', 0x2, 0x0) 41.623938608s ago: executing program 0 (id=3570): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.482880176s ago: executing program 0 (id=3571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/100, 0x64) close(r1) 41.383020644s ago: executing program 0 (id=3572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 -4\n', 0x9) 38.055093476s ago: executing program 43 (id=3542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='10\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='10\n', 0x3) close(r1) 30.487654465s ago: executing program 7 (id=3544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/174, 0xae}, {&(0x7f0000003dc0)=""/4111, 0x100f}], 0x7}, 0x5}, {{&(0x7f00000024c0)=@isdn, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/8, 0x8}, {&(0x7f0000003580)=""/180, 0xb4}, {&(0x7f0000003640)=""/2, 0x2}, {&(0x7f00000019c0)=""/10, 0xa}, {&(0x7f00000036c0)=""/124, 0x7c}, {&(0x7f0000003740)=""/252, 0xfc}, {&(0x7f0000003840)=""/111, 0x6f}, {&(0x7f00000038c0)=""/131, 0x83}, {&(0x7f0000003980)=""/50, 0x32}], 0xa, &(0x7f0000003a80)=""/226, 0xe2}, 0x3}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003b80)=""/216, 0xd8}, {&(0x7f0000003c80)=""/8, 0x8}], 0x2}, 0xffffffff}, {{&(0x7f0000001440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/218, 0xda}, {&(0x7f00000016c0)=""/171, 0xab}, {&(0x7f0000001780)=""/209, 0xd1}], 0x4, &(0x7f00000018c0)=""/81, 0x51}, 0x2}, {{&(0x7f0000001940)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/192, 0xc0}, {&(0x7f0000006ec0)}], 0x4, &(0x7f0000006f40)=""/4096, 0x1000}, 0xa}], 0x5, 0x142, 0x0) 30.34976751s ago: executing program 7 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) 28.534446469s ago: executing program 44 (id=3563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='Y\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='localhost 1 \\x00000000 2147483647 /\n', 0x24) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='localhost / 2147483647 9218 0 0 0\n', 0x22) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,proto=tcp,vers=4.0\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/dir0\x00', 0x1ed) 27.26946594s ago: executing program 2 (id=3585): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x48008}, 0x800) 26.773454926s ago: executing program 2 (id=3586): syz_usb_connect(0x0, 0x32, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1}) r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x1, 0x4745504a, 0x1}) 25.562441439s ago: executing program 45 (id=3572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 -4\n', 0x9) 24.919226511s ago: executing program 2 (id=3588): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 24.32033695s ago: executing program 2 (id=3589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r7, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 21.955033621s ago: executing program 2 (id=3590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgrp/cgroup.subtree_control\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='+cpu\n\x00', 0x5) write(r0, &(0x7f00000000c0)='+pids\n\x00', 0x6) write(r0, &(0x7f00000000c0)='+memory\n\x00', 0x8) write(r0, &(0x7f00000000c0)='+io\n\x00', 0x4) write(r0, &(0x7f00000000c0)='+rdma\n\x00', 0x6) write(r0, &(0x7f00000000c0)='+cpuset\n\x00', 0x8) write(r0, &(0x7f00000000c0)='+hugetlb\n\x00', 0x9) write(r0, &(0x7f00000000c0)='+misc\n\x00', 0x6) close(r0) 21.403295862s ago: executing program 2 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) close(r0) 18.023621063s ago: executing program 6 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0\n', 0x2) close(r2) 14.544820633s ago: executing program 46 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) 6.082130715s ago: executing program 47 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) close(r0) 5.003025604s ago: executing program 5 (id=3598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.803080642s ago: executing program 5 (id=3599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) 3.994034645s ago: executing program 8 (id=3587): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ca0801000001000000010902190001010080320904000001000000000705810308000a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/aiptek/1-1:1.0/model_code\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/aiptek/2-1:1.0/model_code\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/128, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/1-1:1.0/model_code\x00', 0x0, 0x0) read(r3, &(0x7f0000000800)=""/128, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/usb/devices/2-1:1.0/model_code\x00', 0x0, 0x0) read(r4, &(0x7f0000000a00)=""/128, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/usb/drivers/aiptek/1-1:0.0/model_code\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00)=""/128, 0x80) 3.766044266s ago: executing program 5 (id=3600): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/64, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/devices/virtio0/modalias\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/virtio/devices/virtio1/device\x00', 0x0, 0x0) read(r2, &(0x7f0000000300)=""/64, 0x40) 3.398773257s ago: executing program 5 (id=3601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.060970214s ago: executing program 5 (id=3602): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.840127614s ago: executing program 48 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0\n', 0x2) close(r2) 916.604043ms ago: executing program 5 (id=3604): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200c01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x440d4) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}, 0x1, 0x0, 0x0, 0x8800}, 0xc000) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xffff, 0x5}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12000, 0x0) 0s ago: executing program 8 (id=3605): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0xd8, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x87, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/aquacomputer_octo-0003:0C70:F011.0001/firmware_version\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/aquacomputer_octo-0003:0C70:F011.0002/firmware_version\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/aquacomputer_octo-0003:0C70:F011.0003/firmware_version\x00', 0x0, 0x0) read(r3, &(0x7f0000000500), 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/aquacomputer_octo-0003:0C70:F011.0004/firmware_version\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x100) kernel console output (not intermixed with test programs): ] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3195'. [ 910.195193][T15596] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 910.436689][T15596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.453774][T15596] team0: Port device netdevsim1 added [ 911.440651][ T5886] usb 4-1: USB disconnect, device number 13 [ 911.461497][ T2388] pvrusb2: Failed to submit write-control URB status=-19 [ 911.677368][ T2388] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 911.677423][ T2388] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 912.135857][T15392] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.136042][T15392] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.136243][T15392] bridge_slave_0: entered allmulticast mode [ 912.160518][T15392] bridge_slave_0: entered promiscuous mode [ 912.182598][T15392] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.182722][T15392] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.182908][T15392] bridge_slave_1: entered allmulticast mode [ 912.185940][T15392] bridge_slave_1: entered promiscuous mode [ 912.428383][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 912.569637][T15392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.591122][T15392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.637580][T15392] team0: Port device team_slave_0 added [ 912.641624][T15392] team0: Port device team_slave_1 added [ 912.712350][T15392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.712369][T15392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.712394][T15392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.784158][T15392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.784176][T15392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.784203][T15392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.624117][T10031] hsr_slave_0: left promiscuous mode [ 914.643174][T15659] netlink: 'syz.3.3212': attribute type 10 has an invalid length. [ 914.664761][T10031] hsr_slave_1: left promiscuous mode [ 914.665961][T10031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.708551][T10031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.362858][T10031] team0 (unregistering): Port device team_slave_1 removed [ 915.444975][T10031] team0 (unregistering): Port device team_slave_0 removed [ 915.694468][T15392] hsr_slave_0: entered promiscuous mode [ 915.696024][T15392] hsr_slave_1: entered promiscuous mode [ 915.696962][T15392] debugfs: 'hsr0' already exists in 'hsr' [ 915.696987][T15392] Cannot create hsr debugfs directory [ 916.046541][T15659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.049323][T15659] team0: Port device netdevsim1 added [ 916.936126][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 917.029476][T15682] lo speed is unknown, defaulting to 1000 [ 917.242815][ T3391] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.595177][T10031] IPVS: stop unused estimator thread 0... [ 920.025567][T15747] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 921.250497][T15749] lo speed is unknown, defaulting to 1000 [ 922.875703][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3240'. [ 922.879141][T15793] netlink: 'syz.4.3240': attribute type 17 has an invalid length. [ 923.085504][T15777] svc: failed to register lockdv1 RPC service (errno 512). [ 923.092571][T15777] lockd_up: makesock failed, error=-512 [ 923.623094][T15798] tipc: Resetting bearer [ 925.207976][T15777] svc: failed to register nfsdv3 RPC service (errno 512). [ 925.208221][T15777] svc: failed to register nfsaclv3 RPC service (errno 512). [ 925.208238][T15777] failed to unregister udp with rpcbind [ 925.208432][T15777] svc: failed to register nfsdv3 RPC service (errno 97). [ 925.208520][T15777] svc: failed to register nfsaclv3 RPC service (errno 97). [ 925.208535][T15777] failed to unregister udp with rpcbind [ 926.063821][ T198] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 926.125965][T15392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 926.183860][T15392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.191264][T15392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 926.226083][ T198] usb 2-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 926.232702][ T198] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 926.232737][ T198] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 926.232787][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.345048][T15392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.359240][T15832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.359414][T15832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.409731][T15392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 926.426747][ T198] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 927.343096][T15392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.421894][T15392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 927.490464][T15392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.792643][T15860] trusted_key: encrypted_key: key user:syz not found [ 927.924101][T15846] netlink: 'syz.2.3248': attribute type 10 has an invalid length. [ 928.115313][ T5814] usb 2-1: USB disconnect, device number 12 [ 928.443911][T15392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.538506][T15392] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.584094][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.584297][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.647003][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.647130][T13237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.011999][T15883] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl816) [ 929.157499][T15892] netlink: 'syz.2.3254': attribute type 9 has an invalid length. [ 929.198282][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.198761][T15880] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.240526][T15891] rdma_rxe: rxe_newlink: failed to add dummy0 [ 929.262062][T15880] batman_adv: batadv0: Interface deactivated: veth0 [ 929.417013][T15880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.423255][T15880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.600402][T15900] net_ratelimit: 147 callbacks suppressed [ 929.600425][T15900] netlink: zone id is out of range [ 929.600435][T15900] netlink: zone id is out of range [ 929.600444][T15900] netlink: zone id is out of range [ 929.600452][T15900] netlink: zone id is out of range [ 929.600460][T15900] netlink: zone id is out of range [ 929.600468][T15900] netlink: zone id is out of range [ 929.600480][T15900] netlink: zone id is out of range [ 929.600488][T15900] netlink: zone id is out of range [ 929.600503][T15900] netlink: zone id is out of range [ 929.600511][T15900] netlink: zone id is out of range [ 931.393646][T13238] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.393693][T13238] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.393726][T13238] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.393759][T13238] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.585934][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.586005][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.719265][T15907] lo speed is unknown, defaulting to 1000 [ 933.476604][T15927] netlink: 'syz.1.3264': attribute type 9 has an invalid length. [ 936.482576][T15946] net_ratelimit: 147 callbacks suppressed [ 936.482599][T15946] netlink: zone id is out of range [ 936.482608][T15946] netlink: zone id is out of range [ 936.482617][T15946] netlink: zone id is out of range [ 936.482625][T15946] netlink: zone id is out of range [ 936.482633][T15946] netlink: zone id is out of range [ 936.482641][T15946] netlink: zone id is out of range [ 936.482653][T15946] netlink: zone id is out of range [ 936.482661][T15946] netlink: zone id is out of range [ 936.482669][T15946] netlink: zone id is out of range [ 936.482678][T15946] netlink: zone id is out of range [ 937.356374][T15392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.752359][T15392] veth0_vlan: entered promiscuous mode [ 937.821493][T15392] veth1_vlan: entered promiscuous mode [ 938.050113][T15392] veth0_macvtap: entered promiscuous mode [ 938.325419][T15392] veth1_macvtap: entered promiscuous mode [ 938.481210][T15392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.558766][T15392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.050665][ T3391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.050878][ T3391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.091651][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3275'. [ 940.157891][T15981] netlink: 'syz.2.3277': attribute type 9 has an invalid length. [ 941.340772][T13238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.367132][T13237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.289893][T15999] loop0: detected capacity change from 0 to 262144 [ 942.462029][T16005] net_ratelimit: 147 callbacks suppressed [ 942.462051][T16005] netlink: zone id is out of range [ 942.462060][T16005] netlink: zone id is out of range [ 942.462069][T16005] netlink: zone id is out of range [ 942.462077][T16005] netlink: zone id is out of range [ 942.462085][T16005] netlink: zone id is out of range [ 942.462093][T16005] netlink: zone id is out of range [ 942.462106][T16005] netlink: zone id is out of range [ 942.462122][T16005] netlink: zone id is out of range [ 942.462131][T16005] netlink: zone id is out of range [ 942.462139][T16005] netlink: zone id is out of range [ 942.534738][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.534759][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.745687][T16004] loop1: detected capacity change from 0 to 262144 [ 943.538510][ T3389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.538532][ T3389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.602343][T15999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 946.711837][T16029] netlink: 'syz.4.3290': attribute type 9 has an invalid length. [ 947.061784][T15398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.273266][T15398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.283960][T15398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.287312][T15398] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.288043][T15398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 949.124551][T15398] Bluetooth: hci5: command 0x0406 tx timeout [ 949.505334][T15398] Bluetooth: hci1: command tx timeout [ 950.991316][T16034] lo speed is unknown, defaulting to 1000 [ 950.997289][T11264] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 951.081989][T16083] netlink: 