last executing test programs: 1m18.341627226s ago: executing program 3 (id=70): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000040)=@raw=[@generic={0x18}, @generic, @generic={0x95}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x1, 0x25, 0x0, @void}, 0x10) 1m18.152594068s ago: executing program 3 (id=71): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @empty}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/128, 0x80, 0x0, 0x0, 0x0) 1m16.988429089s ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='offline\x00', 0x7) write(r0, &(0x7f0000000400)='online_movable\x00', 0xe) 1m16.792148355s ago: executing program 3 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='active\n', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='idle\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r9, &(0x7f0000000640)='1\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r10, &(0x7f00000006c0)='1024\n', 0x5) 1m16.371206833s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407d1e38310000000000010902220001010080fa09040000010300000009211101000122320007058103400001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022320005010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ryos/roccatryos0/info\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/256, 0x100) 1m11.548033671s ago: executing program 3 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000010)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000010)='./sys\x00', &(0x7f0000000020)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='8\n', 0x2) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) 1m11.444883892s ago: executing program 32 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./rpc_pipefs\x00', &(0x7f0000000580)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0\n\x00\x00', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f00000009c0)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000a40)={0x0, 0x5f5e100}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000ac0)={0x0, 0x5f5e100}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r8, &(0x7f0000000b40)=""/1034, 0x40a) write(r8, &(0x7f0000000f80)='\x00'/1034, 0x40a) read(r9, &(0x7f00000013c0)=""/1034, 0x40a) write(r9, &(0x7f0000001800)='\x00'/1034, 0x40a) read(r10, &(0x7f0000001c40)=""/1034, 0x40a) write(r10, &(0x7f0000002080)='\x00'/1034, 0x40a) nanosleep(&(0x7f00000024c0)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002500)='./mnt\x00', 0x1ff) mount(&(0x7f0000002540)=@filename='127.0.0.1:/\x00', &(0x7f0000002580)='./mnt\x00', &(0x7f00000025c0)='nfs4\x00', 0x0, &(0x7f0000002600)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 1m10.081414589s ago: executing program 0 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x3, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x4, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x6, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x7, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x8, 0x80}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) 1m9.913008656s ago: executing program 0 (id=100): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04f00800000000000109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x24, &(0x7f0000001300)={0x0, 0x0, 0xa, {0xa, 0x0, "0100000000000000"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x8, "0100000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) r2 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000400)=0x1) r3 = syz_open_dev$video(&(0x7f0000000100), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000400)=0x1) r4 = syz_open_dev$video(&(0x7f0000000100), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000400)=0x1) 1m9.11928971s ago: executing program 0 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004086804c0b00020102030109023700020100a0320904000002ff00000007058102000200070502020002000904010002ff0000000705830200020007050402000200"], 0x0) nanosleep(&(0x7f0000000900)={0x1}, 0x0) syz_usb_ep_read(r0, 0x2, 0x10, &(0x7f0000000100)=""/16) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000200)="0102010400000000") syz_usb_ep_read(r0, 0x2, 0x10, &(0x7f0000000300)=""/16) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="010401020000") syz_usb_ep_read(r0, 0x2, 0x10, &(0x7f0000000500)=""/16) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000600)="0105010100") syz_usb_ep_read(r0, 0x2, 0x10, &(0x7f0000000700)=""/16) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000800)="0108010401000000") r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/spi_master/spi0/slave\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='spidev\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/spi_master/spi1/slave\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='spidev\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/spi_master/spi2/slave\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='spidev\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/class/spi_master/spi3/slave\x00', 0x2, 0x0) write(r4, &(0x7f0000001100)='spidev\x00', 0x7) 1m5.913328234s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,sec=none\x00') (async) 1m5.757641946s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='7777\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\x00', 0x1) 1m5.695079864s ago: executing program 0 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 1m4.633081531s ago: executing program 33 (id=62): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_size\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='1024\n', 0x5) 56.342529215s ago: executing program 34 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000010)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000010)='./sys\x00', &(0x7f0000000020)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='8\n', 0x2) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) 55.733336369s ago: executing program 7 (id=133): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ebe2d0001010203010902220001010080320904000001030002000921110100012222000705810308000a"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x0, 0x3, 0x4, {0x4, 0x3, "0904"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/roccatkonepure0\x00', 0x2, 0x0) ioctl(r1, 0x800448f1, &(0x7f0000000700)='\x00\x00\x00\x00') 52.335863047s ago: executing program 7 (id=144): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./sda1\x00', 0x81ff, 0x800001) quotactl$Q_GETINFO(0x80000500, &(0x7f0000000080)=@filename='./sda1\x00', 0x0, &(0x7f0000000100)) 52.217112776s ago: executing program 7 (id=145): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae1210001000000010902270001010080fa0904000003e0010100070581020002000705020200020007058303100001"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000001)) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x1, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="01f1000400000000", 0x8, 0x0, 0x0, 0x0) 50.69450794s ago: executing program 7 (id=152): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40950b20770000010203010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x7, 0x2, 0x1234}, &(0x7f0000000210)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000220)={0x40, 0xb, 0x2, "1234"}, &(0x7f0000000230)={0x40, 0xf, 0x2, 0x1234}, &(0x7f0000000240)={0x40, 0x13, 0x6, @random="aa00"}, &(0x7f0000000250)={0x40, 0x17, 0x6, @random="aa00"}, &(0x7f0000000260)={0x40, 0x19, 0x2, "1234"}, &(0x7f0000000270)={0x40, 0x1a, 0x2, 0x1234}, &(0x7f0000000280)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000290)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000002a0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 50.637973013s ago: executing program 35 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 47.39311674s ago: executing program 7 (id=167): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341278560000000000010902240001010000000904000001030000000921000000012208000905810308000a0000"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 45.701122499s ago: executing program 7 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r4, &(0x7f0000000240), 0x40a) write(r4, &(0x7f0000000280), 0x40a) read(r4, &(0x7f00000002c0), 0x40a) write(r4, &(0x7f0000000340), 0x40a) read(r5, &(0x7f0000000380), 0x40a) write(r5, &(0x7f00000003c0), 0x40a) read(r5, &(0x7f0000000440), 0x40a) write(r5, &(0x7f0000000480), 0x40a) read(r6, &(0x7f00000004c0), 0x40a) write(r6, &(0x7f0000000540), 0x40a) read(r6, &(0x7f0000000580), 0x40a) write(r6, &(0x7f00000005c0), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 45.072895549s ago: executing program 9 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,sec=none\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601806062b0601050502a00e300c060a2b06010401823702020a000000000000", 0xa4, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000054fe534d4240000100000000000100010001000000000000000100000000000000000000000100000000000000000000000000000000000000000000000900000048000c00a1073005a0030a0100000000", 0x58, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) close(r1) accept(r0, 0x0, 0x0) 44.085332949s ago: executing program 9 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000480)='./mnt/file\x00', &(0x7f00000004c0)=@random={'system.', 'nfs4_acl\x00'}, &(0x7f0000000500)='\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06OWNER@\x00\x00', 0x1c, 0x0) 30.28164792s ago: executing program 36 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r4, &(0x7f0000000240), 0x40a) write(r4, &(0x7f0000000280), 0x40a) read(r4, &(0x7f00000002c0), 0x40a) write(r4, &(0x7f0000000340), 0x40a) read(r5, &(0x7f0000000380), 0x40a) write(r5, &(0x7f00000003c0), 0x40a) read(r5, &(0x7f0000000440), 0x40a) write(r5, &(0x7f0000000480), 0x40a) read(r6, &(0x7f00000004c0), 0x40a) write(r6, &(0x7f0000000540), 0x40a) read(r6, &(0x7f0000000580), 0x40a) write(r6, &(0x7f00000005c0), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 28.674370991s ago: executing program 37 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000480)='./mnt/file\x00', &(0x7f00000004c0)=@random={'system.', 'nfs4_acl\x00'}, &(0x7f0000000500)='\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06OWNER@\x00\x00', 0x1c, 0x0) 27.757391558s ago: executing program 8 (id=230): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000081aeb00280000000000010902190001010080fa0904000001ffffff0007058301000401"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 23.918548003s ago: executing program 8 (id=242): r0 = syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001010203010902400001010080320904000002ff00000007058102000200070501020002000904000101ff000000070582010004010904000601ff00000007058201000401"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0x1, @raw_data}) 20.637580992s ago: executing program 8 (id=248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='read-aut', 0x8) 20.390490223s ago: executing program 8 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='127.0.0.1\x00', 0x9) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000600)='7777\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\x00', 0x1) 20.205271448s ago: executing program 8 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @rand_addr=0x64010100}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1043}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e87, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r3, 0x10}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010100}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r4) 20.132973067s ago: executing program 8 (id=251): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000003000)={0x14, 0x0, 0x0}, &(0x7f0000003100)={0x34, &(0x7f0000003200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000003300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000004000)={0x14, 0x0, 0x0}, &(0x7f0000004100)={0x34, &(0x7f0000004200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000004300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000005000)={0x14, 0x0, 0x0}, &(0x7f0000005100)={0x34, &(0x7f0000005200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000005300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000006000)={0x14, 0x0, 0x0}, &(0x7f0000006100)={0x34, &(0x7f0000006200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000006300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000007000)={0x14, 0x0, 0x0}, &(0x7f0000007100)={0x34, &(0x7f0000007200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000007300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000008000)={0x14, 0x0, 0x0}, &(0x7f0000008100)={0x34, &(0x7f0000008200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000008300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000009000)={0x14, 0x0, 0x0}, &(0x7f0000009100)={0x34, &(0x7f0000009200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000009300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f000000a000)={0x14, 0x0, 0x0}, &(0x7f000000a100)={0x34, &(0x7f000000a200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f000000a300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000001140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000001140)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./sys/bus/usb/devices/3-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000001140)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/4-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000001140)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r5, &(0x7f0000001140)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./sys/bus/usb/devices/6-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000001140)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys/bus/usb/devices/7-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r7, &(0x7f0000001140)='0\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/bus/usb/devices/8-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r8, &(0x7f0000001140)='0\x00', 0x2) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 17.017409604s ago: executing program 1 (id=261): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401aeb00280001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x10, &(0x7f0000000700)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x10, &(0x7f0000000900)={0x40, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x10, &(0x7f0000000b00)={0x40, 0x2, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 13.989240786s ago: executing program 1 