'syz.4.3301': attribute type 9 has an invalid length. [ 951.155992][T16079] net_ratelimit: 147 callbacks suppressed [ 951.156014][T16079] netlink: zone id is out of range [ 951.156023][T16079] netlink: zone id is out of range [ 951.156031][T16079] netlink: zone id is out of range [ 951.156039][T16079] netlink: zone id is out of range [ 951.156047][T16079] netlink: zone id is out of range [ 951.156056][T16079] netlink: zone id is out of range [ 951.156068][T16079] netlink: zone id is out of range [ 951.156076][T16079] netlink: zone id is out of range [ 951.156084][T16079] netlink: zone id is out of range [ 951.156101][T16079] netlink: zone id is out of range [ 951.164650][T11264] usb 2-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 951.166524][T11264] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 951.166554][T11264] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 951.166594][T11264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.315503][T16078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 951.315695][T16078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 951.360731][T11264] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 951.583698][T11138] Bluetooth: hci1: command tx timeout [ 952.144718][ T37] audit: type=1800 audit(1789419489.136:955): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.3304" name="/newroot/34" dev="tmpfs" ino=209 res=0 errno=0 [ 952.574062][T14722] usb 2-1: USB disconnect, device number 13 [ 953.477710][T16100] : renamed from bond_slave_0 [ 953.670551][T11138] Bluetooth: hci1: command tx timeout [ 953.736046][T16113] kAFS: No cell specified [ 954.222858][T16121] netlink: 'syz.4.3312': attribute type 9 has an invalid length. [ 955.433809][T11264] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 955.559118][T10031] team0: Port device netdevsim1 removed [ 955.608470][T11264] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 955.612530][T11264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.612558][T11264] usb 1-1: Product: syz [ 955.612573][T11264] usb 1-1: Manufacturer: syz [ 955.612587][T11264] usb 1-1: SerialNumber: syz [ 955.743654][T11138] Bluetooth: hci1: command tx timeout [ 955.868178][ T37] audit: type=1800 audit(1789419492.866:956): pid=16152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.3319" name="/newroot/37" dev="tmpfs" ino=224 res=0 errno=0 [ 955.895406][T11264] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 956.846972][T16173] net_ratelimit: 147 callbacks suppressed [ 956.846992][T16173] netlink: zone id is out of range [ 956.847001][T16173] netlink: zone id is out of range [ 956.847008][T16173] netlink: zone id is out of range [ 956.847016][T16173] netlink: zone id is out of range [ 956.847023][T16173] netlink: zone id is out of range [ 956.847031][T16173] netlink: zone id is out of range [ 956.847043][T16173] netlink: zone id is out of range [ 956.847051][T16173] netlink: zone id is out of range [ 956.847060][T16173] netlink: zone id is out of range [ 956.847067][T16173] netlink: zone id is out of range [ 956.930153][T12841] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 956.930210][T12841] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 956.990819][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.991015][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.991270][T16034] bridge_slave_0: entered allmulticast mode [ 956.999801][T16034] bridge_slave_0: entered promiscuous mode [ 957.038059][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.040667][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.040842][T16034] bridge_slave_1: entered allmulticast mode [ 957.053661][T16034] bridge_slave_1: entered promiscuous mode [ 957.374625][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.443962][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.995830][T16034] team0: Port device team_slave_0 added [ 958.040947][T16034] team0: Port device team_slave_1 added [ 958.154107][T12841] usb 1-1: firmware upload failed (-110). [ 958.459747][T11264] usb 1-1: USB disconnect, device number 7 [ 958.749165][T16187] netlink: 'syz.3.3326': attribute type 9 has an invalid length. [ 963.296809][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.296873][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.296944][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.583307][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.583325][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.583349][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.503149][T16034] hsr_slave_0: entered promiscuous mode [ 965.534171][T16034] hsr_slave_1: entered promiscuous mode [ 965.537993][T16034] debugfs: 'hsr0' already exists in 'hsr' [ 965.538022][T16034] Cannot create hsr debugfs directory [ 966.828640][ T37] audit: type=1800 audit(1789419503.826:957): pid=16229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.3336" name="/newroot/694" dev="tmpfs" ino=3675 res=0 errno=0 [ 966.968943][T16244] net_ratelimit: 147 callbacks suppressed [ 966.968965][T16244] netlink: zone id is out of range [ 966.968974][T16244] netlink: zone id is out of range [ 966.968983][T16244] netlink: zone id is out of range [ 966.968991][T16244] netlink: zone id is out of range [ 966.968999][T16244] netlink: zone id is out of range [ 966.969007][T16244] netlink: zone id is out of range [ 966.969019][T16244] netlink: zone id is out of range [ 966.969027][T16244] netlink: zone id is out of range [ 966.969036][T16244] netlink: zone id is out of range [ 966.969044][T16244] netlink: zone id is out of range [ 967.454866][T10031] bridge_slave_1: left allmulticast mode [ 967.454900][T10031] bridge_slave_1: left promiscuous mode [ 967.455124][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.026770][T10031] bridge_slave_0: left allmulticast mode [ 969.026805][T10031] bridge_slave_0: left promiscuous mode [ 969.027729][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.134390][T16266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3340'. [ 969.336275][T16270] netlink: 'syz.0.3341': attribute type 9 has an invalid length. [ 971.405091][T10031] bond0 (unregistering): (slave 30): Releasing backup interface [ 971.415924][T16278] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 971.457667][ T3389] maxtcpc 0-0022: error -EIO: Failed to read TCPC_POWER_STATUS [ 971.461195][ T3389] maxtcpc 0-0022: probe with driver maxtcpc failed with error -5 [ 971.464324][T10031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.484264][T10031] bond0 (unregistering): Released all slaves [ 971.832583][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 972.297176][ T37] audit: type=1800 audit(1789419509.286:958): pid=16290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.3348" name="/newroot/698" dev="tmpfs" ino=3695 res=0 errno=0 [ 973.527500][ T2388] pvrusb2: request_firmware fatal error with code=-110 [ 973.527566][ T2388] pvrusb2: Failure uploading firmware1 [ 973.527602][ T2388] pvrusb2: Device initialization was not successful. [ 973.527611][ T2388] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 973.527621][ T2388] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 973.746019][ T5886] pvrusb2: Device being rendered inoperable [ 973.866579][T16306] netlink: 'syz.1.3352': attribute type 9 has an invalid length. [ 974.081099][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3353'. [ 974.804752][T11138] Bluetooth: hci4: command 0x0406 tx timeout [ 979.283952][ T37] audit: type=1800 audit(1789419516.276:959): pid=16344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.3359" name="/newroot/82" dev="tmpfs" ino=462 res=0 errno=0 [ 979.510515][T16352] : renamed from bond_slave_0 [ 980.185551][T16368] net_ratelimit: 147 callbacks suppressed [ 980.185573][T16368] netlink: zone id is out of range [ 980.185583][T16368] netlink: zone id is out of range [ 980.185591][T16368] netlink: zone id is out of range [ 980.185600][T16368] netlink: zone id is out of range [ 980.185608][T16368] netlink: zone id is out of range [ 980.185616][T16368] netlink: zone id is out of range [ 980.185628][T16368] netlink: zone id is out of range [ 980.185637][T16368] netlink: zone id is out of range [ 980.185645][T16368] netlink: zone id is out of range [ 980.185652][T16368] netlink: zone id is out of range [ 981.504110][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 983.090688][T16378] lo speed is unknown, defaulting to 1000 [ 984.330972][ T37] audit: type=1800 audit(1789419521.326:960): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.3371" name="/newroot/704" dev="tmpfs" ino=3725 res=0 errno=0 [ 985.347093][T10031] hsr_slave_0: left promiscuous mode [ 985.387081][T10031] hsr_slave_1: left promiscuous mode [ 985.395617][T10031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.512638][T10031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.966030][T10031] team0 (unregistering): Port device team_slave_1 removed [ 987.004152][T10031] team0 (unregistering): Port device team_slave_0 removed [ 987.283155][ T1452] smc: removing ib device syz0 [ 987.436794][T16434] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3374'. [ 987.732798][ T1452] smbdirect: ib_dev[syz0] removed [ 988.459250][ T37] audit: type=1326 audit(1789419525.456:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.459283][ T37] audit: type=1326 audit(1789419525.456:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.461594][ T37] audit: type=1326 audit(1789419525.456:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9de5ade98e code=0x7ffc0000 [ 988.461642][ T37] audit: type=1326 audit(1789419525.456:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.461680][ T37] audit: type=1326 audit(1789419525.456:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.463151][ T37] audit: type=1326 audit(1789419525.456:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.463196][ T37] audit: type=1326 audit(1789419525.456:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.463234][ T37] audit: type=1326 audit(1789419525.456:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 988.940516][ T37] audit: type=1326 audit(1789419525.456:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16454 comm="syz.3.3380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9de5b1e159 code=0x7ffc0000 [ 989.682275][T16461] ath9k pcspkr: error -EINVAL: invalid resource (null) [ 989.682311][T16461] ath9k pcspkr: ioremap failed [ 989.682323][T16461] ath9k pcspkr: probe with driver ath9k failed with error -22 [ 990.461297][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 990.461316][ T37] audit: type=1800 audit(1789419527.456:978): pid=16465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.3382" name="/newroot/56" dev="tmpfs" ino=328 res=0 errno=0 [ 992.441497][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 992.594523][ T31] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 992.609365][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.609388][ T31] usb 4-1: Product: syz [ 992.609396][ T31] usb 4-1: Manufacturer: syz [ 992.609406][ T31] usb 4-1: SerialNumber: syz [ 992.711567][T16034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 992.786757][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.787682][T16034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 992.886840][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.889320][T16034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 992.988924][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.990263][T16034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 993.028476][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.028560][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.059727][T16034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.712506][ T31] kalmia 4-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle, 56:15:9b:74:85:a0 [ 993.750939][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.819243][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.835682][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.835823][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.862116][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.870471][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.052420][T12841] usb 4-1: USB disconnect, device number 14 [ 995.148381][T12841] kalmia 4-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle [ 995.990756][T11138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 996.020258][T11138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 996.030804][T11138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 996.093949][T11138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 996.095967][T11138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.388523][T16546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3391'. [ 997.467893][T10031] IPVS: stop unused estimator thread 0... [ 997.554848][T16578] net_ratelimit: 147 callbacks suppressed [ 997.554871][T16578] netlink: zone id is out of range [ 997.554880][T16578] netlink: zone id is out of range [ 997.554888][T16578] netlink: zone id is out of range [ 997.554896][T16578] netlink: zone id is out of range [ 997.554904][T16578] netlink: zone id is out of range [ 997.554911][T16578] netlink: zone id is out of range [ 997.554923][T16578] netlink: zone id is out of range [ 997.554932][T16578] netlink: zone id is out of range [ 997.554940][T16578] netlink: zone id is out of range [ 997.554948][T16578] netlink: zone id is out of range [ 997.891481][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.443418][T16034] veth0_vlan: entered promiscuous mode [ 998.463709][T11138] Bluetooth: hci3: command tx timeout [ 998.489832][T16034] veth1_vlan: entered promiscuous mode [ 998.821909][T16034] veth0_macvtap: entered promiscuous mode [ 998.894492][T16034] veth1_macvtap: entered promiscuous mode [ 998.898205][T16533] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.898376][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.898877][T16533] bridge_slave_0: entered allmulticast mode [ 998.902689][T16533] bridge_slave_0: entered promiscuous mode [ 998.913848][T16533] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.914881][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.915058][T16533] bridge_slave_1: entered allmulticast mode [ 998.918124][T16533] bridge_slave_1: entered promiscuous mode [ 999.021833][T16533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.043271][T16533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.046836][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.114999][T16533] team0: Port device team_slave_0 added [ 999.125196][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.138643][T16533] team0: Port device team_slave_1 added [ 999.254784][T16533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.254802][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.254828][T16533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.261674][T16533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.261707][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.261733][T16533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.527117][T16533] hsr_slave_0: entered promiscuous mode [ 999.534652][T16533] hsr_slave_1: entered promiscuous mode [ 999.628957][T16602] i2c i2c-0: delete_device: Can't find device in list [ 999.786304][T16601] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 999.937279][ T992] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 999.984802][ T992] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 1000.847273][T11138] Bluetooth: hci3: command tx timeout [ 1000.927365][T10031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.927388][T10031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.736254][T13237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.736278][T13237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.939643][ T1452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.940257][ T1452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.024448][T13238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.024490][T13238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.373729][T11264] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1002.524449][T11264] usb 4-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 1002.525925][T11264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1002.525953][T11264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1002.525991][T11264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.579343][T16616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1002.579612][T16616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1002.606250][T11264] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 1002.812848][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3400'. [ 1002.864167][T11138] Bluetooth: hci3: command tx timeout [ 1003.394744][T15398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1003.419830][T16533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1003.461257][T15398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1003.491337][T15398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1003.508012][T15398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1003.525533][T16533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.533252][T16533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1003.555186][T15398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1003.739354][T11028] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1003.799781][T16533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.816610][T16533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1003.836609][T15244] usb 4-1: USB disconnect, device number 15 [ 1003.933751][T11028] usb 3-1: Using ep0 maxpacket: 16 [ 1003.935534][T11028] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1003.938475][T11028] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1003.938505][T11028] usb 3-1: config 1 has no interface number 0 [ 1003.938551][T11028] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1003.938577][T11028] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1003.938601][T11028] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1004.005359][T11028] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1004.005387][T11028] usb 3-1: Product: syz [ 1004.005400][T11028] usb 3-1: Manufacturer: syz [ 1004.005413][T11028] usb 3-1: SerialNumber: syz [ 1004.075843][T16533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.079611][T16533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1004.094937][T16629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1004.095200][T16629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1004.295747][T16533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.511718][T16629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1004.511838][T16629] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1004.720181][T11028] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3 [ 1004.720809][T11028] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 1004.892010][T16533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.955259][T11138] Bluetooth: hci3: command tx timeout [ 1005.039610][T16533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.050214][T16642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1005.089828][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.090012][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.146949][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.147177][T10031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.388180][T11264] usb 3-1: USB disconnect, device number 13 [ 1006.434403][T11138] Bluetooth: hci6: command tx timeout [ 1007.196651][T16670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1007.648596][T16627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.648727][T16627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.648898][T16627] bridge_slave_0: entered allmulticast mode [ 1007.651534][T16627] bridge_slave_0: entered promiscuous mode [ 1007.779482][T16627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.779682][T16627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.779914][T16627] bridge_slave_1: entered allmulticast mode [ 1007.806376][T16627] bridge_slave_1: entered promiscuous mode [ 1007.895515][ T4988] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1007.949121][T16627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.969666][T16627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.044162][ T4988] usb 4-1: Using ep0 maxpacket: 16 [ 1008.052518][ T4988] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1009.217569][T16627] team0: Port device team_slave_0 added [ 1009.247841][T16627] team0: Port device team_slave_1 added [ 1009.282103][T11138] Bluetooth: hci6: command tx timeout [ 1009.327493][ T4988] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1009.327521][ T4988] usb 4-1: config 1 has no interface number 0 [ 1009.327566][ T4988] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1009.327592][ T4988] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1009.327615][ T4988] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1009.387118][ T4988] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1009.387151][ T4988] usb 4-1: Product: syz [ 1009.387166][ T4988] usb 4-1: Manufacturer: syz [ 1009.387188][ T4988] usb 4-1: SerialNumber: syz [ 1009.419130][T16685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1009.419322][T16685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1010.039021][T16685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1010.398577][T16685] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1010.504988][ T4988] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3 [ 1010.505294][ T4988] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 1010.681348][T16627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.681366][T16627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.681393][T16627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.688435][T16627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.688452][T16627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.688478][T16627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.880084][T16627] hsr_slave_0: entered promiscuous mode [ 1010.881355][T16627] hsr_slave_1: entered promiscuous mode [ 1010.882218][T16627] debugfs: 'hsr0' already exists in 'hsr' [ 1010.882243][T16627] Cannot create hsr debugfs directory [ 1011.056452][T16533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.216262][T16710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3421'. [ 1011.347982][T11138] Bluetooth: hci6: command tx timeout [ 1011.832018][ T4988] usb 4-1: USB disconnect, device number 16 [ 1011.883217][T15398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1011.956383][T15398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1011.973009][T15398] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1011.980901][ T36] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1012.000245][T15398] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1012.002613][T15398] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1012.197386][ T36] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 1.00 [ 1012.229862][ T36] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1012.229894][ T36] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1012.229932][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.308123][T16718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1012.308307][T16718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1012.492944][ T36] ljca 3-1:1.0: probe with driver ljca failed with error -71 [ 1012.544242][ T36] usb 3-1: USB disconnect, device number 14 [ 1012.729161][T16533] veth0_vlan: entered promiscuous mode [ 1012.888725][T16533] veth1_vlan: entered promiscuous mode [ 1012.980930][T16533] veth0_macvtap: entered promiscuous mode [ 1012.999827][T16533] veth1_macvtap: entered promiscuous mode [ 1013.247756][T16533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.371394][T16533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.434364][T11138] Bluetooth: hci6: command tx timeout [ 1013.647361][T16627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1014.476883][T11138] Bluetooth: hci7: command tx timeout [ 1014.498946][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.529195][T16627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1014.568207][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.755881][T16627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1014.779581][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.797245][T16627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1015.523005][T16627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.330680][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.330702][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.544110][T11138] Bluetooth: hci7: command tx timeout [ 1016.766619][T16757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3429'. [ 1016.864531][ T3391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.864553][ T3391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.299815][ T5886] gve 0000:00:00.0: Failed to map pci bar! [ 1017.302111][T16766] gve 0000:00:00.0: probe with driver gve failed with error -12 [ 1017.367042][T16715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.367239][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.367415][T16715] bridge_slave_0: entered allmulticast mode [ 1017.369177][T16715] bridge_slave_0: entered promiscuous mode [ 1017.372074][T16715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.372189][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.372323][T16715] bridge_slave_1: entered allmulticast mode [ 1017.377353][T16715] bridge_slave_1: entered promiscuous mode [ 1017.464441][T16715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.490486][T16715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.535435][T16769] debugfs: Bad value for 'source' [ 1017.553307][T16627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.580690][T16715] team0: Port device team_slave_0 added [ 1017.590510][T16715] team0: Port device team_slave_1 added [ 1017.758826][T16715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.758845][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.758866][T16715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.781976][T16715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.781994][T16715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.782022][T16715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.794145][T16772] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1018.184714][ T3391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.231443][T16627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.580864][T16715] hsr_slave_0: entered promiscuous mode [ 1018.586998][T16715] hsr_slave_1: entered promiscuous mode [ 1018.598561][T16715] debugfs: 'hsr0' already exists in 'hsr' [ 1018.600140][T16715] Cannot create hsr debugfs directory [ 1018.656546][T11138] Bluetooth: hci7: command tx timeout [ 1018.693897][ T4988] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1018.769805][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.856769][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.908037][ T4988] usb 6-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 1018.912023][ T4988] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1018.912057][ T4988] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1018.912097][ T4988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.959292][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.959425][T10031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.024889][T16781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1019.098110][T16781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1019.120060][ T4988] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 1019.533758][ T3410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.553975][ T3391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.573844][ T3410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.037674][T16715] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1020.083338][T16715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1020.098536][T16715] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1020.131044][T16715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.140779][T16715] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1020.201062][T16715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.202784][T16715] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1020.240175][T16715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.334952][T15244] usb 6-1: USB disconnect, device number 2 [ 1020.390882][T16627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.787528][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.787567][ T5620] Bluetooth: hci7: command tx timeout [ 1020.944962][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.991170][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.117488][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.117727][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.152402][ T3410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.152616][ T3410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.953144][T16814] ceph: No mds server is up or the cluster is laggy [ 1022.168035][T11028] libceph: mon0 (1)127.0.0.1:20000 socket closed (con state V1_CONNECT_MSG) [ 1022.670577][T16834] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1022.670616][T16834] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1022.670657][T16834] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1022.727237][T16627] veth0_vlan: entered promiscuous mode [ 1022.857866][T16627] veth1_vlan: entered promiscuous mode [ 1022.886204][T16834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1023.323887][T16627] veth0_macvtap: entered promiscuous mode [ 1023.340682][T16627] veth1_macvtap: entered promiscuous mode [ 1023.437314][T16627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.481229][T16627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.088943][T13241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.149977][ T3410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.150658][ T3410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.151087][ T3410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.458126][T15244] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1024.555580][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.555602][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.575173][T16715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.605614][T15244] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1024.607131][T15244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.607160][T15244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.607197][T15244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.669922][T15244] usb 6-1: config 0 descriptor?? [ 1025.002927][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.002949][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.107406][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107445][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107474][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107500][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107525][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107549][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107574][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107597][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107630][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.107655][T15244] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x0 [ 1025.294398][T15244] konepure 0003:1E7D:2DBE.