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='id_ext=0123456789abcdef,ioc_guid=0123456789abcdef,dest=127.0.0.1:3260\x00', 0x45) 13.341409498s ago: executing program 1 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,sec=none\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601806062b0601050502a00e300c060a2b06010401823702020a000000000000", 0xa4, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000054fe534d4240000100000000000100010001000000000000000100000000000000000000000100000000000000000000000000000000000000000000000900000048000c00a1073005a0030a0100000000", 0x58, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) close(r1) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 12.480371941s ago: executing program 1 (id=276): mmap(&(0x7f0000000000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000033000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000035000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000037000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000003b000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x20000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x4000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x100000)=nil, 0x100000) 10.974258568s ago: executing program 5 (id=277): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000800)={0x1d, r1, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)='\x00', 0x1}}, 0x0) write(r0, &(0x7f0000000600)="0100ec98080000001000000000000000", 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 9.984184382s ago: executing program 5 (id=280): r0 = syz_usb_connect(0x3, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da040d390001010203010902350001010080fa0904000005ff0000000705810200020007058202000200070501020002000705020200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000800)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000e00)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000001000)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000001200)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000001400)={0x40, 0x2, 0xc, "000000008a08c83100000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000001500)={0x2}, 0x0) 9.710571314s ago: executing program 2 (id=282): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280001010203010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000014c0)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x20, '@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x2) 9.583241965s ago: executing program 6 (id=283): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, &(0x7f0000000100)) 9.453947326s ago: executing program 6 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='md0\n', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='raid1\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='active\n', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='idle\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r9, &(0x7f0000000640)='1\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r10, &(0x7f00000006c0)='1024\n', 0x5) 9.162008596s ago: executing program 1 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="75736230000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000300)="75736231000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000400)="75736232000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000500)="75736233000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000600)="65746830000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000700)="65746831000000000000000000000000031000"/40) ioctl(r0, 0x8914, &(0x7f0000000800)="65746832000000000000000000000000031000"/40) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, &(0x7f0000001400)={0x0, 0xa, 0x1}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 8.932644981s ago: executing program 6 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='127.0.0.1\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\x00', 0x1) 8.609524257s ago: executing program 6 (id=287): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x8, 'BBBB', {0x3, 0x100, 0x0, 0x1, 0x100}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x10}]}, 0x38}}, 0x0) 7.459192564s ago: executing program 4 (id=290): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0xa, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1dcd6500}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.773315841s ago: executing program 5 (id=291): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020f003176c0000000000010902240001010000000904000002070103000705010200020007058202000200"], 0x0) syz_usb_ep_read(r0, 0x3, 0x1f, &(0x7f0000000100)=""/31) 6.522606766s ago: executing program 4 (id=292): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae1210001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 5.966919553s ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='/tmp\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='1\n\x00', 0x2) 5.813458523s ago: executing program 6 (id=294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x10, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000100)={0x2}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="75736230000000000000000000000000031000"/40) 4.768867448s ago: executing program 38 (id=251): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000003000)={0x14, 0x0, 0x0}, &(0x7f0000003100)={0x34, &(0x7f0000003200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000003300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000004000)={0x14, 0x0, 0x0}, &(0x7f0000004100)={0x34, &(0x7f0000004200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000004300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000005000)={0x14, 0x0, 0x0}, &(0x7f0000005100)={0x34, &(0x7f0000005200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000005300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000006000)={0x14, 0x0, 0x0}, &(0x7f0000006100)={0x34, &(0x7f0000006200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000006300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000007000)={0x14, 0x0, 0x0}, &(0x7f0000007100)={0x34, &(0x7f0000007200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000007300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000008000)={0x14, 0x0, 0x0}, &(0x7f0000008100)={0x34, &(0x7f0000008200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000008300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000009000)={0x14, 0x0, 0x0}, &(0x7f0000009100)={0x34, &(0x7f0000009200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f0000009300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f000000a000)={0x14, 0x0, 0x0}, &(0x7f000000a100)={0x34, &(0x7f000000a200)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, &(0x7f000000a300)={0xc0, 0xa1, 0x4, 0x78500000}, 0x0, 0x0}) nanosleep(&(0x7f0000002000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000001140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000001140)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./sys/bus/usb/devices/3-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000001140)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/4-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000001140)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r5, &(0x7f0000001140)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./sys/bus/usb/devices/6-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000001140)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys/bus/usb/devices/7-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r7, &(0x7f0000001140)='0\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/bus/usb/devices/8-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r8, &(0x7f0000001140)='0\x00', 0x2) nanosleep(&(0x7f0000002000)={0x1}, 0x0) 4.504616237s ago: executing program 2 (id=296): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) process_mrelease(r0, 0x0) 4.314528954s ago: executing program 2 (id=297): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x5f5e100}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.87324498s ago: executing program 4 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='active\n', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='idle\n', 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r10, &(0x7f0000000640)='1\n', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r11, &(0x7f00000006c0)='1024\n', 0x5) 3.841681035s ago: executing program 4 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='127.0.0.1\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/ocfs2/node/node1/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/cluster/ocfs2/node/node1/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\x00', 0x1) 3.774089557s ago: executing program 4 (id=300): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 3.688816589s ago: executing program 5 (id=301): r0 = syz_io_uring_setup(0x8, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind(r4, &(0x7f0000000100)=@generic={0x21, "34000200100002001b5b00"}, 0x80) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind(r5, &(0x7f0000000200)=@generic={0x21, "01000200100002001b5800"}, 0x80) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000510)=""/1024, 0x400}], 0x1, &(0x7f0000000400)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)='\x00'/260, 0x104}, {&(0x7f0000002200)="00000001", 0x4}, {&(0x7f0000002300)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000002400)='\x00'/632, 0x278}, {&(0x7f0000002500)="00000004", 0x4}, {&(0x7f0000002600)='\x00'/64, 0x40}, {&(0x7f0000002700)="00001000", 0x4}, {&(0x7f0000002800)='\x00'/36, 0x24}], 0x8, &(0x7f0000000400)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000320)={0x0, 0x0, &(0x7f0000000520)=[{&(0x7f0000000530)=""/1024, 0x400}], 0x1, &(0x7f0000000420)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000620)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003100)="0000000100000002000000030000000400000005000000060000000700000008000000090000000a0000000b", 0x2c}, {&(0x7f0000003200)="0000000100000001000000017f000001", 0x10}], 0x2, &(0x7f0000000420)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000550)=""/1024, 0x400}], 0x1, &(0x7f0000000440)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a80)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000004100)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000440)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000360)={0x0, 0x0, &(0x7f0000000560)=[{&(0x7f0000000570)=""/1024, 0x400}], 0x1, &(0x7f0000000460)=""/24, 0x18}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000660)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000005100)="0000000100000002", 0x8}, {&(0x7f0000005200)='\x00'/112, 0x70}], 0x2, &(0x7f0000000460)=[{0x18, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}], 0x18}}) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:root.cell\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000900)='afs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/test\x00', 0x40, 0x1ff) 3.615565804s ago: executing program 5 (id=302): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x505, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xf4240, 0x1000}}}}]}, 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000400)={0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000500)=@req={0x1000, 0x3, 0x1000, 0x3}, 0x10) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x3, 0x11, r3, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, &(0x7f0000000700)="010000000000000010000000", 0xc) read(r4, &(0x7f0000008000)=""/12, 0xc) write(r5, &(0x7f0000000700)="010000000000000010000000", 0xc) read(r4, &(0x7f0000009000)=""/12, 0xc) write(r5, &(0x7f0000000700)="010000000000000010000000", 0xc) read(r4, &(0x7f000000a000)=""/12, 0xc) sendmsg(r3, &(0x7f0000000800)={&(0x7f0000000900)=@ll={0x11, 0x300, r1}, 0x14, &(0x7f0000000a00)=[{&(0x7f0000000b00)='\x00', 0x1}], 0x1}, 0x0) 3.36453523s ago: executing program 2 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,sec=none\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000200000000000601806062b0601050502a00e300c060a2b06010401823702020a000000000000", 0xa4, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000054fe534d4240000100000000000100010001000000000000000100000000000000000000000100000000000000000000000000000000000000000000000900000048000c00a1073005a0030a0100000000", 0x58, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) accept(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 2.788712939s ago: executing program 4 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='-2 -3 +4\n\x00', 0x9) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000540)={0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) write(r6, &(0x7f0000000a00)="010500000100000001", 0x40a) write(r6, &(0x7f0000000b00)="010400000200000000", 0x40a) close(r6) nanosleep(&(0x7f0000000540)={0x1}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000580)={0x2, 0x801, @loopback}, 0x10) write(r7, &(0x7f00000005c0)="80000098123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000010000000200000016000000200100010000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000001000010000000001c00000001000000000000000000000001000000064f574e4552400000", 0x9c) 2.464851324s ago: executing program 2 (id=305): syz_usb_connect(0x3, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820544000001000000010902710004010080320904000000ff0100000904010000ff0200000904010101ff0200000b2402010203180144ac00070581010001010904020000ff0400000904020101ff0400000b2402010203180144ac00070502010001010904030002ff0300000705030200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x0, 0x0) 280.179854ms ago: executing program 2 (id=306): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080fa09040001040000000007058102400000070582024000000705010240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, &(0x7f0000000204)={0xc0, 0x1, 0x4, 0x1010004}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 409.048µs ago: executing program 6 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000110)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r9, &(0x7f0000001000), 0x40a) write(r9, &(0x7f0000003000), 0x40a) read(r8, &(0x7f0000001000), 0x40a) write(r8, &(0x7f0000002000)="010400000100000001", 0x9) read(r8, &(0x7f0000003000), 0x40a) write(r8, &(0x7f0000004000)="0105000002000000", 0x8) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 0s ago: executing program 5 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:06.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='1\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:08.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='1\x00', 0x1) kernel console output (not intermixed with test programs): ed in future, please upgrade to mdadm-4.5+ [ 107.498858][ T50] usb 2-1: USB disconnect, device number 4 [ 107.640788][ T6045] md: could not open device unknown-block(1,0). [ 107.657281][ T6044] md: could not open device unknown-block(1,0). [ 107.660665][ T6047] md: could not open device unknown-block(1,1). [ 107.660966][ T6038] md: could not open device unknown-block(1,1). [ 107.686660][ T6054] block2mtd: error: cannot open device /dev/loop0 [ 107.693217][ T6054] ubi0: attaching mtd1 [ 107.754437][ T6015] lo speed is unknown, defaulting to 1000 [ 107.756705][ T6055] UBIFS error (pid: 6055): cannot open "ubi0_0", error -19 [ 107.814704][ T6054] ubi0: scanning is finished [ 107.814828][ T6054] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 108.064589][ T6054] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 108.193171][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.265015][ T6015] lo speed is unknown, defaulting to 1000 [ 108.322993][ T985] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.343726][ T50] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 108.346544][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.479599][ T985] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 108.482461][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.778301][ T985] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, ba:37:02:38:90:dc [ 108.939376][ T6063] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.954859][ T6015] lo speed is unknown, defaulting to 1000 [ 108.983190][ T6063] md: could not open device unknown-block(7,0). [ 109.084448][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 109.084510][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=082d, bcdDevice= 0.00 [ 109.306448][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.339741][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:082d) [ 109.411515][ T5984] md_update_sb: can't update sb for read-only array md0 [ 109.765599][ T10] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 109.776852][ T10] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 109.787162][ T10] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 109.795629][ T10] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 109.808364][ T6085] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.820513][ T6085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.829978][ T6085] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.840394][ T6085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 109.845779][ T50] usb 5-1: NFC: Reader power on cmd error -71 [ 109.845829][ T50] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 109.845989][ T50] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 109.891705][ T50] usb 5-1: USB disconnect, device number 3 [ 110.032665][ T10] wiimote 0005:057E:0306.0002: unbalanced collection at end of report description [ 110.043915][ T10] wiimote 0005:057E:0306.0002: HID parse failed [ 110.050891][ T10] wiimote 0005:057E:0306.0002: probe with driver wiimote failed with error -22 [ 110.663054][ T985] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.814703][ T985] usb 5-1: New USB device found, idVendor=040a, idProduct=0300, bcdDevice= 1.00 [ 110.818502][ T50] usb 4-1: USB disconnect, device number 3 [ 110.852322][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.852403][ T985] usb 5-1: Product: syz [ 110.852420][ T985] usb 5-1: Manufacturer: syz [ 110.852436][ T985] usb 5-1: SerialNumber: syz [ 110.890781][ T985] gspca_main: spca500-2.14.0 probing 040a:0300 [ 110.953318][ T6095] block2mtd: error: cannot open device /dev/loop0 [ 111.026317][ T6098] ubi0: attaching mtd1 [ 111.162150][ T6098] ubi0: scanning is finished [ 111.162305][ T6098] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 111.204264][ T6095] UBIFS error (pid: 6095): cannot open "ubi0_0", error -19 [ 111.306203][ T6098] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 111.652943][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.804566][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 1.00 [ 111.808186][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.808219][ T10] usb 4-1: Product: syz [ 111.808237][ T10] usb 4-1: Manufacturer: syz [ 111.808255][ T10] usb 4-1: SerialNumber: syz [ 112.097982][ T985] usb 5-1: USB disconnect, device number 4 [ 112.227719][ T10] ljca 4-1:1.0: probe with driver ljca failed with error -22 [ 114.044165][ T6015] lo speed is unknown, defaulting to 1000 [ 114.079346][ T5739] usb 1-1: USB disconnect, device number 2 [ 114.089299][ T5739] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 114.214473][ T6117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.285385][ T5984] md_update_sb: can't update sb for read-only array md0 [ 114.316303][ T6117] md: could not open device unknown-block(1,0). [ 114.322639][ T5984] md_update_sb: can't update sb for read-only array md0 [ 114.396395][ T6117] md: could not open device unknown-block(1,1). [ 114.397319][ T5984] md_update_sb: can't update sb for read-only array md0 [ 114.492162][ T50] usb 4-1: USB disconnect, device number 4 [ 114.660153][ T6125] kAFS: unable to lookup cell 'root.cell' [ 115.096340][ T6015] lo speed is unknown, defaulting to 1000 [ 115.183056][ T50] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.345788][ T50] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 115.347290][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.397192][ T50] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 115.629416][ T6015] lo speed is unknown, defaulting to 1000 [ 116.007224][ T6159] rdma_rxe: rxe_newlink: failed to add veth0 [ 116.133063][ T5761] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 116.158775][ T6149] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 116.234953][ T6163] rdma_rxe: rxe_newlink: failed to add veth0 [ 116.285188][ T5761] usb 3-1: not running at top speed; connect to a high speed hub [ 116.285252][ T5761] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 2.00 [ 116.286333][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 116.286367][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 116.288551][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.288576][ T5761] usb 3-1: Product: syz [ 116.288594][ T5761] usb 3-1: Manufacturer: syz [ 116.288611][ T5761] usb 3-1: SerialNumber: syz [ 116.305854][ T6154] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.306002][ T6154] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.517596][ T5761] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 116.546794][ T5740] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 116.662710][ T6175] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.816057][ T5739] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 116.867007][ T6177] md: could not open device unknown-block(1,0). [ 116.868074][ T6178] md: could not open device unknown-block(1,1). [ 117.293132][ T5740] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.311741][ T6171] ceph: No mds server is up or the cluster is laggy [ 117.323609][ T5739] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 117.453983][ T5740] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 117.455118][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.917200][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.943035][ T50] usb 1-1: USB disconnect, device number 3 [ 117.988153][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.068406][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.394176][ T50] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 118.484603][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492518][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492547][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492571][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492595][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492619][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492642][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492666][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492689][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.492720][ T5740] ryos 0003:1E7D:3138.0003: unknown main item tag 0x0 [ 118.560644][ T5740] ryos 0003:1E7D:3138.0003: hidraw0: USB HID v1.11 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 118.722930][ T6200] rdma_rxe: rxe_newlink: failed to add lo [ 119.398342][ T5761] dvb_usb_rtl28xxu 3-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 119.594659][ T50] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 119.595563][ T50] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 119.595600][ T50] usb 1-1: can't read configurations, error -71 [ 119.657814][ T5622] usb 3-1: USB disconnect, device number 5 [ 119.852782][ T6216] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 119.852821][ T6216] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.853532][ T6216] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 119.853961][ T6216] page_type: f5(slab) [ 119.853986][ T6216] raw: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 119.854010][ T6216] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 119.854036][ T6216] head: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122 [ 119.854060][ T6216] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 119.854085][ T6216] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 119.854109][ T6216] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 119.854125][ T6216] page dumped because: unmovable page [ 119.854138][ T6216] page_owner tracks the page as allocated [ 119.854153][ T6216] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5615, tgid 5615 (syz-executor), ts 83479025153 [ 119.854445][ T6216] post_alloc_hook+0x1f9/0x250 [ 119.854485][ T6216] get_page_from_freelist+0x2209/0x2280 [ 119.854512][ T6216] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 119.854538][ T6216] allocate_slab+0x7d/0x620 [ 119.854568][ T6216] refill_objects+0x2d5/0x350 [ 119.854600][ T6216] __pcs_replace_empty_main+0x2c8/0x6c0 [ 119.854629][ T6216] __kmalloc_noprof+0x47b/0x720 [ 119.854666][ T6216] tomoyo_realpath_from_path+0xef/0x640 [ 119.854696][ T6216] tomoyo_check_open_permission+0x229/0x470 [ 119.854745][ T6216] security_file_open+0xa9/0x240 [ 119.854782][ T6216] do_dentry_open+0x4a0/0x1380 [ 119.854809][ T6216] vfs_open+0x3b/0x340 [ 119.854834][ T6216] path_openat+0x1443/0x1d60 [ 119.854872][ T6216] do_file_open+0x23e/0x4a0 [ 119.854908][ T6216] do_sys_openat2+0x115/0x200 [ 119.854936][ T6216] __x64_sys_openat+0x138/0x170 [ 119.854965][ T6216] page last free pid 5607 tgid 5607 ts 83208151492 stack trace: [ 119.854984][ T6216] __free_frozen_pages+0xc93/0xd90 [ 119.855019][ T6216] __slab_free+0x274/0x2c0 [ 119.855042][ T6216] qlist_free_all+0x99/0x100 [ 119.855064][ T6216] kasan_quarantine_reduce+0x148/0x160 [ 119.855103][ T6216] __kasan_slab_alloc+0x22/0x80 [ 119.855129][ T6216] __kmalloc_noprof+0x307/0x720 [ 119.855442][ T6216] tomoyo_supervisor+0xc53/0x1560 [ 119.855473][ T6216] tomoyo_path_permission+0x262/0x3b0 [ 119.855511][ T6216] tomoyo_check_open_permission+0x2b2/0x470 [ 119.855549][ T6216] security_file_open+0xa9/0x240 [ 119.855585][ T6216] do_dentry_open+0x4a0/0x1380 [ 119.855612][ T6216] vfs_open+0x3b/0x340 [ 119.855637][ T6216] path_openat+0x1443/0x1d60 [ 119.855673][ T6216] do_file_open+0x23e/0x4a0 [ 119.855709][ T6216] do_sys_openat2+0x115/0x200 [ 119.855743][ T6216] __x64_sys_openat+0x138/0x170 [ 119.949646][ T6218] CIFS: Attempting to mount //127.0.0.1/share [ 120.476184][ T6207] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 120.632972][ T50] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.771797][ T6218] CIFS: VFS: cifs_mount failed w/return code = -512 [ 120.783796][ T50] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 120.785016][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.801326][ T1940] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.875418][ T6225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.976244][ T1940] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.990795][ T1940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.990850][ T1940] usb 2-1: Product: syz [ 120.990890][ T1940] usb 2-1: Manufacturer: syz [ 120.990915][ T1940] usb 2-1: SerialNumber: syz [ 121.000757][ T6227] md: could not open device unknown-block(1,0). [ 121.001200][ T6229] md: could not open device unknown-block(1,1). [ 121.077922][ T50] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 121.120575][ T50] usb 1-1: USB disconnect, device number 5 [ 121.347119][ T50] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 121.357671][ T50] wiimote 0005:057E:0306.0004: New device registered [ 121.805460][ T5739] usb 4-1: USB disconnect, device number 5 [ 122.055832][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.067317][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.074798][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.083440][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.091132][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.166313][ T6235] wiimote 0005:057E:0306.0004: Device removed [ 122.436878][ T50] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 122.518644][ T50] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 122.542550][ T50] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input10 [ 122.568291][ T50] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 122.862479][ T6244] lo speed is unknown, defaulting to 1000 [ 122.997076][ T6260] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.053846][ T6260] md: could not open device unknown-block(7,0). [ 123.605838][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.606026][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.606460][ T6244] bridge_slave_0: entered allmulticast mode [ 123.608514][ T6244] bridge_slave_0: entered promiscuous mode [ 123.611652][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.611855][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.611984][ T6244] bridge_slave_1: entered allmulticast mode [ 123.614177][ T6244] bridge_slave_1: entered promiscuous mode [ 123.655876][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.677730][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.702958][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.712690][ T6244] team0: Port device team_slave_0 added [ 123.717169][ T6244] team0: Port device team_slave_1 added [ 123.748108][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.748140][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.749365][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.751643][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.751659][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.751691][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.815750][ T6244] hsr_slave_0: entered promiscuous mode [ 123.816950][ T6244] hsr_slave_1: entered promiscuous mode [ 123.817800][ T6244] debugfs: 'hsr0' already exists in 'hsr' [ 123.817822][ T6244] Cannot create hsr debugfs directory [ 123.854248][ T5761] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00 [ 123.855342][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.875964][ T5761] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 123.876043][ T5761] gspca_stv06xx: st6422 sensor detected [ 124.076305][ T6244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.087729][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.088962][ T6244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.099042][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.101964][ T6244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.116831][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.118721][ T6244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.129929][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.178652][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.178801][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.180160][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.180300][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.193267][ T5621] Bluetooth: hci6: command tx timeout [ 124.225096][ T5761] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 124.235536][ T5761] usb 1-1: USB disconnect, device number 6 [ 124.326247][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.366271][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.376343][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.404361][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.413785][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.413906][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.445368][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.445507][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.695008][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.855927][ T5761] usb 1-1: New USB device found, idVendor=8086, idProduct=0b4c, bcdDevice= 2.00 [ 124.860004][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.860031][ T5761] usb 1-1: Product: syz [ 124.860049][ T5761] usb 1-1: Manufacturer: syz [ 124.860066][ T5761] usb 1-1: SerialNumber: syz [ 125.001687][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.288912][ T6244] veth0_vlan: entered promiscuous mode [ 125.297453][ T6244] veth1_vlan: entered promiscuous mode [ 125.327500][ T6244] veth0_macvtap: entered promiscuous mode [ 125.332300][ T6244] veth1_macvtap: entered promiscuous mode [ 125.349411][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.354542][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.403005][ T3325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.404282][ T3325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.404326][ T3325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.404367][ T3325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.468652][ T3325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.468697][ T3325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.516309][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.516362][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.630536][ T1940] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 125.630625][ T1940] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 125.638411][ T1940] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 125.672728][ T1940] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 125.713964][ T1940] usb 2-1: USB disconnect, device number 5 [ 126.073540][ T1940] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.244171][ T1940] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.00 [ 126.247732][ T1940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.247766][ T1940] usb 2-1: Product: syz [ 126.247785][ T1940] usb 2-1: Manufacturer: syz [ 126.247802][ T1940] usb 2-1: SerialNumber: syz [ 126.276846][ T5621] Bluetooth: hci6: command tx timeout [ 126.481271][ T1940] hdpvr 2-1:1.0: firmware version 0x0 dated [ 126.481310][ T1940] hdpvr 2-1:1.0: untested firmware, the driver might not work. [ 127.377919][ T6318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.398228][ T5739] usb 1-1: USB disconnect, device number 7 [ 127.516686][ T6323] CIFS: Attempting to mount //127.0.0.1/share [ 127.536776][ T6323] CIFS: VFS: Error connecting to socket. Aborting operation. [ 127.536877][ T6323] CIFS: VFS: cifs_mount failed w/return code = -111 [ 127.567776][ T6320] md: could not open device unknown-block(1,0). [ 127.571889][ T6324] md: could not open device unknown-block(1,1). [ 128.064143][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 128.244122][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 128.245611][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.353180][ T5621] Bluetooth: hci6: command tx timeout [ 128.677277][ T10] hid-sensor-hub 0003:8086:0000.0005: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.6-1/input0 [ 128.919101][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.922960][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.923656][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.924932][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.926335][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.422973][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.557688][ T6338] lo speed is unknown, defaulting to 1000 [ 129.593897][ T10] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 129.596829][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.830344][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 130.135298][ T1940] hdpvr 2-1:1.0: Could not setup controls [ 130.136396][ T1940] hdpvr 2-1:1.0: registering videodev failed [ 130.160364][ T1940] hdpvr 2-1:1.0: probe with driver hdpvr failed with error -71 [ 130.170544][ T1940] usb 2-1: USB disconnect, device number 6 [ 130.246310][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.246492][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.246626][ T6338] bridge_slave_0: entered allmulticast mode [ 130.248731][ T6338] bridge_slave_0: entered promiscuous mode [ 130.252914][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.253094][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.253222][ T6338] bridge_slave_1: entered allmulticast mode [ 130.255337][ T6338] bridge_slave_1: entered promiscuous mode [ 130.301519][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.312335][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.341863][ T6338] team0: Port device team_slave_0 added [ 130.345348][ T6338] team0: Port device team_slave_1 added [ 130.374082][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.374128][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.374160][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.376198][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.376214][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.376251][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.439378][ T6338] hsr_slave_0: entered promiscuous mode [ 130.440702][ T6338] hsr_slave_1: entered promiscuous mode [ 130.441657][ T6338] debugfs: 'hsr0' already exists in 'hsr' [ 130.441677][ T6338] Cannot create hsr debugfs directory [ 130.458245][ T5626] Bluetooth: hci6: command tx timeout [ 130.652166][ T6338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.664434][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.665645][ T6338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 130.682830][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.684443][ T6338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 130.708038][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.709413][ T6338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.726448][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.782018][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.782165][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.782447][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.782574][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.884257][ T50] usb 7-1: USB disconnect, device number 2 [ 130.967184][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.993378][ T5626] Bluetooth: hci7: command tx timeout [ 131.005910][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.014251][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.081999][ T1940] hid_parser_main: 40 callbacks suppressed [ 131.089490][ T1940] hid-generic 0000:0306:0000.0006: unknown main item tag 0x0 [ 131.097066][ T1940] hid-generic 0000:0306:0000.0006: unknown main item tag 0x0 [ 131.099630][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.115613][ T1940] hid-generic 0000:0306:0000.0006: unknown main item tag 0x2 [ 131.125284][ T1940] hid-generic 0000:0306:0000.0006: collection stack underflow [ 131.133590][ T1940] hid-generic 0000:0306:0000.0006: item 0 0 0 12 parsing failed [ 131.138109][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.138226][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.158796][ T1940] hid-generic 0000:0306:0000.0006: probe with driver hid-generic failed with error -22 [ 131.168936][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.169037][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.583865][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.733400][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.763101][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 131.768745][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 131.771020][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.775540][ T10] usb 2-1: config 0 descriptor?? [ 131.785550][ T10] usb 2-1: probing VID:PID(0424:012C) [ 131.787487][ T10] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 131.787513][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 131.787536][ T10] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 131.787559][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 131.787581][ T10] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 132.117570][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.117675][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.135643][ T6338] veth0_vlan: entered promiscuous mode [ 132.151627][ T6338] veth1_vlan: entered promiscuous mode [ 132.180512][ T6338] veth0_macvtap: entered promiscuous mode [ 132.188778][ T6338] veth1_macvtap: entered promiscuous mode [ 132.199068][ T10] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 132.216538][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.221253][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.254503][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.254573][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.254634][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.254680][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.341864][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.349906][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.383443][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.391458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.409373][ T10] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 132.833120][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 132.950748][ T5906] usb 3-1: USB disconnect, device number 6 [ 132.987177][ T50] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 132.995626][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.995654][ T50] usb 8-1: Product: syz [ 132.995672][ T50] usb 8-1: Manufacturer: syz [ 132.995690][ T50] usb 8-1: SerialNumber: syz [ 133.067209][ T50] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input11 [ 133.076802][ T5626] Bluetooth: hci7: command tx timeout [ 133.181661][ T6415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.226197][ T6417] CIFS: Attempting to mount //127.0.0.1/share [ 133.364396][ T6420] md: could not open device unknown-block(1,0). [ 133.365197][ T6422] md: could not open device unknown-block(1,1). [ 133.703006][ T1940] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.876940][ T1940] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 133.878464][ T1940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.054811][ T6417] CIFS: VFS: Error connecting to socket. Aborting operation. [ 134.054876][ T6417] CIFS: VFS: cifs_mount failed w/return code = -4 [ 134.092507][ T1940] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 134.234463][ T5838] usb 8-1: USB disconnect, device number 2 [ 134.422992][ T5740] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 134.573621][ T5740] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 134.575024][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.796200][ T5740] ljca 7-1:1.0: probe with driver ljca failed with error -110 [ 135.063154][ T5740] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 135.093456][ T5906] usb 3-1: USB disconnect, device number 7 [ 135.134372][ T3384] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 135.153824][ T5626] Bluetooth: hci7: command tx timeout [ 135.212987][ T5740] usb 8-1: Using ep0 maxpacket: 16 [ 135.218771][ T5740] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.220209][ T5740] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.220243][ T5740] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.220295][ T5740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.224681][ T5740] usb 8-1: config 0 descriptor?? [ 135.933123][ T985] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.083739][ T985] usb 3-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 0.00 [ 136.085055][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.174451][ T3384] usb 2-1: device descriptor read/64, error -71 [ 136.414360][ T3384] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 136.416260][ T3384] usb 2-1: device reset changed ep0 maxpacket