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 1025.425666][T16715] veth0_vlan: entered promiscuous mode [ 1025.452932][T16715] veth1_vlan: entered promiscuous mode [ 1025.462961][T16867] bond0: option mode: unable to set because the bond device has slaves [ 1025.565610][T16715] veth0_macvtap: entered promiscuous mode [ 1025.573923][T16715] veth1_macvtap: entered promiscuous mode [ 1025.609708][T16715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.703094][T16715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.722201][T16869] vlan2: entered allmulticast mode [ 1025.722217][T16869] erspan0: entered allmulticast mode [ 1025.917661][T10031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.918107][T10031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.918471][T10031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.918795][T10031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.322298][T12841] usb 6-1: USB disconnect, device number 3 [ 1027.918540][ T3389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.918560][ T3389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.518708][T15398] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1028.590803][T15398] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1028.625350][T15398] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1028.637709][T15398] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1028.645956][T15398] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1028.846871][T13237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.846897][T13237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.705599][T16909] 8021q: VLANs not supported on wg0 [ 1030.872292][T11138] Bluetooth: hci8: command tx timeout [ 1032.284733][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.284935][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.285120][T16886] bridge_slave_0: entered allmulticast mode [ 1032.291178][T16886] bridge_slave_0: entered promiscuous mode [ 1032.321788][T16886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.321997][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.322283][T16886] bridge_slave_1: entered allmulticast mode [ 1032.345711][T16886] bridge_slave_1: entered promiscuous mode [ 1032.430495][T16886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.444071][T16886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.576117][T16886] team0: Port device team_slave_0 added [ 1032.599178][T16886] team0: Port device team_slave_1 added [ 1032.735196][T16948] vlan3: entered allmulticast mode [ 1032.735218][T16948] team_slave_1: entered allmulticast mode [ 1032.756469][T16886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.756488][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.756513][T16886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.759037][T16886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.759051][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.759075][T16886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.936666][T16886] hsr_slave_0: entered promiscuous mode [ 1032.938041][T16886] hsr_slave_1: entered promiscuous mode [ 1032.938991][T16886] debugfs: 'hsr0' already exists in 'hsr' [ 1032.939015][T16886] Cannot create hsr debugfs directory [ 1032.953656][T11138] Bluetooth: hci8: command tx timeout [ 1033.139605][T16956] block2mtd: error: cannot open device /dev/ram0 [ 1033.187221][T16956] UBIFS error (pid: 16956): cannot open "ubi0:test", error -19 [ 1034.801725][T16970] kAFS: Can only specify source 'none' with -o dyn [ 1035.003990][T16886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1035.023723][T11138] Bluetooth: hci8: command tx timeout [ 1035.046544][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.047425][T16886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1035.076570][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.077445][T16886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1035.147584][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.148658][T16886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1035.187686][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.362456][T16886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.422904][T16886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.438408][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.438603][ T3389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.455809][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.456034][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.932735][T16886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.161142][T16886] veth0_vlan: entered promiscuous mode [ 1036.173021][T16886] veth1_vlan: entered promiscuous mode [ 1036.208620][T16886] veth0_macvtap: entered promiscuous mode [ 1036.221401][T16886] veth1_macvtap: entered promiscuous mode [ 1036.240274][T16886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.258427][T16886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.275626][ T3410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.275670][ T3410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.275698][ T3410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.275727][ T3410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.090164][T13241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.090190][T13241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.103957][T11138] Bluetooth: hci8: command tx timeout [ 1037.231233][ T3389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.231254][ T3389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.568404][T17001] ptp ptp0: new virtual clock ptp1 [ 1037.568420][T17001] ptp ptp0: guarantee physical clock free running [ 1038.120464][T17005] 8021q: VLANs not supported on sit0 [ 1040.213229][T15398] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1040.268105][T15398] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1040.270534][T15398] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1040.273019][T15398] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1040.285185][T15398] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1040.720500][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.274275][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.274414][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.274716][T17022] bridge_slave_0: entered allmulticast mode [ 1041.276159][T17022] bridge_slave_0: entered promiscuous mode [ 1041.278229][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.278356][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.278462][T17022] bridge_slave_1: entered allmulticast mode [ 1041.279887][T17022] bridge_slave_1: entered promiscuous mode [ 1041.325578][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.330195][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.389895][T17022] team0: Port device team_slave_0 added [ 1041.396552][T17022] team0: Port device team_slave_1 added [ 1041.457625][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.457644][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.457663][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.458965][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.458978][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.459000][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.644085][T17022] hsr_slave_0: entered promiscuous mode [ 1041.645558][T17022] hsr_slave_1: entered promiscuous mode [ 1041.646631][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 1041.646657][T17022] Cannot create hsr debugfs directory [ 1042.598323][T11138] Bluetooth: hci9: command tx timeout [ 1043.032064][T17055] trusted_key: encrypted_key: key user:syz not found [ 1044.637060][T11138] Bluetooth: hci9: command tx timeout [ 1044.659580][T17022] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1044.700018][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.701246][T17022] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1044.731878][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.733359][T17022] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1044.776727][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.777853][T17022] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1044.826566][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.951383][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.967800][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.982891][ T3410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.983007][ T3410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.005625][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.005770][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.384215][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.610478][T17022] veth0_vlan: entered promiscuous mode [ 1045.638972][T17022] veth1_vlan: entered promiscuous mode [ 1045.686152][T17022] veth0_macvtap: entered promiscuous mode [ 1045.690652][T17022] veth1_macvtap: entered promiscuous mode [ 1045.715316][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.780896][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.872159][ T1509] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.872791][ T1509] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.122716][ T1509] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.246601][ T1509] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.619979][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.620004][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.705677][T11138] Bluetooth: hci9: command tx timeout [ 1046.870627][T15398] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1046.913255][T15398] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1046.931349][T15398] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1046.945320][T15398] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1046.946021][T15398] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1047.131743][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.131764][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.802029][ T5620] Bluetooth: hci9: command tx timeout [ 1048.872876][T15398] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1048.911326][T15398] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1048.913013][T15398] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1048.915023][ T36] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1048.931104][T15398] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1048.948387][T15398] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1049.085757][ T36] usb 10-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00 [ 1049.090099][ T36] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1049.090138][ T36] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1049.090185][ T36] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.118721][T17103] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1049.118916][T17103] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1049.133087][ T36] gspca_main: finepix-2.14.0 probing 04cb:0104 [ 1049.184058][T15398] Bluetooth: hci10: command tx timeout [ 1049.694630][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.694893][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.695091][T17088] bridge_slave_0: entered allmulticast mode [ 1049.697678][T17088] bridge_slave_0: entered promiscuous mode [ 1049.705207][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.705403][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.705603][T17088] bridge_slave_1: entered allmulticast mode [ 1049.708049][T17088] bridge_slave_1: entered promiscuous mode [ 1049.750558][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.755558][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.836639][T17088] team0: Port device team_slave_0 added [ 1049.840369][T17088] team0: Port device team_slave_1 added [ 1049.881694][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.881713][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.881726][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.887656][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.887671][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.887697][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.983365][T17088] hsr_slave_0: entered promiscuous mode [ 1049.992138][T17088] hsr_slave_1: entered promiscuous mode [ 1049.993253][T17088] debugfs: 'hsr0' already exists in 'hsr' [ 1049.993278][T17088] Cannot create hsr debugfs directory [ 1050.400466][T14722] usb 10-1: USB disconnect, device number 2 [ 1050.563269][T11138] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1050.609919][T11138] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1050.611348][T11138] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1050.614818][T11138] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1050.676793][T11138] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1051.114391][T15398] Bluetooth: hci11: command tx timeout [ 1051.223715][T14722] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1051.269037][T15398] Bluetooth: hci10: command tx timeout [ 1051.384729][T14722] usb 10-1: New USB device found, idVendor=04b4, idProduct=2102, bcdDevice= 0.00 [ 1051.387994][T14722] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1051.388041][T14722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.392799][T17131] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1051.480473][T14722] dvb-usb: found a 'DVBWorld DVB-S 2102 USB2.0' in cold state, will try to load a firmware [ 1051.539046][T14722] usb 10-1: Direct firmware load for dvb-usb-dw2102.fw failed with error -2 [ 1051.539065][T14722] usb 10-1: Falling back to sysfs fallback for: dvb-usb-dw2102.fw [ 1052.077375][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.077556][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.077719][T17105] bridge_slave_0: entered allmulticast mode [ 1052.079847][T17105] bridge_slave_0: entered promiscuous mode [ 1052.114843][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.114983][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.115390][T17105] bridge_slave_1: entered allmulticast mode [ 1052.116815][T17105] bridge_slave_1: entered promiscuous mode [ 1052.649240][T17148] trusted_key: encrypted_key: key user:syz not found [ 1053.305368][T15398] Bluetooth: hci12: command tx timeout [ 1053.310306][T15398] Bluetooth: hci11: command tx timeout [ 1053.348662][T11138] Bluetooth: hci10: command tx timeout [ 1053.362563][T17088] team0: Port device netdevsim1 removed [ 1053.498699][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.596347][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.013105][T17105] team0: Port device team_slave_0 added [ 1054.045842][T17105] team0: Port device team_slave_1 added [ 1054.172572][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.172588][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.172607][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.247126][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.247143][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.247164][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.475600][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.475658][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.637597][T17105] hsr_slave_0: entered promiscuous mode [ 1054.638561][T17105] hsr_slave_1: entered promiscuous mode [ 1054.639117][T17105] debugfs: 'hsr0' already exists in 'hsr' [ 1054.639141][T17105] Cannot create hsr debugfs directory [ 1054.725368][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.725508][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.725634][T17126] bridge_slave_0: entered allmulticast mode [ 1054.727068][T17126] bridge_slave_0: entered promiscuous mode [ 1054.739809][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.739962][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.740184][T17126] bridge_slave_1: entered allmulticast mode [ 1054.750312][T17126] bridge_slave_1: entered promiscuous mode [ 1054.877040][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.908109][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.058787][T17126] team0: Port device team_slave_0 added [ 1055.084534][T17126] team0: Port device team_slave_1 added [ 1055.174738][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.174755][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.174777][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.176683][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.176763][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.176784][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.294193][T17088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1055.339950][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1055.353883][T11138] Bluetooth: hci11: command tx timeout [ 1055.353919][T11138] Bluetooth: hci12: command tx timeout [ 1055.360584][T17088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1055.407450][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1055.415879][T17088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1055.424554][T15398] Bluetooth: hci10: command tx timeout [ 1055.474451][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1055.498265][T17088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1055.600561][T17088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.632300][T17126] hsr_slave_0: entered promiscuous mode [ 1055.633100][T17126] hsr_slave_1: entered promiscuous mode [ 1055.645885][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 1055.645903][T17126] Cannot create hsr debugfs directory [ 1056.637235][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.663824][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.684226][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.684354][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.794416][T17105] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1056.821498][T17105] team0: Port device netdevsim1 removed [ 1056.900232][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.900363][T13237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.424209][T15398] Bluetooth: hci12: command tx timeout [ 1057.424243][T15398] Bluetooth: hci11: command tx timeout [ 1058.410182][T17126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.839562][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.143754][T17126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.335126][T17088] veth0_vlan: entered promiscuous mode [ 1059.475571][T17194] trusted_key: encrypted_key: key user:syz not found [ 1059.561323][T11138] Bluetooth: hci12: command tx timeout [ 1060.332227][T17088] veth1_vlan: entered promiscuous mode [ 1060.435601][T17088] veth0_macvtap: entered promiscuous mode [ 1060.475058][T17088] veth1_macvtap: entered promiscuous mode [ 1060.517395][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.592099][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.992467][T15398] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1061.065220][T15398] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1061.130846][T15398] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1061.172660][T15398] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1061.189975][T15398] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1062.156876][T17126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.356174][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.356196][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.630699][T17126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.736894][ T1509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.736917][ T1509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.759257][ T992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.759308][ T992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.759340][ T992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.781394][T13241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.522606][T15398] Bluetooth: hci13: command tx timeout [ 1064.600680][T17227] comedi comedi0: ni_at_a2150: I/O port conflict (0x20,28) [ 1064.601377][T17227] comedi comedi0: ni_at_a2150: I/O port conflict (0x80,28) [ 1064.925627][T17230] bond0: option mode: unable to set because the bond device has slaves [ 1065.616557][T15398] Bluetooth: hci13: command tx timeout [ 1065.928827][T17241] net_ratelimit: 147 callbacks suppressed [ 1065.928851][T17241] netlink: zone id is out of range [ 1065.928861][T17241] netlink: zone id is out of range [ 1065.928869][T17241] netlink: zone id is out of range [ 1065.928877][T17241] netlink: zone id is out of range [ 1065.928885][T17241] netlink: zone id is out of range [ 1065.928893][T17241] netlink: zone id is out of range [ 1065.928905][T17241] netlink: zone id is out of range [ 1065.928913][T17241] netlink: zone id is out of range [ 1065.928921][T17241] netlink: zone id is out of range [ 1065.928928][T17241] netlink: zone id is out of range [ 1067.001187][T17105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.044465][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.045665][T17201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.045796][T17201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.046027][T17201] bridge_slave_0: entered allmulticast mode [ 1067.091358][T17201] bridge_slave_0: entered promiscuous mode [ 1067.093229][T17105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1067.215305][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.218878][T17201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.219012][T17201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.219394][T17201] bridge_slave_1: entered allmulticast mode [ 1067.251498][T17201] bridge_slave_1: entered promiscuous mode [ 1067.282864][T17105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1067.498504][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.670424][T15398] Bluetooth: hci13: command tx timeout [ 1067.738193][T17105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.882761][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.080370][T17201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.100133][T17201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.214539][T17201] team0: Port device team_slave_0 added [ 1068.222255][T17201] team0: Port device team_slave_1 added [ 1068.310345][ T5814] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1068.321361][T17201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.321376][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.321399][T17201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.337173][T17201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.337192][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.337218][T17201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.379051][T17126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1068.453013][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.463711][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 1068.464635][ T5814] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1068.466330][ T5814] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1068.466354][ T5814] usb 2-1: config 1 has no interface number 0 [ 1068.466399][ T5814] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1068.466424][ T5814] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1068.466447][ T5814] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1068.469644][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1068.469668][ T5814] usb 2-1: Product: syz [ 1068.469681][ T5814] usb 2-1: Manufacturer: syz [ 1068.469695][ T5814] usb 2-1: SerialNumber: syz [ 1068.505609][T17249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1068.505953][T17249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1068.581686][T17126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1068.691213][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.802222][T17126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1068.863140][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.908470][T17201] hsr_slave_0: entered promiscuous mode [ 1068.909632][T17201] hsr_slave_1: entered promiscuous mode [ 1068.910425][T17201] debugfs: 'hsr0' already exists in 'hsr' [ 1068.910450][T17201] Cannot create hsr debugfs directory [ 1068.910715][T17126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1068.933966][T17249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1068.934275][T17249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1068.997199][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.340823][ T5814] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1069.342880][ T5814] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1069.343340][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1069.344460][ T5814] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1069.434021][ T5814] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:ee:11:2f:98:03 [ 1069.450411][ T5814] usb 2-1: USB disconnect, device number 14 [ 1069.487119][ T5814] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1069.606753][ T5814] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1069.606906][ T5814] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1069.607025][ T5814] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1069.743666][T15398] Bluetooth: hci13: command tx timeout [ 1069.945789][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.940444][T17105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.009575][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.009718][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.670343][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.670477][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.779506][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.904225][T15398] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.022595][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.057782][T17266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.057888][T17266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.138268][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.138347][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.243740][T17196] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1072.439410][T17196] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1072.443012][T17196] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 1072.443038][T17196] usb 2-1: config 255 has no interface number 0 [ 1072.443084][T17196] usb 2-1: config 255 interface 97 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 8 [ 1072.443106][T17196] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1072.493127][T17196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.493156][T17196] usb 2-1: Product: syz [ 1072.493169][T17196] usb 2-1: Manufacturer: syz [ 1072.493183][T17196] usb 2-1: SerialNumber: syz [ 1072.534851][T17278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1072.758632][T17201] team0: Port device netdevsim1 removed [ 1072.865227][T17281] PM: suspend entry (s2idle) [ 1074.662840][T17105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.882543][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.521056][T17126] veth0_vlan: entered promiscuous mode [ 1075.551306][T17201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1075.581197][T17201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.603482][T17201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1075.727585][T17201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.742060][T17201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1075.786332][T17201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.791684][T17201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1075.835060][T17201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.837593][T17126] veth1_vlan: entered promiscuous mode [ 1076.079907][T17126] veth0_macvtap: entered promiscuous mode [ 1076.131150][T17105] veth0_vlan: entered promiscuous mode [ 1076.144697][T17126] veth1_macvtap: entered promiscuous mode [ 1076.190888][T17105] veth1_vlan: entered promiscuous mode [ 1076.276416][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.348993][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.420823][T17201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.541570][T17105] veth0_macvtap: entered promiscuous mode [ 1076.793430][T17105] veth1_macvtap: entered promiscuous mode [ 1077.091547][T17201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.324757][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.324967][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.867322][T17105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.871726][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.871916][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.927232][T13242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.927253][T13242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.976874][T17105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.137249][T17196] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1078.141339][ T3388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.141358][ T3388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.806560][T10031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.811936][T10031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.253433][T13242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.253455][T13242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.549463][ T3388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.555757][ T1507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.559214][ T1507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.624045][ T1508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.625523][ T1507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.043302][T13242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.043324][T13242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.166643][ T3388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.703189][T17201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.299412][T17201] veth0_vlan: entered promiscuous mode [ 1083.343711][T17201] veth1_vlan: entered promiscuous mode [ 1083.374053][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1083.412994][T17201] veth0_macvtap: entered promiscuous mode [ 1083.461620][T17201] veth1_macvtap: entered promiscuous mode [ 1083.488575][T17201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.564459][T15398] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1083.565424][T17201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.599758][ T36] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 1083.623665][T17266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.624057][T17266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.624088][T17266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.624113][T17266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.627845][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1083.627872][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1083.627910][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.641218][T15398] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1083.647759][T15398] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1083.650948][T17355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1083.651064][T17355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1083.725343][T15398] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1083.794164][ T36] ushc 1-1:1.0: probe with driver ushc failed with error -110 [ 1083.857996][T15398] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1085.310193][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.310216][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.552992][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.553013][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.536116][T11138] Bluetooth: hci14: command tx timeout [ 1087.135986][T11028] usb 1-1: USB disconnect, device number 8 [ 1087.559664][T17359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.559871][T17359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.560062][T17359] bridge_slave_0: entered allmulticast mode [ 1087.562712][T17359] bridge_slave_0: entered promiscuous mode [ 1087.566159][T17359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.566368][T17359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.566546][T17359] bridge_slave_1: entered allmulticast mode [ 1087.569008][T17359] bridge_slave_1: entered promiscuous mode [ 1087.643395][T17359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.695685][T17359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.819489][T15398] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1087.875941][T15398] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1087.995004][T17359] team0: Port device team_slave_0 added [ 1088.037830][T15398] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1088.495598][T17409] trusted_key: encrypted_key: key user:syz not found [ 1088.749439][ T5620] Bluetooth: hci14: command tx timeout [ 1088.754410][T17359] team0: Port device team_slave_1 added [ 1089.162265][T15398] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1089.173120][T15398] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1089.533963][T16876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1089.549986][T17359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.550002][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.550036][T17359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.556599][T17359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.556613][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.556637][T17359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.824356][T16876] usb 1-1: Using ep0 maxpacket: 16 [ 1089.825129][T16876] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1089.826615][T17359] hsr_slave_0: entered promiscuous mode [ 1089.833171][T16876] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1089.833227][T16876] usb 1-1: config 1 has no interface number 0 [ 1089.833285][T16876] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1089.833309][T16876] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1089.833406][T16876] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1089.861971][T17359] hsr_slave_1: entered promiscuous mode [ 1089.863140][T17359] debugfs: 'hsr0' already exists in 'hsr' [ 1089.863164][T17359] Cannot create hsr debugfs directory [ 1089.908567][T16876] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1089.908596][T16876] usb 1-1: Product: syz [ 1089.908611][T16876] usb 1-1: Manufacturer: syz [ 1089.908625][T16876] usb 1-1: SerialNumber: syz [ 1089.965941][T17419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1089.966061][T17419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1090.379419][T17419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1090.379538][T17419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1090.783730][T11138] Bluetooth: hci14: command tx timeout [ 1090.809305][T16876] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1090.825219][T16876] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 1091.057899][T16876] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1091.152793][T16876] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 72:f4:f7:97:e3:cd [ 1091.195554][T16876] usb 1-1: USB disconnect, device number 9 [ 1091.252922][T16876] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1091.425516][T11138] Bluetooth: hci15: command tx timeout [ 1091.454584][T16876] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1091.454735][T16876] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1091.454861][T16876] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1092.195929][T17359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.389764][T17448] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1092.939649][T17456] trusted_key: encrypted_key: key user:syz not found [ 1093.605976][T11138] Bluetooth: hci14: command tx timeout [ 1093.609998][T11138] Bluetooth: hci15: command tx timeout [ 1093.970876][T17359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.516234][T17359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.752426][T17399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.752551][T17399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.752763][T17399] bridge_slave_0: entered allmulticast mode [ 1094.792506][T17399] bridge_slave_0: entered promiscuous mode [ 