size! [ 136.420114][ T5838] usb 2-1: USB disconnect, device number 7 [ 136.439094][ T10] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 136.449258][ T10] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 136.458279][ T5740] usbhid 8-1:0.0: can't add hid device: -71 [ 136.464901][ T5740] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 136.475510][ T5740] usb 8-1: USB disconnect, device number 3 [ 137.207203][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 137.215425][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 137.220199][ T5740] usb 7-1: USB disconnect, device number 3 [ 137.234621][ T5619] Bluetooth: hci7: command tx timeout [ 137.236703][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 137.252641][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 137.264402][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 137.510297][ T6462] loop2: detected capacity change from 0 to 32768 [ 137.942943][ T5906] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 138.059866][ T6451] lo speed is unknown, defaulting to 1000 [ 138.116440][ T5906] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 1.00 [ 138.132653][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.132702][ T5906] usb 8-1: Product: syz [ 138.132720][ T5906] usb 8-1: Manufacturer: syz [ 138.132738][ T5906] usb 8-1: SerialNumber: syz [ 138.241541][ T6456] nvme nvme1: failed to connect socket: -512 [ 138.643016][ T50] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 138.733277][ T985] usbhid 3-1:1.0: can't add hid device: -71 [ 138.733408][ T985] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 138.741823][ T985] usb 3-1: USB disconnect, device number 8 [ 138.800144][ T50] usb 7-1: not running at top speed; connect to a high speed hub [ 138.800200][ T50] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 138.810109][ T50] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.810160][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.875566][ T50] gspca_main: spca501-2.14.0 probing 0000:0000 [ 139.126856][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.134541][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.134744][ T6451] bridge_slave_0: entered allmulticast mode [ 139.139263][ T6451] bridge_slave_0: entered promiscuous mode [ 139.162000][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.162242][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.162410][ T6451] bridge_slave_1: entered allmulticast mode [ 139.170206][ T6451] bridge_slave_1: entered promiscuous mode [ 139.224401][ T6488] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.253481][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.257829][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.296467][ T6489] md: could not open device unknown-block(1,0). [ 139.313149][ T5621] Bluetooth: hci8: command tx timeout [ 139.322080][ T6451] team0: Port device team_slave_0 added [ 139.326812][ T6451] team0: Port device team_slave_1 added [ 139.344222][ T6488] md: could not open device unknown-block(1,1). [ 139.374346][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.374390][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.374423][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.377263][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.377286][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.377317][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.510238][ T6451] hsr_slave_0: entered promiscuous mode [ 139.511579][ T6451] hsr_slave_1: entered promiscuous mode [ 139.512541][ T6451] debugfs: 'hsr0' already exists in 'hsr' [ 139.512562][ T6451] Cannot create hsr debugfs directory [ 139.557247][ T50] gspca_spca501: reg write: error -110 [ 139.557287][ T50] spca501 7-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 139.557375][ T50] spca501 7-1:1.0: probe with driver spca501 failed with error -22 [ 139.559258][ T50] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:0000) [ 139.562506][ T50] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 139.567536][ T50] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 139.567593][ T50] uvcvideo 7-1:1.1: Failed to initialize the device (-5). [ 139.568095][ T50] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -5 [ 139.671391][ T6493] CIFS: Attempting to mount //127.0.0.1/share [ 139.674266][ T6493] CIFS: VFS: Error connecting to socket. Aborting operation. [ 139.674313][ T6493] CIFS: VFS: cifs_mount failed w/return code = -111 [ 139.913125][ T6451] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.927157][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.928431][ T6451] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.939942][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.940986][ T6451] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.959552][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.960774][ T6451] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.978341][ T6451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.983002][ T985] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.094879][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.112619][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.127789][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.127913][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.135141][ T985] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.136877][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.164489][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.164690][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.282314][ T5858] usb 7-1: USB disconnect, device number 4 [ 140.405980][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406045][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406070][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406091][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406114][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406138][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406162][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406186][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406209][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.406239][ T985] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 140.425302][ T985] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v1.11 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 140.507238][ T5906] usbhid 8-1:1.0: can't add hid device: -71 [ 140.507381][ T5906] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 140.537379][ T5906] usb 8-1: USB disconnect, device number 4 [ 140.908053][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.243353][ T985] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 141.296390][ T6451] veth0_vlan: entered promiscuous mode [ 141.306677][ T6451] veth1_vlan: entered promiscuous mode [ 141.336832][ T6451] veth0_macvtap: entered promiscuous mode [ 141.342190][ T6451] veth1_macvtap: entered promiscuous mode [ 141.359788][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.365431][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.384662][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 141.393435][ T5621] Bluetooth: hci8: command tx timeout [ 141.400731][ T985] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 141.406603][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.423475][ T3384] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.426317][ T985] em28xx 7-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 141.426352][ T985] em28xx 7-1:1.0: Audio interface 0 found (Vendor Class) [ 141.455410][ T3384] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.493812][ T3325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.493918][ T3325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.535207][ T25] usb 8-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 141.541477][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.627285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.627373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.689016][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.689093][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.860757][ T985] em28xx 7-1:1.0: unknown em28xx chip ID (39) [ 142.056317][ T5621] Bluetooth: hci9: Opcode 0x0c03 failed: -71 [ 142.059645][ T6535] usb 8-1: USB disconnect, device number 5 [ 142.069523][ T985] em28xx 7-1:1.0: Config register raw data: 0x27 [ 142.069546][ T985] em28xx 7-1:1.0: I2S Audio (3 sample rate(s)) [ 142.069565][ T985] em28xx 7-1:1.0: No AC97 audio processor [ 142.092477][ T5858] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 142.263918][ T5858] usb 9-1: Using ep0 maxpacket: 8 [ 142.272204][ T5858] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 0.00 [ 142.286376][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.312678][ T5858] em28xx 9-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 142.322940][ T5858] em28xx 9-1:1.0: Audio interface 0 found (Vendor Class) [ 142.467191][ T6550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.533199][ T6550] md: could not open device unknown-block(1,0). [ 142.583248][ T6550] md: could not open device unknown-block(1,1). [ 142.714867][ T5858] em28xx 9-1:1.0: unknown em28xx chip ID (39) [ 142.932319][ T5858] em28xx 9-1:1.0: Config register raw data: 0x27 [ 142.932368][ T5858] em28xx 9-1:1.0: I2S Audio (3 sample rate(s)) [ 142.932407][ T5858] em28xx 9-1:1.0: No AC97 audio processor [ 142.993536][ T5906] usb 3-1: USB disconnect, device number 9 [ 143.072771][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 143.133494][ T6535] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 143.176650][ T5626] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 143.178996][ T5626] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 143.179828][ T5626] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 143.181594][ T5626] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 143.182324][ T5626] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 143.222468][ T6561] syzkaller0: renamed from vlan0 (while UP) [ 143.266658][ T6561] syz_tun: entered promiscuous mode [ 143.268140][ T6561] vlan0: entered promiscuous mode [ 143.288168][ T6535] usb 8-1: not running at top speed; connect to a high speed hub [ 143.288224][ T6535] usb 8-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 0.00 [ 143.295147][ T6535] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 143.295184][ T6535] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 143.301612][ T6535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.301640][ T6535] usb 8-1: Product: syz [ 143.301658][ T6535] usb 8-1: Manufacturer: syz [ 143.301675][ T6535] usb 8-1: SerialNumber: syz [ 143.322815][ T6553] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 143.323849][ T6553] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 143.473118][ T5626] Bluetooth: hci8: command tx timeout [ 143.541743][ T6553] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 143.542203][ T6553] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 143.683011][ T50] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.746312][ T6535] asix 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 143.746771][ T6535] asix 8-1:1.0: probe with driver asix failed with error -61 [ 143.813068][ T50] usb 3-1: device descriptor read/64, error -71 [ 144.037093][ T6558] lo speed is unknown, defaulting to 1000 [ 144.053004][ T50] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.115359][ T5739] usb 7-1: USB disconnect, device number 5 [ 144.183006][ T50] usb 3-1: device descriptor read/64, error -71 [ 144.294690][ T50] usb usb3-port1: attempt power cycle [ 144.556240][ T985] usb 9-1: USB disconnect, device number 2 [ 144.609001][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.609190][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.609333][ T6558] bridge_slave_0: entered allmulticast mode [ 144.611391][ T6558] bridge_slave_0: entered promiscuous mode [ 144.615053][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.615295][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.615438][ T6558] bridge_slave_1: entered allmulticast mode [ 144.617445][ T6558] bridge_slave_1: entered promiscuous mode [ 144.633094][ T50] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.657994][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.662398][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.675231][ T50] usb 3-1: device descriptor read/8, error -71 [ 144.720047][ T6558] team0: Port device team_slave_0 added [ 144.727930][ T6558] team0: Port device team_slave_1 added [ 144.785758][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.790863][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.790898][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.793809][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.793826][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.793857][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.919348][ T50] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.920684][ T6558] hsr_slave_0: entered promiscuous mode [ 144.935393][ T50] usb 3-1: device descriptor read/8, error -71 [ 144.945236][ T6584] rdma_rxe: rxe_newlink: failed to add lo [ 144.945239][ T6558] hsr_slave_1: entered promiscuous mode [ 144.957778][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 144.964094][ T6558] Cannot create hsr debugfs directory [ 145.043447][ T50] usb usb3-port1: unable to enumerate USB device [ 145.233494][ T5626] Bluetooth: hci9: command tx timeout [ 145.432308][ T6558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 145.458911][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.461721][ T6558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 145.486640][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.505101][ T6558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 145.517016][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.519046][ T6600] block2mtd: error: cannot open device /dev/loop1 [ 145.525153][ T6558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.547870][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.559795][ T5626] Bluetooth: hci8: command tx timeout [ 145.595056][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 145.685630][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.687118][ T6597] UBIFS error (pid: 6597): cannot open "ubi0_0", error -19 [ 