1094.811955][T17399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.817296][T17399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.817583][T17399] bridge_slave_1: entered allmulticast mode [ 1094.832875][T17399] bridge_slave_1: entered promiscuous mode [ 1095.071374][T17399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.091424][T17399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.222495][T17399] team0: Port device team_slave_0 added [ 1095.227825][T17399] team0: Port device team_slave_1 added [ 1095.289032][T17399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.289049][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.289067][T17399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.293251][T17399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.293266][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.293286][T17399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.688735][T11138] Bluetooth: hci15: command tx timeout [ 1095.722427][T17359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.780506][T17399] hsr_slave_0: entered promiscuous mode [ 1095.782959][T17399] hsr_slave_1: entered promiscuous mode [ 1095.786166][T17399] debugfs: 'hsr0' already exists in 'hsr' [ 1095.786189][T17399] Cannot create hsr debugfs directory [ 1096.443360][T17399] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.799844][T17399] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.142182][T17399] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.471983][T17399] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.790497][T11138] Bluetooth: hci15: command tx timeout [ 1097.967235][T17359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1098.031516][T17359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.048059][T17359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1098.067665][T17359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.071689][T17359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1098.145023][T17359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.162802][T17359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1098.178256][T17359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.379791][T17399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1098.416683][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.418310][T17399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1098.456352][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.457989][T17399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1098.517441][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.519202][T17399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1098.540242][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.708112][T17359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.812188][T17359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.831784][T17266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.831911][T17266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.850614][T17399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.877585][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.877687][T13237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.001715][T17399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.042023][ T3395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.042148][ T3395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.085869][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.085953][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.451414][T15398] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1099.539451][T15398] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1099.550045][T15398] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1099.578391][T15398] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1099.607154][T15398] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1100.313134][T17359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.438150][T17359] veth0_vlan: entered promiscuous mode [ 1100.532332][T17359] veth1_vlan: entered promiscuous mode [ 1100.688503][T17399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.758318][T17359] veth0_macvtap: entered promiscuous mode [ 1100.800796][T17359] veth1_macvtap: entered promiscuous mode [ 1100.931232][T17359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.985298][T17359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.054845][T13238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.120497][ T3388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.756802][T11138] Bluetooth: hci16: command tx timeout [ 1102.204660][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.204682][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.207169][T17499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.207359][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.207574][T17499] bridge_slave_0: entered allmulticast mode [ 1102.210331][T17499] bridge_slave_0: entered promiscuous mode [ 1102.259658][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.259779][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.260036][T17499] bridge_slave_1: entered allmulticast mode [ 1102.270141][T17499] bridge_slave_1: entered promiscuous mode [ 1102.274710][T17348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.364793][T17499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.401304][T17499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.512395][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.512417][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.516787][T17499] team0: Port device team_slave_0 added [ 1102.569884][T17499] team0: Port device team_slave_1 added [ 1102.662410][T17399] veth0_vlan: entered promiscuous mode [ 1102.670816][T17499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.670837][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.670852][T17499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.674586][T17499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.674600][T17499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.674626][T17499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.734097][T17399] veth1_vlan: entered promiscuous mode [ 1102.786013][T17499] hsr_slave_0: entered promiscuous mode [ 1102.787301][T17499] hsr_slave_1: entered promiscuous mode [ 1102.788885][T17499] debugfs: 'hsr0' already exists in 'hsr' [ 1102.788908][T17499] Cannot create hsr debugfs directory [ 1103.099811][T17545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.428631][T17399] veth0_macvtap: entered promiscuous mode [ 1103.460215][T17399] veth1_macvtap: entered promiscuous mode [ 1103.589519][T17399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.608115][T17399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.835002][T11138] Bluetooth: hci16: command tx timeout [ 1104.223269][T17499] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.782737][ T3388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.783171][ T3388] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.306697][ T3391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.916616][T11138] Bluetooth: hci16: command tx timeout [ 1105.939686][T17499] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.053072][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.053096][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.072760][T17557] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 1106.248434][ T1452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.248490][ T1452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.365236][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.365250][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.716076][T17499] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.118825][T17499] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.145246][T12841] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1107.308347][T12841] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1107.312707][T12841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.312734][T12841] usb 3-1: Product: syz [ 1107.312748][T12841] usb 3-1: Manufacturer: syz [ 1107.312762][T12841] usb 3-1: SerialNumber: syz [ 1107.836652][T12841] net_ratelimit: 147 callbacks suppressed [ 1107.836680][T12841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1107.836722][T12841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1107.836739][T12841] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1107.901823][T12841] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1107.961931][T12841] usb 3-1: USB disconnect, device number 15 [ 1107.995491][T11138] Bluetooth: hci16: command tx timeout [ 1108.092680][T17499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1108.107684][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.108603][T17499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.151996][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.153213][T17499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.219307][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.220238][T17499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.282134][T17499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.366837][T17499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.397369][T17499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.428075][T13237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.429713][T13237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.508635][T13241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.510971][T13241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.989150][T15398] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1110.042922][T15398] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1110.081326][T15398] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1110.163774][T15398] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1110.169818][T15398] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1111.197668][T17499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.730941][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.731149][T17583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.731338][T17583] bridge_slave_0: entered allmulticast mode [ 1111.734453][T17583] bridge_slave_0: entered promiscuous mode [ 1111.770326][T17583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.770460][T17583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.770680][T17583] bridge_slave_1: entered allmulticast mode [ 1111.773424][T17583] bridge_slave_1: entered promiscuous mode [ 1111.883188][T15398] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1111.922241][T15398] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1111.937536][T15398] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1111.939072][T15398] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1111.947889][T15398] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1112.244900][T17583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.291653][T17583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.310898][T11138] Bluetooth: hci17: command tx timeout [ 1112.487145][T17583] team0: Port device team_slave_0 added [ 1112.503111][T17583] team0: Port device team_slave_1 added [ 1112.634249][T17583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.634267][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.634293][T17583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.651076][T17583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.651092][T17583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.651117][T17583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.718000][T17499] veth0_vlan: entered promiscuous mode [ 1112.850522][T17499] veth1_vlan: entered promiscuous mode [ 1112.948364][T17583] hsr_slave_0: entered promiscuous mode [ 1112.951525][T17583] hsr_slave_1: entered promiscuous mode [ 1112.952061][T17583] debugfs: 'hsr0' already exists in 'hsr' [ 1112.952076][T17583] Cannot create hsr debugfs directory [ 1113.219482][T17636] null_blk: nullb1: using native zone append [ 1113.270134][T17637] nvmet: adding nsid 1 to subsystem testsubsys [ 1113.732326][ T3410] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:25ac9306-42db-4881-be36-2447b556d9b9. [ 1113.831632][T17499] veth0_macvtap: entered promiscuous mode [ 1114.033883][T11138] Bluetooth: hci18: command tx timeout [ 1114.039603][T17499] veth1_macvtap: entered promiscuous mode [ 1114.386132][T11138] Bluetooth: hci17: command tx timeout [ 1114.539238][T17637] nvme nvme0: creating 2 I/O queues. [ 1114.579991][T17637] nvme nvme0: new ctrl: "testsubsys" [ 1114.848717][T17636] null_blk: disk nullb1 created [ 1115.540720][T17583] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.650243][T17499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.729127][T17499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.924074][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.924132][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.076298][T11138] Bluetooth: hci18: command tx timeout [ 1116.176178][T14722] dvb-usb: did not find the firmware file 'dvb-usb-dw2102.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1116.181531][T14722] usb 10-1: USB disconnect, device number 3 [ 1116.378977][T17583] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.463823][T11138] Bluetooth: hci17: command tx timeout [ 1117.691594][T17583] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.813761][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.814023][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.814518][T17621] bridge_slave_0: entered allmulticast mode [ 1117.816854][T17621] bridge_slave_0: entered promiscuous mode [ 1117.823034][T17621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.823130][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.823314][T17621] bridge_slave_1: entered allmulticast mode [ 1117.828661][T17621] bridge_slave_1: entered promiscuous mode [ 1117.864807][T13242] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.888503][T17347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.888522][T17347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.016871][T17621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.048855][T17621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.143885][T11138] Bluetooth: hci18: command tx timeout [ 1118.237690][T17583] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.354925][T17621] team0: Port device team_slave_0 added [ 1118.368909][T17621] team0: Port device team_slave_1 added [ 1118.370390][ T3391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.370408][ T3391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.553619][T11138] Bluetooth: hci17: command tx timeout [ 1118.578676][T17621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.578693][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.578717][T17621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.593838][ T992] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.595411][T13242] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.603948][T10031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.661028][T17621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.661046][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.661072][T17621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.855644][T17621] hsr_slave_0: entered promiscuous mode [ 1118.858373][T17621] hsr_slave_1: entered promiscuous mode [ 1118.859478][T17621] debugfs: 'hsr0' already exists in 'hsr' [ 1118.859502][T17621] Cannot create hsr debugfs directory [ 1119.384398][T17583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1119.431064][T17583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1119.444328][T17583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1119.492592][T17583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1119.793396][T17621] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.865014][T17583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1119.897297][T17583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1119.898917][T17583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1119.949683][T17583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1120.228825][T11138] Bluetooth: hci18: command tx timeout [ 1120.277746][T17621] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.418267][T17583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.451625][T17583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.478207][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.478333][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.486514][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.486789][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.701565][T17621] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.199286][T17621] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.481481][T17583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.057943][T17621] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1122.097771][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.115264][T17621] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1122.142260][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.149428][T17621] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1122.186060][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.188327][T17621] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1122.245543][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.262279][T17583] veth0_vlan: entered promiscuous mode [ 1122.298949][T17583] veth1_vlan: entered promiscuous mode [ 1122.487295][T17583] veth0_macvtap: entered promiscuous mode [ 1122.519016][T17583] veth1_macvtap: entered promiscuous mode [ 1122.572856][T17583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.620636][T17621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.640805][T17583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.699008][T17621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.822211][ T5620] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1122.874220][ T5620] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1122.951314][ T5620] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1122.981949][ T5620] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1122.998505][ T5620] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1123.118505][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.146587][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.146690][T10031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.700412][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.700529][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.612115][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.612137][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.802493][T10031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.802513][T10031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.844001][ T1508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.844399][ T1508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.844721][ T1508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.485093][T13242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.664635][T15398] Bluetooth: hci19: command tx timeout [ 1125.982655][T17621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.051895][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.052105][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.052315][T17691] bridge_slave_0: entered allmulticast mode [ 1126.080375][T17691] bridge_slave_0: entered promiscuous mode [ 1126.103818][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.104009][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.104237][T17691] bridge_slave_1: entered allmulticast mode [ 1126.115498][T17691] bridge_slave_1: entered promiscuous mode [ 1126.346467][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.432029][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.594996][T17691] team0: Port device team_slave_0 added [ 1126.601907][T17691] team0: Port device team_slave_1 added [ 1127.744337][T15398] Bluetooth: hci19: command tx timeout [ 1127.808108][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.808125][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.808142][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.875274][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.875288][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.875303][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.979169][T17691] hsr_slave_0: entered promiscuous mode [ 1127.980026][T17691] hsr_slave_1: entered promiscuous mode [ 1127.980583][T17691] debugfs: 'hsr0' already exists in 'hsr' [ 1127.980606][T17691] Cannot create hsr debugfs directory [ 1128.003713][ T198] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1128.153078][T17621] veth0_vlan: entered promiscuous mode [ 1128.153787][ T198] usb 6-1: device descriptor read/64, error -71 [ 1128.223817][T15398] Bluetooth: hci6: command 0x0406 tx timeout [ 1128.239019][T17621] veth1_vlan: entered promiscuous mode [ 1128.425267][ T198] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1128.472060][T17621] veth0_macvtap: entered promiscuous mode [ 1128.491954][T17621] veth1_macvtap: entered promiscuous mode [ 1128.521774][T17621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.544843][T17621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.583841][ T198] usb 6-1: device descriptor read/64, error -71 [ 1128.696473][ T198] usb usb6-port1: attempt power cycle [ 1128.889238][T17691] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.145691][ T3395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.174793][ T198] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1129.279739][ T198] usb 6-1: device descriptor read/8, error -71 [ 1129.554435][ T198] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1129.589258][ T198] usb 6-1: device descriptor read/8, error -71 [ 1129.704453][ T198] usb usb6-port1: unable to enumerate USB device [ 1129.765584][ T3391] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.765635][ T3391] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.765663][ T3391] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.829265][T11138] Bluetooth: hci19: command tx timeout [ 1130.544674][T17691] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.678536][T17347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.678558][T17347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.067868][T17737] ptp ptp0: delete virtual clock ptp1 [ 1131.232212][T15398] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1131.289899][T15398] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1131.337476][T15398] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1131.393483][T15398] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1131.399434][T15398] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1131.634449][T17691] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.740679][T17737] ptp ptp0: only physical clock in use now [ 1131.879804][T17738] ptp ptp0: new virtual clock ptp1 [ 1131.879998][T17738] failed to create ptp aux_worker -4 [ 1131.908761][T15398] Bluetooth: hci19: command tx timeout [ 1132.460725][T17691] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.826591][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.826612][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.318455][T14720] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1133.496110][T14720] usb 9-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 1133.497716][T14720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.583750][T15398] Bluetooth: hci20: command tx timeout [ 1134.703264][T14720] aiptek 9-1:1.0: Aiptek using 400 ms programming speed [ 1134.740913][T14720] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input8 [ 1136.084594][T15398] Bluetooth: hci20: command tx timeout [ 1137.835282][T14720] usb 9-1: USB disconnect, device number 2 [ 1137.835373][ C0] aiptek 9-1:1.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1138.125223][ T5620] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1138.195598][ T5620] Bluetooth: hci20: command tx timeout [ 1138.297352][ T5620] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1138.299977][ T5620] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1138.333153][ T5620] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1138.367814][ T5620] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1138.709585][ T5620] Bluetooth: hci7: command 0x0406 tx timeout [ 1139.252907][T17795] netlink: zone id is out of range [ 1139.252924][T17795] netlink: zone id is out of range [ 1139.252934][T17795] netlink: zone id is out of range [ 1139.252942][T17795] netlink: zone id is out of range [ 1139.252950][T17795] netlink: zone id is out of range [ 1139.252959][T17795] netlink: zone id is out of range [ 1139.252971][T17795] netlink: zone id is out of range [ 1139.252979][T17795] netlink: zone id is out of range [ 1139.252987][T17795] netlink: zone id is out of range [ 1139.252995][T17795] netlink: zone id is out of range [ 1139.593025][ T38] INFO: task syz.1.3362:16365 blocked for more than 143 seconds. [ 1139.593044][ T38] Tainted: G L syzkaller #0 ** replaying previous printk message ** [ 1139.593044][ T38] Tainted: G L syzkaller #0 [ 1139.593051][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.593056][ T38] task:syz.1.3362 state:D stack:27464 pid:16365 tgid:16364 ppid:14408 task_flags:0x400140 flags:0x00080002 [ 1139.593090][ T38] Call Trace: [ 1139.593094][ T38] [ 1139.593103][ T38] __schedule+0x16d9/0x5700 [ 1139.593133][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1139.593154][ T38] ? __pfx___schedule+0x10/0x10 [ 1139.593175][ T38] rt_mutex_schedule+0x76/0xf0 [ 1139.593189][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1139.593205][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1139.593218][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1139.593231][ T38] ? rt_mutex_slowlock+0x1f2/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1139.593243][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1139.593263][ T38] ? write_ports+0xb5/0xd20 [ 1139.593278][ T38] ? write_ports+0xb5/0xd20 [ 1139.593286][ T38] mutex_lock_nested+0x168/0x1d0 [ 1139.593301][ T38] write_ports+0xb5/0xd20 [ 1139.593312][ T38] ? __pfx_write_ports+0x10/0x10 [ 1139.593333][ T38] ? _copy_from_user+0x94/0xb0 [ 1139.593349][ T38] ? simple_transaction_get+0x130/0x170 [ 1139.593362][ T38] nfsctl_transaction_write+0x112/0x160 [ 1139.593374][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1139.593385][ T38] vfs_write+0x29f/0xbb0 [ 1139.593402][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1139.593415][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1139.593430][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1139.593444][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1139.593454][ T38] ? fdget_pos+0x252/0x320 [ 1139.593470][ T38] ksys_write+0x156/0x270 [ 1139.593483][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1139.593604][ T38] do_syscall_64+0x166/0x520 [ 1139.593637][ T38] ? trace_irq_disable+0x3b/0x140 [ 1139.593658][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.593676][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1139.593695][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.593725][ T38] RIP: 0033:0x7f7fd548e159 [ 1139.593748][ T38] RSP: 002b:00007f7fd36e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.593769][ T38] RAX: ffffffffffffffda RBX: 00007f7fd5715fa0 RCX: 00007f7fd548e159 [ 1139.593782][ T38] RDX: 0000000000000009 RSI: 0000200000000240 RDI: 0000000000000003 [ 1139.593795][ T38] RBP: 00007f7fd552503b R08: 0000000000000000 R09: 0000000000000000 [ 1139.593807][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.593818][ T38] R13: 00007f7fd5716038 R14: 00007f7fd5715fa0 R15: 00007ffe8d051228 [ 1139.593848][ T38] [ 1139.593857][ T38] INFO: task syz.4.3378:16441 blocked for more than 143 seconds. [ 1139.593874][ T38] Tainted: G L syzkaller #0 [ 1139.593884][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.593892][ T38] task:syz.4.3378 state:D stack:28128 pid:16441 tgid:16439 ppid:5607 task_flags:0x400140 flags:0x00080002 [ 1139.593947][ T38] Call Trace: [ 1139.593954][ T38] [ 1139.593965][ T38] __schedule+0x16d9/0x5700 [ 1139.594005][ T38] ? __pfx___schedule+0x10/0x10 [ 1139.594029][ T38] ? trace_irq_disable+0x3b/0x140 [ 1139.594054][ T38] ? __pfx___schedule+0x10/0x10 [ 1139.594077][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1139.594101][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1139.594123][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1139.594148][ T38] rt_mutex_schedule+0x76/0xf0 [ 1139.594170][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1139.594206][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1139.594227][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1139.594248][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1139.594284][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1139.594315][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1139.594336][ T38] mutex_lock_nested+0x168/0x1d0 [ 1139.594361][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 1139.594401][ T38] nfsd_umount+0x41/0x60 [ 1139.594419][ T38] deactivate_locked_super+0xbc/0x110 [ 1139.594441][ T38] cleanup_mnt+0x3d3/0x460 [ 1139.594468][ T38] task_work_run+0x1d9/0x270 [ 1139.594493][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1139.594523][ T38] exit_to_user_mode_loop+0x204/0x770 [ 1139.594546][ T38] ? rcu_is_watching+0x16/0xb0 [ 1139.594575][ T38] do_syscall_64+0x328/0x520 [ 1139.594598][ T38] ? trace_irq_disable+0x3b/0x140 [ 1139.594626][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.594645][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1139.594666][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.594684][ T38] RIP: 0033:0x7fe9c5d8e159 [ 1139.594700][ T38] RSP: 002b:00007fe9c3fe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1139.594718][ T38] RAX: fffffffffffffffe RBX: 00007fe9c6015fa0 RCX: 00007fe9c5d8e159 [ 1139.594731][ T38] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 1139.594744][ T38] RBP: 00007fe9c5e2503b R08: 0000000000000000 R09: 0000000000000000 [ 1139.594755][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.594766][ T38] R13: 00007fe9c6016038 R14: 00007fe9c6015fa0 R15: 00007ffe971587e8 [ 1139.594797][ T38] [ 1139.594808][ T38] INFO: task syz.0.3390:16538 blocked for more than 143 seconds. [ 1139.594824][ T38] Tainted: G L syzkaller #0 [ 1139.594833][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.594842][ T38] task:syz.0.3390 state:D stack:27464 pid:16538 tgid:16537 ppid:15392 task_flags:0x400140 flags:0x00080002 [ 1139.594893][ T38] Call Trace: [ 1139.594899][ T38] [ 1139.594911][ T38] __schedule+0x16d9/0x5700 [ 1139.594941][ T38] ? lock_acquire+0x115/0x350 [ 1139.594979][ T38] ? __pfx___schedule+0x10/0x10 [ 1139.595016][ T38] rt_mutex_schedule+0x76/0xf0 [ 1139.595038][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1139.595072][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1139.595094][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1139.595114][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1139.595175][ T38] ? write_ports+0xb5/0xd20 [ 1139.595199][ T38] ? write_ports+0xb5/0xd20 [ 1139.595215][ T38] mutex_lock_nested+0x168/0x1d0 [ 1139.595241][ T38] write_ports+0xb5/0xd20 [ 1139.595262][ T38] ? __pfx_write_ports+0x10/0x10 [ 1139.595301][ T38] ? _copy_from_user+0x94/0xb0 [ 1139.595325][ T38] ? simple_transaction_get+0x130/0x170 [ 1139.595347][ T38] nfsctl_transaction_write+0x112/0x160 [ 1139.595369][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1139.595388][ T38] vfs_write+0x29f/0xbb0 [ 1139.595417][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1139.595439][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1139.595466][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1139.595490][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1139.595509][ T38] ? fdget_pos+0x252/0x320 [ 1139.595536][ T38] ksys_write+0x156/0x270 [ 1139.595559][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1139.595592][ T38] do_syscall_64+0x166/0x520 [ 1139.595620][ T38] ? trace_irq_disable+0x3b/0x140 [ 1139.595641][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.595659][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1139.595681][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.595699][ T38] RIP: 0033:0x7f4cd0dfe159 [ 1139.595715][ T38] RSP: 002b:00007f4ccf056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.595732][ T38] RAX: ffffffffffffffda RBX: 00007f4cd1085fa0 RCX: 00007f4cd0dfe159 [ 1139.595745][ T38] RDX: 0000000000000009 RSI: 0000200000000800 RDI: 0000000000000003 [ 1139.595757][ T38] RBP: 00007f4cd0e9503b R08: 0000000000000000 R09: 0000000000000000 [ 1139.595769][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.595781][ T38] R13: 00007f4cd1086038 R14: 00007f4cd1085fa0 R15: 00007fff4f81a3a8 [ 1139.595811][ T38] [ 1139.595818][ T38] INFO: task syz.0.3390:16543 blocked for more than 143 seconds. [ 1139.595833][ T38] Tainted: G L syzkaller #0 [ 1139.595843][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.595852][ T38] task:syz.0.3390 state:D stack:27464 pid:16543 tgid:16537 ppid:15392 task_flags:0x400040 flags:0x00080002 [ 1139.595904][ T38] Call Trace: [ 1139.595910][ T38] [ 1139.595921][ T38] __schedule+0x16d9/0x5700 [ 1139.595970][ T38] ? __pfx___schedule+0x10/0x10 [ 1139.596007][ T38] rt_mutex_schedule+0x76/0xf0 [ 1139.596029][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1139.596064][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1139.596086][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1139.596107][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1139.596148][ T38] ? write_threads+0x3b4/0x610 [ 1139.596172][ T38] ? write_threads+0x3b4/0x610 [ 1139.596188][ T38] mutex_lock_nested+0x168/0x1d0 [ 1139.596213][ T38] write_threads+0x3b4/0x610 [ 1139.596234][ T38] ? __pfx_write_threads+0x10/0x10 [ 1139.596270][ T38] ? _copy_from_user+0x94/0xb0 [ 1139.596294][ T38] ? simple_transaction_get+0x130/0x170 [ 1139.596317][ T38] nfsctl_transaction_write+0x112/0x160 [ 1139.596337][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1139.596356][ T38] vfs_write+0x29f/0xbb0 [ 1139.596386][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1139.596408][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1139.596434][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1139.596458][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1139.596477][ T38] ? fdget_pos+0x252/0x320 [ 1139.596504][ T38] ksys_write+0x156/0x270 [ 1139.596527][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1139.596559][ T38] do_syscall_64+0x166/0x520 [ 1139.596583][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.596601][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1139.596630][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.596647][ T38] RIP: 0033:0x7f4cd0dfe159 [ 1139.596663][ T38] RSP: 002b:00007f4ccf035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.596680][ T38] RAX: ffffffffffffffda RBX: 00007f4cd1086090 RCX: 00007f4cd0dfe159 [ 1139.596694][ T38] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000004 [ 1139.596706][ T38] RBP: 00007f4cd0e9503b R08: 0000000000000000 R09: 0000000000000000 [ 1139.596717][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.596728][ T38] R13: 00007f4cd1086128 R14: 00007f4cd1086090 R15: 00007fff4f81a3a8 [ 1139.596760][ T38] [ 1139.596879][ T38] [ 1139.596879][ T38] Showing all locks held in the system: [ 1139.596890][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 1139.596903][ T38] #0: ffffffff8e09d7b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1139.596956][ T38] #1: ffffffff99ea21f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 1139.597003][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1139.597049][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1139.597062][ T38] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1139.597119][ T38] locks held by kworker/u8:23/1509: 3, on CPU#0: [ 1139.597132][ T38] #0: ffff88801d695938 ((wq_completion)pm_fs_sync){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1139.597181][ T38] #1: ffffc900070c7c40 (pm_fs_sync_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1139.597229][ T38] #2: ffff888038a2c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 1139.597290][ T38] locks held by getty/5362: 2, on CPU#1: [ 1139.597303][ T38] #0: ffff8880296550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1139.597347][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1139.597402][ T38] locks held by kworker/0:3/14720: 8, last CPU#0: [ 1139.597415][ T38] #0: ffff888021eb9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1139.597463][ T38] #1: ffffc9000ee27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1139.597512][ T38] #2: ffff88802a2ee210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1139.597561][ T38] #3: ffff8880609b4210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 1139.597608][ T38] #4: ffff88802bdbc1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1139.597667][ T38] #5: ffffffff8f97cc38 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1139.597713][ T38] #6: ffffffff8f6432a8 (nl_table_lock){++++}-{3:3}, at: netlink_broadcast_filtered+0x7e/0xea0 [ 1139.597758][ T38] #7: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 1139.597806][ T38] locks held by syz-executor/16034: 2, on CPU#1: [ 1139.597819][ T38] #0: ffff88808116a0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1139.597867][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1139.597915][ T38] locks held by syz.1.3362/16365: 3, on CPU#1: [ 1139.597928][ T38] #0: ffff88803845f328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.597973][ T38] #1: ffff8880355e4510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.598021][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.598065][ T38] locks held by syz.1.3362/16366: 3, on CPU#1: [ 1139.598078][ T38] #0: ffff88803845f528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.598120][ T38] #1: ffff8880355e4510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.598169][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.598211][ T38] locks held by syz.4.3378/16441: 2, on CPU#1: [ 1139.598225][ T38] #0: ffff888038a2c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1139.598272][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1139.598321][ T38] locks held by syz.0.3390/16538: 3, on CPU#1: [ 1139.598334][ T38] #0: ffff88806816d528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.598378][ T38] #1: ffff888041988510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.598426][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.598468][ T38] locks held by syz.0.3390/16543: 3, on CPU#0: [ 1139.598481][ T38] #0: ffff88803416c928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.598525][ T38] #1: ffff888041988510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.598573][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.598623][ T38] locks held by syz-executor/16715: 2, on CPU#0: [ 1139.598636][ T38] #0: ffff88802a48e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1139.598684][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1139.598732][ T38] locks held by syz.3.3425/16727: 3, on CPU#0: [ 1139.598745][ T38] #0: ffff888029fac728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.598788][ T38] #1: ffff888068c50510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.598836][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.598882][ T38] locks held by syz.6.3475/16956: 1, on CPU#1: [ 1139.598895][ T38] #0: ffff888038a2c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 1139.598944][ T38] locks held by syz.5.3481/16972: 3, on CPU#1: [ 1139.598957][ T38] #0: ffff888026fb9528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.598999][ T38] #1: ffff88803c22e510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599048][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1139.599091][ T38] locks held by syz.5.3481/16973: 3, on CPU#1: [ 1139.599104][ T38] #0: ffff8880294f2b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599140][ T38] #1: ffff88803c22e510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599188][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.599230][ T38] locks held by syz.5.3481/16974: 3, on CPU#1: [ 1139.599242][ T38] #0: ffff8880294f2d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599286][ T38] #1: ffff88803c22e510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599334][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.599379][ T38] locks held by syz.8.3498/17064: 3, on CPU#1: [ 1139.599392][ T38] #0: ffff8880355c6328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599434][ T38] #1: ffff88804c726510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599484][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.599530][ T38] locks held by syz.9.3524/17244: 3, on CPU#0: [ 1139.599543][ T38] #0: ffff888038919328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599587][ T38] #1: ffff888090ed6510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599651][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.599693][ T38] locks held by syz.9.3524/17245: 3, on CPU#1: [ 1139.599706][ T38] #0: ffff888027b2b328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599750][ T38] #1: ffff888090ed6510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599799][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.599843][ T38] locks held by syz.1.3532/17281: 5, on CPU#0: [ 1139.599855][ T38] #0: ffff88802adcad28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.599899][ T38] #1: ffff8880336a4510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.599948][ T38] #2: ffff8880977ca478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1139.599998][ T38] #3: ffff88801cef31e8 (kn->active#82){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1139.600052][ T38] #4: ffffffff8e06d918 (system_transition_mutex){+.+.}-{4:4}, at: pm_suspend+0x127/0x760 [ 1139.600094][ T38] locks held by syz.4.3542/17361: 3, on CPU#0: [ 1139.600107][ T38] #0: ffff888034a26928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600151][ T38] #1: ffff88806b036510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600199][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 1139.600243][ T38] locks held by syz.4.3542/17363: 3, on CPU#0: [ 1139.600256][ T38] #0: ffff8880343fa728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600300][ T38] #1: ffff88806b036510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600348][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 1139.600393][ T38] locks held by syz.3.3563/17458: 3, on CPU#0: [ 1139.600406][ T38] #0: ffff888026fad528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600449][ T38] #1: ffff888064ee2510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600498][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.600540][ T38] locks held by syz.3.3563/17459: 3, on CPU#0: [ 1139.600553][ T38] #0: ffff888026fadd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600597][ T38] #1: ffff888064ee2510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600651][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.600695][ T38] locks held by syz.0.3572/17482: 3, on CPU#0: [ 1139.600707][ T38] #0: ffff888028c08d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600751][ T38] #1: ffff88802d464510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600799][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1139.600844][ T38] locks held by syz.7.3581/17565: 3, on CPU#1: [ 1139.600857][ T38] #0: ffff888042289f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.600901][ T38] #1: ffff888080500510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.600950][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.600995][ T38] locks held by syz.2.3591/17652: 2, on CPU#0: [ 1139.601008][ T38] #0: ffff888037f76528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.601051][ T38] #1: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1139.601094][ T38] locks held by syz.6.3573/17658: 3, on CPU#0: [ 1139.601107][ T38] #0: ffff88803b771928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.601150][ T38] #1: ffff8880682ce510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.601198][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1139.601242][ T38] locks held by syz.6.3573/17659: 3, on CPU#1: [ 1139.601255][ T38] #0: ffff88803f9c1728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.601298][ T38] #1: ffff8880682ce510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.601348][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 1139.601389][ T38] locks held by syz.6.3573/17660: 3, on CPU#1: [ 1139.601401][ T38] #0: ffff88803f9c1f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1139.601439][ T38] #1: ffff8880682ce510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.601487][ T38] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 1139.601532][ T38] locks held by syz-executor/17691: 7, on CPU#1: [ 1139.601544][ T38] #0: ffff888035e54510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1139.601591][ T38] #1: ffff888045304878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1139.601648][ T38] #2: ffff8880296230f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1139.601701][ T38] #3: ffffffff8ee44818 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 1139.601749][ T38] #4: ffff88804f273160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1139.601799][ T38] #5: ffff888031f5c310 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbc0 [ 1139.601853][ T38] #6: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x87f/0x1160 [ 1139.601901][ T38] locks held by syz-executor/17739: 2, on CPU#1: [ 1139.601914][ T38] #0: ffffffff8fb221e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1139.601961][ T38] #1: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1139.602010][ T38] locks held by syz.5.3604/17784: 1, on CPU#1: [ 1139.602023][ T38] #0: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1139.602071][ T38] locks held by syz-executor/17788: 1, on CPU#0: [ 1139.602084][ T38] #0: ffffffff8f5d3f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1139.602127][ T38] [ 1139.602132][ T38] ============================================= [ 1139.602132][ T38] [ 1139.602141][ T38] NMI backtrace for cpu 0 [ 1139.602158][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1139.602182][ T38] Tainted: [L]=SOFTLOCKUP [ 1139.602188][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1139.602197][ T38] Call Trace: [ 1139.602205][ T38] [ 1139.602212][ T38] dump_stack_lvl+0xe8/0x150 [ 1139.602238][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1139.602259][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1139.602279][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1139.602301][ T38] sys_info+0x135/0x170 [ 1139.602318][ T38] watchdog+0xfd7/0x1030 [ 1139.602346][ T38] ? watchdog+0x1c7/0x1030 [ 1139.602374][ T38] kthread+0x38b/0x470 [ 1139.602392][ T38] ? __pfx_watchdog+0x10/0x10 [ 1139.602411][ T38] ? __pfx_kthread+0x10/0x10 [ 1139.602430][ T38] ret_from_fork+0x514/0xb70 [ 1139.602450][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.602468][ T38] ? __switch_to+0xc89/0x1420 [ 1139.602494][ T38] ? __pfx_kthread+0x10/0x10 [ 1139.602512][ T38] ret_from_fork_asm+0x1a/0x30 [ 1139.602543][ T38] [ 1139.602550][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1139.602588][ C1] NMI backtrace for cpu 1 [ 1139.602603][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1139.602625][ C1] Tainted: [L]=SOFTLOCKUP [ 1139.602631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1139.602640][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1139.602663][ C1] Code: e8 6e fc 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f e7 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1139.602678][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1139.602693][ C1] RAX: 1ffffffff33d4400 RBX: 00000000000003fd RCX: 0000000000000000 [ 1139.602705][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.602715][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.602726][ C1] R10: dffffc0000000000 R11: ffffffff85619c70 R12: dffffc0000000000 [ 1139.602739][ C1] R13: 0000000000000000 R14: ffffffff99ea2220 R15: 0000000000000000 [ 1139.602750][ C1] FS: 0000000000000000(0000) GS:ffff888125ccb000(0000) knlGS:0000000000000000 [ 1139.602764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1139.602783][ C1] CR2: 00007f76dcd9c26f CR3: 00000000a5346000 CR4: 00000000003526f0 [ 1139.602798][ C1] Call Trace: [ 1139.602804][ C1] [ 1139.602812][ C1] wait_for_lsr+0x190/0x300 [ 1139.602835][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1139.602864][ C1] serial8250_console_write+0xac5/0x1230 [ 1139.602889][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1139.602918][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1139.602948][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1139.602973][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1139.603005][ C1] nbcon_kthread_func+0x679/0x880 [ 1139.603033][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1139.603054][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1139.603078][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1139.603102][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1139.603133][ C1] kthread+0x38b/0x470 [ 1139.603149][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1139.603169][ C1] ? __pfx_kthread+0x10/0x10 [ 1139.603185][ C1] ret_from_fork+0x514/0xb70 [ 1139.603202][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.603217][ C1] ? __switch_to+0xc89/0x1420 [ 1139.603241][ C1] ? __pfx_kthread+0x10/0x10 [ 1139.603257][ C1] ret_from_fork_asm+0x1a/0x30 [ 1139.603280][ C1] [ 1139.611703][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1142.118490][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1142.129679][ T38] Tainted: [L]=SOFTLOCKUP [ 1142.133992][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1142.144485][ T38] Call Trace: [ 1142.147752][ T38] [ 1142.150670][ T38] vpanic+0x56d/0xa60 [ 1142.154643][ T38] ? __pfx___schedule+0x10/0x10 [ 1142.159488][ T38] ? __pfx_vpanic+0x10/0x10 [ 1142.163990][ T38] panic+0xc5/0xd0 [ 1142.167698][ T38] ? __pfx_panic+0x10/0x10 [ 1142.172095][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1142.177545][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1142.182930][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1142.189078][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1142.195224][ T38] watchdog+0x1030/0x1030 [ 1142.199554][ T38] ? watchdog+0x1c7/0x1030 [ 1142.203962][ T38] kthread+0x38b/0x470 [ 1142.208019][ T38] ? __pfx_watchdog+0x10/0x10 [ 1142.212687][ T38] ? __pfx_kthread+0x10/0x10 [ 1142.217264][ T38] ret_from_fork+0x514/0xb70 [ 1142.221844][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1142.226942][ T38] ? __switch_to+0xc89/0x1420 [ 1142.231610][ T38] ? __pfx_kthread+0x10/0x10 [ 1142.236186][ T38] ret_from_fork_asm+0x1a/0x30 [ 1142.240950][ T38] [ 1142.244377][ T38] Kernel Offset: disabled [ 1142.248727][ T38] Rebooting in 86400 seconds..