145.708728][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.730465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.730619][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.745493][ T50] usb 9-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 1.00 [ 145.750857][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.750885][ T50] usb 9-1: Product: syz [ 145.750903][ T50] usb 9-1: Manufacturer: syz [ 145.750920][ T50] usb 9-1: SerialNumber: syz [ 145.781856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.782005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.871101][ T6609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.916502][ T5739] usb 8-1: USB disconnect, device number 6 [ 145.959962][ T6609] md: could not open device unknown-block(1,0). [ 145.984856][ T6609] md: could not open device unknown-block(1,1). [ 145.994505][ T50] dln2 9-1:1.0: USB write failed: -110 [ 145.994819][ T50] dln2 9-1:1.0: failed to initialize hardware [ 146.012051][ T50] dln2 9-1:1.0: probe with driver dln2 failed with error -110 [ 146.361274][ T6623] block2mtd: error: cannot open device /dev/loop0 [ 146.367454][ T6623] ubi0: attaching mtd1 [ 146.371504][ T5739] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 146.421821][ T6623] ubi0: scanning is finished [ 146.427204][ T6623] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 146.442027][ T6626] UBIFS error (pid: 6626): cannot open "ubi0_0", error -19 [ 146.543801][ T5739] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 146.562049][ T5739] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.611892][ T5739] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input12 [ 146.748289][ T6623] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 147.070980][ T50] usb 8-1: USB disconnect, device number 7 [ 147.221126][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.314373][ T5626] Bluetooth: hci9: command tx timeout [ 147.497818][ T6629] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 147.505729][ T5739] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 147.557306][ T6558] veth0_vlan: entered promiscuous mode [ 147.576213][ T6558] veth1_vlan: entered promiscuous mode [ 147.655687][ T5739] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 147.668552][ T5739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.699553][ T6558] veth0_macvtap: entered promiscuous mode [ 147.717422][ T5739] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input13 [ 147.727157][ T6558] veth1_macvtap: entered promiscuous mode [ 147.799909][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.836630][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.876482][ T3384] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.877708][ T3384] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.881082][ T3384] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.881129][ T3384] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.091097][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.091139][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.184875][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.184927][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.407122][ T5760] usb 9-1: USB disconnect, device number 3 [ 148.430756][ T6664] CIFS: Attempting to mount //127.0.0.1/share [ 148.489708][ T6664] CIFS: VFS: cifs_mount failed w/return code = -5 [ 148.853256][ T5760] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 149.006069][ T5760] usb 9-1: unable to get BOS descriptor or descriptor too short [ 149.006153][ T5760] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 149.007525][ T5760] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.009946][ T5760] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.009974][ T5760] usb 9-1: Product: syz [ 149.009991][ T5760] usb 9-1: Manufacturer: syz [ 149.010008][ T5760] usb 9-1: SerialNumber: syz [ 149.394554][ T5621] Bluetooth: hci9: command tx timeout [ 149.544953][ T6675] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.623913][ T6675] md: could not open device unknown-block(1,0). [ 149.663471][ T6675] md: could not open device unknown-block(1,1). [ 150.721627][ T985] usb 7-1: USB disconnect, device number 6 [ 150.839069][ T6535] wiimote 0005:057E:0306.0008: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 150.849191][ T6535] wiimote 0005:057E:0306.0008: New device registered [ 151.268775][ T5760] usb 9-1: 1:1: cannot set freq 48000 to ep 0x1 [ 151.369137][ T5760] usb 9-1: USB disconnect, device number 4 [ 151.474064][ T5626] Bluetooth: hci9: command tx timeout [ 151.569735][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.649435][ T6684] wiimote 0005:057E:0306.0008: Device removed [ 151.793650][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 151.873337][ T6535] wiimote 0005:057E:0306.0008: detected device: Nintendo Wii Remote (Gen 1) [ 151.934294][ T6535] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input15 [ 151.965468][ T6535] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input16 [ 151.973550][ T5906] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 151.975123][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.005835][ T6535] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input14 [ 152.423036][ T985] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 152.584795][ T985] usb 9-1: not running at top speed; connect to a high speed hub [ 152.592634][ T985] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 152.606231][ T985] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.618091][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.644726][ T985] gspca_main: spca501-2.14.0 probing 0000:0000 [ 153.239081][ T5906] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 153.249842][ T5906] usb 3-1: USB disconnect, device number 14 [ 153.355951][ T985] gspca_spca501: reg write: error -110 [ 153.355991][ T985] spca501 9-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 153.356099][ T985] spca501 9-1:1.0: probe with driver spca501 failed with error -22 [ 153.357170][ T985] uvcvideo 9-1:1.0: Found UVC 1.00 device (0000:0000) [ 153.391023][ T985] uvcvideo 9-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 153.408505][ T985] uvcvideo 9-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 153.408591][ T985] uvcvideo 9-1:1.1: Failed to initialize the device (-5). [ 153.409089][ T985] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -5 [ 153.515047][ T5740] wiimote 0005:057E:0306.0009: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz1 [ 153.525781][ T5740] wiimote 0005:057E:0306.0009: New device registered [ 153.859283][ T6705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.987165][ T6707] CIFS: Attempting to mount //127.0.0.1/share [ 153.998990][ T6707] CIFS: VFS: cifs_mount failed w/return code = -5 [ 154.069809][ T985] usb 9-1: USB disconnect, device number 5 [ 154.325920][ T6700] wiimote 0005:057E:0306.0009: Device removed [ 154.593525][ T5740] wiimote 0005:057E:0306.0009: detected device: Nintendo Wii Remote (Gen 1) [ 154.597954][ T5740] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 154.597979][ T5740] CPU: 0 UID: 0 PID: 5740 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 154.598006][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 154.598023][ T5740] Workqueue: events wiimote_init_worker [ 154.598068][ T5740] Call Trace: [ 154.598078][ T5740] [ 154.598089][ T5740] dump_stack_lvl+0xe8/0x150 [ 154.598129][ T5740] sysfs_warn_dup+0x8e/0xa0 [ 154.598167][ T5740] sysfs_do_create_link_sd+0xc0/0x110 [ 154.598208][ T5740] device_add_class_symlinks+0x1cf/0x240 [ 154.598251][ T5740] device_add+0x467/0xb80 [ 154.598292][ T5740] __power_supply_register+0xb88/0xf60 [ 154.598330][ T5740] ? __pfx___power_supply_register+0x10/0x10 [ 154.598363][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598393][ T5740] ? trace_kmalloc+0x2a/0xf0 [ 154.598441][ T5740] wiimod_battery_probe+0x202/0x3a0 [ 154.598475][ T5740] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 154.598513][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598542][ T5740] ? input_ff_create_memless+0x2e4/0x600 [ 154.598582][ T5740] wiimote_init_worker+0x20c9/0x2f00 [ 154.598633][ T5740] ? __pfx_wiimote_init_worker+0x10/0x10 [ 154.598678][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598708][ T5740] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.598760][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598789][ T5740] ? lock_acquire+0x115/0x350 [ 154.598816][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598854][ T5740] ? rcu_is_watching+0x16/0xb0 [ 154.598885][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.598916][ T5740] ? process_scheduled_works+0x97a/0x1630 [ 154.598952][ T5740] process_scheduled_works+0xc3d/0x1630 [ 154.598986][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.599052][ T5740] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.599093][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.599122][ T5740] ? assign_work+0x3cf/0x5d0 [ 154.599162][ T5740] worker_thread+0xa47/0xfb0 [ 154.599200][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.599240][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.599270][ T5740] ? __kthread_parkme+0x71/0x1f0 [ 154.599319][ T5740] kthread+0x38b/0x480 [ 154.599345][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 154.599378][ T5740] ? __pfx_kthread+0x10/0x10 [ 154.599405][ T5740] ret_from_fork+0x514/0xb70 [ 154.599434][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 154.599473][ T5740] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.599502][ T5740] ? __switch_to+0xc89/0x1420 [ 154.599542][ T5740] ? __pfx_kthread+0x10/0x10 [ 154.599569][ T5740] ret_from_fork_asm+0x1a/0x30 [ 154.599627][ T5740] [ 154.600352][ T5740] wiimote 0005:057E:0306.0009: cannot register battery device [ 154.854872][ T6712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.003627][ T6713] md: could not open device unknown-block(1,0). [ 155.011565][ T6712] md: could not open device unknown-block(1,1). [ 155.152573][ T6717] o2cb: This node has not been configured. [ 155.166277][ T6717] o2cb: Cluster check failed. Fix errors before retrying. [ 155.175924][ T6717] (syz.8.195,6717,1):user_dlm_register:674 ERROR: status = -22 [ 155.175956][ T6717] (syz.8.195,6717,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 155.195577][ T985] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.280209][ T6721] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 155.355791][ T985] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 1.00 [ 155.368141][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci8/hci8:200' [ 155.380447][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 155.380479][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 155.380496][ T5626] Workqueue: hci8 hci_rx_work [ 155.380534][ T5626] Call Trace: [ 155.380544][ T5626] [ 155.380554][ T5626] dump_stack_lvl+0xe8/0x150 [ 155.380594][ T5626] sysfs_create_dir_ns+0x271/0x2a0 [ 155.380637][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.380680][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.380711][ T5626] ? do_raw_spin_unlock+0xf5/0x200 [ 155.380761][ T5626] kobject_add_internal+0x622/0xcd0 [ 155.380800][ T5626] kobject_add+0x163/0x240 [ 155.380824][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.380863][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 155.380887][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.380919][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.380954][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.380983][ T5626] ? get_device_parent+0x366/0x3a0 [ 155.381028][ T5626] device_add+0x3fa/0xb80 [ 155.381069][ T5626] hci_conn_add_sysfs+0xd5/0x210 [ 155.381107][ T5626] le_conn_complete_evt+0xfe3/0x16d0 [ 155.381138][ T5626] ? le_conn_complete_evt+0x1b1/0x16d0 [ 155.381167][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 155.381194][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.381224][ T5626] ? __mutex_unlock_slowpath+0x731/0x900 [ 155.381269][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.381299][ T5626] ? skb_pull_data+0xf0/0x200 [ 155.381337][ T5626] hci_le_conn_complete_evt+0x187/0x470 [ 155.381387][ T5626] hci_event_packet+0x67a/0xf10 [ 155.381432][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 155.381470][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 155.381512][ T5626] ? put_tree_ref+0x1c0/0x1f0 [ 155.381548][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.381578][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 155.381611][ T5626] hci_rx_work+0x3ee/0x1020 [ 155.381654][ T5626] ? process_scheduled_works+0x97a/0x1630 [ 155.381690][ T5626] process_scheduled_works+0xc3d/0x1630 [ 155.381724][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.381795][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.381837][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.381867][ T5626] ? assign_work+0x3cf/0x5d0 [ 155.381908][ T5626] worker_thread+0xa47/0xfb0 [ 155.381975][ T5626] kthread+0x38b/0x480 [ 155.382001][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 155.382035][ T5626] ? __pfx_kthread+0x10/0x10 [ 155.382062][ T5626] ret_from_fork+0x514/0xb70 [ 155.382091][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 155.382132][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.382162][ T5626] ? __switch_to+0xc89/0x1420 [ 155.382201][ T5626] ? __pfx_kthread+0x10/0x10 [ 155.382230][ T5626] ret_from_fork_asm+0x1a/0x30 [ 155.382293][ T5626] [ 155.382322][ T5626] kobject: kobject_add_internal failed for hci8:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 155.382362][ T5626] Bluetooth: hci8: failed to register connection device [ 155.385332][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.701222][ T985] em28xx 3-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 155.710096][ T985] em28xx 3-1:1.0: Audio interface 0 found (Vendor Class) [ 156.485110][ T5858] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 156.634105][ T5858] usb 9-1: not running at top speed; connect to a high speed hub [ 156.634172][ T5858] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.00 [ 156.635553][ T5858] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 156.635642][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.816239][ T985] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 156.816900][ T985] em28xx 3-1:1.0: Config register raw data: 0xfffffffb [ 156.817589][ T985] em28xx 3-1:1.0: AC97 chip type couldn't be determined [ 156.817608][ T985] em28xx 3-1:1.0: No AC97 audio processor [ 156.900877][ T1940] usb 3-1: USB disconnect, device number 15 [ 156.908590][ T1940] em28xx 3-1:1.0: Disconnecting em28xx [ 156.919949][ T1940] em28xx: Freeing device [ 157.392977][ T5626] Bluetooth: hci8: command 0x2016 tx timeout [ 157.452029][ T5858] usb 9-1: 1:1: cannot get freq at ep 0x1 [ 157.862975][ T1940] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.013854][ T1940] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 158.015999][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 158.016032][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.016061][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 158.016091][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 158.016119][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 158.016147][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 158.016175][ T1940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 158.021677][ T1940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.021704][ T1940] usb 3-1: Product: syz [ 158.021722][ T1940] usb 3-1: Manufacturer: syz [ 158.021740][ T1940] usb 3-1: SerialNumber: syz [ 158.031423][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.031587][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.031727][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.031998][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.032138][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.032277][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.032417][ T6732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.080570][ T1940] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 158.358644][ T5858] usb 3-1: USB disconnect, device number 16 [ 158.364232][ T147] usb 3-1: Failed to submit usb control message: -71 [ 158.364277][ T147] usb 3-1: unable to send the bmi data to the device: -71 [ 158.364300][ T147] usb 3-1: unable to get target info from device [ 158.364318][ T147] usb 3-1: could not get target info (-71) [ 158.364529][ T147] usb 3-1: could not probe fw (-71) [ 158.693559][ T985] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 158.844555][ T985] usb 7-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice= 1.00 [ 158.845769][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.859327][ T985] cdc_acm 7-1:1.0: Zero length descriptor references [ 158.859356][ T985] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 159.059438][ T6534] usb 7-1: USB disconnect, device number 7 [ 159.233255][ T985] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.282607][ T6534] usb 9-1: USB disconnect, device number 6 [ 159.383777][ T985] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 159.386191][ T985] usb 3-1: config index 0 descriptor too short (expected 39, got 25) [ 159.392812][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.397557][ T985] usb 3-1: Product: syz [ 159.397579][ T985] usb 3-1: Manufacturer: syz [ 159.397596][ T985] usb 3-1: SerialNumber: syz [ 159.473742][ T5621] Bluetooth: hci8: command 0x2016 tx timeout [ 159.650512][ T985] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 159.762536][ T6755] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 159.803334][ T6534] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 159.956479][ T6534] usb 9-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 159.961355][ T6534] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.961384][ T6534] usb 9-1: Product: syz [ 159.961430][ T6534] usb 9-1: Manufacturer: syz [ 159.961448][ T6534] usb 9-1: SerialNumber: syz [ 160.001256][ T985] dvb_usb_rtl28xxu 3-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 160.023892][ T985] usb 3-1: USB disconnect, device number 17 [ 160.059486][ T6759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.154711][ T6759] md: could not open device unknown-block(1,0). [ 160.179939][ T6761] CIFS: Attempting to mount //127.0.0.1/share [ 160.183372][ T6759] md: could not open device unknown-block(1,1). [ 160.201151][ T6534] usb 9-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 160.204180][ T6761] CIFS: VFS: cifs_mount failed w/return code = -5 [ 160.712939][ T5740] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 160.874579][ T5740] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 1.00 [ 160.886329][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.886375][ T5740] usb 7-1: Product: syz [ 160.886395][ T5740] usb 7-1: Manufacturer: syz [ 160.886412][ T5740] usb 7-1: SerialNumber: syz [ 161.107284][ T30] audit: type=1800 audit(1788452622.950:4): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.211" name="local" dev="configfs" ino=14007 res=0 errno=0 [ 161.139961][ T6771] dlm: no local IP address has been set [ 161.139998][ T6771] dlm: cannot start dlm midcomms -107 [ 161.156930][ T5740] ljca 7-1:1.0: probe with driver ljca failed with error -110 [ 161.336751][ T5858] usb 7-1: USB disconnect, device number 8 [ 161.974696][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.138111][ T25] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 162.150140][ T25] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 162.150192][ T25] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.150264][ T25] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 162.150298][ T25] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 162.150330][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 162.150373][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.211801][ T985] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 162.221118][ T6778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.221280][ T6778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.221439][ T6778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.221580][ T6778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.228617][ T25] usb 3-1: probing VID:PID(0424:012C) [ 162.230578][ T25] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 162.230604][ T25] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 162.230626][ T25] usb 3-1: vub300 testing BULK OUT EndPoint(2) 01 [ 162.230648][ T25] usb 3-1: vub300 testing BULK OUT EndPoint(3) 02 [ 162.230670][ T25] usb 3-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 162.364004][ T985] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 162.366991][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.636076][ T25] vub300 3-1:1.0: probe with driver vub300 failed with error -71 [ 162.687705][ T25] usb 3-1: USB disconnect, device number 18 [ 162.787359][ T985] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, aa:d3:a3:3c:78:ea [ 163.135202][ T6794] rdma_rxe: rxe_newlink: failed to add veth0 [ 163.388309][ T5621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 163.400269][ T5621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 163.403368][ T5621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 163.417085][ T5621] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 163.425024][ T5621] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 163.583931][ T985] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 163.672076][ T6805] md: could not open device unknown-block(1,0). [ 163.675535][ T6807] md: could not open device unknown-block(1,1). [ 163.708475][ T6785] net1080 7-1:1.0 usb0: port A, peer connected [ 163.735227][ T985] usb 3-1: not running at top speed; connect to a high speed hub [ 163.735303][ T985] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 163.736872][ T985] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 163.736949][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.752741][ T985] gspca_main: spca501-2.14.0 probing 0000:0000 [ 164.043925][ T6813] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.077887][ T6813] md: could not open device unknown-block(7,0). [ 164.493716][ T985] gspca_spca501: reg write: error -110 [ 164.493773][ T985] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 164.493882][ T985] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 164.495321][ T985] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 164.500463][ T985] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 164.500985][ T985] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 164.501068][ T985] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 164.504382][ T985] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5 [ 164.620902][ T6534] dvb_usb_rtl28xxu 9-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 164.656472][ T6534] usb 9-1: USB disconnect, device number 7 [ 165.274152][ T5626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 165.282720][ T5626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 165.283701][ T5626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 165.285061][ T5626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 165.286643][ T5626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 165.340289][ T5858] usb 3-1: USB disconnect, device number 19 [ 165.435785][ T1940] usb 7-1: USB disconnect, device number 9 [ 165.452233][ T1940] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 165.474075][ T5626] Bluetooth: hci10: command tx timeout [ 166.063943][ T985] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 166.223580][ T985] usb 9-1: Using ep0 maxpacket: 8 [ 166.224420][ T985] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 0.00 [ 166.229952][ T985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.297248][ T985] em28xx 9-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 166.297310][ T985] em28xx 9-1:1.0: Audio interface 0 found (Vendor Class) [ 166.326054][ T6866] md: could not open device unknown-block(1,0). [ 166.374628][ T6866] md: could not open device unknown-block(1,1). [ 166.518490][ T6796] lo speed is unknown, defaulting to 1000 [ 166.590274][ T6866] md/raid1:md0: active with 1 out of 2 mirrors [ 166.725666][ T985] em28xx 9-1:1.0: unknown em28xx chip ID (39) [ 166.807977][ T6535] wiimote 0005:057E:0306.000A: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 166.820895][ T6535] wiimote 0005:057E:0306.000A: New device registered [ 166.828647][ T6880] Invalid source name [ 166.835832][ T6880] UBIFS error (pid: 6880): cannot open "/dev/loop2", error -22 [ 166.925460][ T985] em28xx 9-1:1.0: Config register raw data: 0x27 [ 166.925519][ T985] em28xx 9-1:1.0: I2S Audio (3 sample rate(s)) [ 166.925560][ T985] em28xx 9-1:1.0: No AC97 audio processor [ 167.393273][ T5626] Bluetooth: hci11: command tx timeout [ 167.413060][ T1940] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 167.474564][ T6840] lo speed is unknown, defaulting to 1000 [ 167.554422][ T5626] Bluetooth: hci10: command tx timeout [ 167.588966][ T1940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.598943][ T6876] wiimote 0005:057E:0306.000A: Device removed [ 167.606116][ T1940] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 167.620868][ T1940] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.649408][ T1940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.649456][ T1940] usb 3-1: Product: syz [ 167.649491][ T1940] usb 3-1: Manufacturer: syz [ 167.649517][ T1940] usb 3-1: SerialNumber: syz [ 167.873363][ T6535] wiimote 0005:057E:0306.000A: detected device: Nintendo Wii Remote (Gen 1) [ 167.956793][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 167.974259][ T6535] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input19 [ 168.006151][ T1940] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 168.029133][ T6535] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input20 [ 168.082457][ T6535] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input18 [ 168.283389][ T1940] usb 3-1: USB disconnect, device number 20 [ 168.448925][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.656806][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.666093][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.666235][ T6796] bridge_slave_0: entered allmulticast mode [ 168.691006][ T6796] bridge_slave_0: entered promiscuous mode [ 168.706899][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.714461][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.721725][ T6796] bridge_slave_1: entered allmulticast mode [ 168.730402][ T6796] bridge_slave_1: entered promiscuous mode [ 168.749196][ T5740] usb 9-1: USB disconnect, device number 8 [ 168.865019][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.900957][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.978855][ T6796] team0: Port device team_slave_0 added [ 168.990465][ T6796] team0: Port device team_slave_1 added [ 169.072008][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.080952][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.108963][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.131913][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.131954][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.132008][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.283349][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 169.294384][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 169.294417][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 169.294434][ T5626] Workqueue: hci2 hci_rx_work [ 169.294472][ T5626] Call Trace: [ 169.294482][ T5626] [ 169.294492][ T5626] dump_stack_lvl+0xe8/0x150 [ 169.294533][ T5626] sysfs_create_dir_ns+0x271/0x2a0 [ 169.294575][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 169.294621][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.294652][ T5626] ? do_raw_spin_unlock+0xf5/0x200 [ 169.294694][ T5626] kobject_add_internal+0x622/0xcd0 [ 169.294732][ T5626] kobject_add+0x163/0x240 [ 169.294757][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.294795][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 169.294819][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.294851][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.294885][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.294915][ T5626] ? get_device_parent+0x366/0x3a0 [ 169.294959][ T5626] device_add+0x3fa/0xb80 [ 169.295000][ T5626] hci_conn_add_sysfs+0xd5/0x210 [ 169.295038][ T5626] le_conn_complete_evt+0xfe3/0x16d0 [ 169.295069][ T5626] ? le_conn_complete_evt+0x1b1/0x16d0 [ 169.295097][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 169.295124][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.295154][ T5626] ? __mutex_unlock_slowpath+0x731/0x900 [ 169.295198][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.295228][ T5626] ? skb_pull_data+0xf0/0x200 [ 169.295266][ T5626] hci_le_conn_complete_evt+0x187/0x470 [ 169.295322][ T5626] hci_event_packet+0x67a/0xf10 [ 169.295365][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 169.295404][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 169.295444][ T5626] ? put_tree_ref+0x1c0/0x1f0 [ 169.295480][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.295510][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 169.295542][ T5626] hci_rx_work+0x3ee/0x1020 [ 169.295585][ T5626] ? process_scheduled_works+0x97a/0x1630 [ 169.295620][ T5626] process_scheduled_works+0xc3d/0x1630 [ 169.295654][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.295719][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.295760][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.295790][ T5626] ? assign_work+0x3cf/0x5d0 [ 169.295847][ T5626] worker_thread+0xa47/0xfb0 [ 169.295914][ T5626] kthread+0x38b/0x480 [ 169.295940][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 169.295973][ T5626] ? __pfx_kthread+0x10/0x10 [ 169.296000][ T5626] ret_from_fork+0x514/0xb70 [ 169.296029][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 169.296069][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.296099][ T5626] ? __switch_to+0xc89/0x1420 [ 169.296138][ T5626] ? __pfx_kthread+0x10/0x10 [ 169.296165][ T5626] ret_from_fork_asm+0x1a/0x30 [ 169.296228][ T5626] [ 169.296558][ T5626] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 169.296595][ T5626] Bluetooth: hci2: failed to register connection device [ 169.473194][ T5621] Bluetooth: hci11: command tx timeout [ 169.633366][ T5621] Bluetooth: hci10: command tx timeout [ 169.673166][ T6796] hsr_slave_0: entered promiscuous mode [ 169.674346][ T6796] hsr_slave_1: entered promiscuous mode [ 169.690553][ T6796] debugfs: 'hsr0' already exists in 'hsr' [ 169.690606][ T6796] Cannot create hsr debugfs directory [ 169.884609][ T5740] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 169.981612][ T6796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.046662][ T5740] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 170.061151][ T5740] usb 9-1: config 1 interface 0 has no altsetting 2 [ 170.072081][ T5740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.072125][ T5740] usb 9-1: Product: syz [ 170.072166][ T5740] usb 9-1: Manufacturer: syz [ 170.072192][ T5740] usb 9-1: SerialNumber: syz [ 170.118143][ T5740] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 170.128051][ T5740] usb 9-1: setting power ON [ 170.242427][ T6921] rdma_rxe: rxe_newlink: failed to add veth0 [ 170.280075][ T6796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.371750][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.381722][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.381918][ T6840] bridge_slave_0: entered allmulticast mode [ 170.402368][ T6840] bridge_slave_0: entered promiscuous mode [ 170.413754][ T5740] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.424845][ T5740] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 170.435698][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.440590][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.440765][ T6840] bridge_slave_1: entered allmulticast mode [ 170.445698][ T6840] bridge_slave_1: entered promiscuous mode [ 170.451194][ T5740] usb 9-1: media controller created [ 170.488605][ T5740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.505609][ T6796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.645701][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.684606][ T6796] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.718947][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.772459][ T6840] team0: Port device team_slave_0 added [ 170.785493][ T6840] team0: Port device team_slave_1 added [ 170.880822][ T6929] md: could not open device unknown-block(1,0). [ 170.881207][ T6931] md: could not open device unknown-block(1,1). [ 170.899324][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.908422][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.935506][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.950141][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.950182][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.952116][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.162785][ T6840] hsr_slave_0: entered promiscuous mode [ 171.171301][ T6840] hsr_slave_1: entered promiscuous mode [ 171.177994][ T6840] debugfs: 'hsr0' already exists in 'hsr' [ 171.183947][ T6840] Cannot create hsr debugfs directory [ 171.269801][ T6796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.282306][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.313352][ T5621] Bluetooth: hci2: command 0x2016 tx timeout [ 171.320943][ T6796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.333526][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.353378][ T5858] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 171.361951][ T6796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.374929][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.392773][ T6796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.406361][ T6796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.515283][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 1.00 [ 171.530346][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.538746][ T5858] usb 3-1: Product: syz [ 171.543096][ T5858] usb 3-1: Manufacturer: syz [ 171.549121][ T5858] usb 3-1: SerialNumber: syz [ 171.555081][ T5621] Bluetooth: hci11: command tx timeout [ 171.671517][ T6840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.713508][ T5621] Bluetooth: hci10: command tx timeout [ 171.744729][ T6840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.785997][ T5858] hdpvr 3-1:1.0: firmware version 0x0 dated [ 171.792683][ T5858] hdpvr 3-1:1.0: untested firmware, the driver might not work. [ 171.816296][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.841588][ T6840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.882286][ T6796] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.907851][ T6840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.930274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.930396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.940822][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.940989][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.148052][ T6840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.153736][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.154971][ T6840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.159959][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.161314][ T6840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.177254][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.178839][ T6840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.189091][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.358797][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.429115][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.459090][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.459240][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.487573][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.487707][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.717090][ T5740] usb 9-1: digital interface selection failed (-71) [ 172.717176][ T5740] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 172.734651][ T5740] usb 9-1: setting power OFF [ 172.744979][ T5740] dvb-usb: bulk message failed: -2 (2/0) [ 172.757677][ T5740] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 172.767982][ T5740] usb 9-1: setting power ON [ 172.772781][ T5740] dvb-usb: bulk message failed: -2 (2/0) [ 172.786041][ T5740] usb 9-1: analog interface selection failed (-71) [ 172.891288][ T5740] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 172.902145][ T5740] dvb_usb_cxusb 9-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 172.930778][ T5740] usb 9-1: USB disconnect, device number 9 [ 173.147746][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.187517][ T6971] siw: device registration error -23 [ 173.393621][ T5626] Bluetooth: hci2: command 0x2016 tx timeout [ 173.533059][ T5740] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 173.613825][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.633353][ T5621] Bluetooth: hci11: command tx timeout [ 173.682010][ T5858] hdpvr 3-1:1.0: Could not setup controls [ 173.689716][ T5858] hdpvr 3-1:1.0: registering videodev failed [ 173.691991][ T6796] veth0_vlan: entered promiscuous mode [ 173.703295][ T6796] veth1_vlan: entered promiscuous mode [ 173.717561][ T5740] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.736737][ T5740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.736784][ T5740] usb 9-1: Product: syz [ 173.736830][ T5740] usb 9-1: Manufacturer: syz [ 173.736856][ T5740] usb 9-1: SerialNumber: syz [ 173.772498][ T6796] veth0_macvtap: entered promiscuous mode [ 173.792420][ T5858] hdpvr 3-1:1.0: probe with driver hdpvr failed with error -32 [ 173.792655][ T6796] veth1_macvtap: entered promiscuous mode [ 173.841032][ T6535] usb 3-1: USB disconnect, device number 21 [ 173.876611][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.918153][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.956259][ T3271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.960601][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.960920][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.961303][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.130256][ T3271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.130310][ T3271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.188035][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.188082][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.252415][ T6840] veth0_vlan: entered promiscuous mode [ 174.265486][ T6840] veth1_vlan: entered promiscuous mode [ 174.344024][ T6840] veth0_macvtap: entered promiscuous mode [ 174.359980][ T6840] veth1_macvtap: entered promiscuous mode [ 174.390950][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.419511][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.494372][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.494659][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.494704][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.494745][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.580738][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.588749][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.650036][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.650073][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.703663][ T1940] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.767174][ T6999] CIFS: Attempting to mount //127.0.0.1/share [ 174.769879][ T6997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.792983][ T6999] CIFS: VFS: cifs_mount failed w/return code = -5 [ 174.865622][ T1940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 174.878472][ T1940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.103029][ T985] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.254646][ T985] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice= 1.00 [ 175.259404][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.259432][ T985] usb 6-1: Product: syz [ 175.259449][ T985] usb 6-1: Manufacturer: syz [ 175.259467][ T985] usb 6-1: SerialNumber: syz [ 175.543970][ T985] usb 6-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -2 [ 175.544029][ T985] usb 6-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 175.765802][ T5906] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 175.904653][ T7023] md: could not open device unknown-block(1,0). [ 175.911455][ T7027] md: could not open device unknown-block(1,1). [ 175.934691][ T5906] usb 7-1: not running at top speed; connect to a high speed hub [ 175.942597][ T5906] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 175.963419][ T1940] ath6kl: Failed to submit usb control message: -110 [ 175.963534][ T1940] ath6kl: unable to send the bmi data to the device: -110 [ 175.963571][ T1940] ath6kl: Unable to send get target info: -110 [ 175.985301][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.985358][ T5906] usb 7-1: Product: syz [ 175.985376][ T5906] usb 7-1: Manufacturer: syz [ 175.985394][ T5906] usb 7-1: SerialNumber: syz [ 176.003980][ T1940] ath6kl: Failed to init ath6kl core: -110 [ 176.004640][ T1940] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 176.051308][ T6535] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.109242][ T1940] usb 3-1: USB disconnect, device number 22 [ 176.215602][ T6535] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 1.00 [ 176.230747][ T6535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.239495][ T6535] usb 5-1: Product: syz [ 176.239543][ T6535] usb 5-1: Manufacturer: syz [ 176.239570][ T6535] usb 5-1: SerialNumber: syz [ 176.473413][ C0] usb 7-1: received EP1 urb->status = -2 [ 176.473502][ T5906] usb 7-1: unable to init card! (ret=-110) [ 176.474244][ T5906] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 176.934394][ T5906] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 177.095250][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 177.096655][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.335469][ T5906] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, fa:c4:2c:34:ed:d1 [ 177.529421][ T6535] usbhid 5-1:1.0: can't add hid device: -71 [ 177.529570][ T6535] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 177.549824][ T6535] usb 5-1: USB disconnect, device number 5 [ 178.216961][ T7049] net1080 3-1:1.0 usb0: port A, peer connected [ 178.898942][ T5858] usb 7-1: USB disconnect, device number 10 [ 179.294215][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.445092][ T7073] rdma_rxe: rxe_newlink: failed to add lo [ 180.029868][ T7076] CIFS: Attempting to mount //127.0.0.1/share [ 180.042336][ T7076] CIFS: VFS: cifs_mount failed w/return code = -5 [ 180.295056][ T7085] md: could not open device unknown-block(1,0). [ 180.336967][ T7081] md: could not open device unknown-block(1,1). [ 180.445999][ T5740] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -ETIMEDOUT [ 180.455736][ T6874] md_update_sb: can't update sb for read-only array md0 [ 180.471356][ T5740] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 180.483654][ T5740] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 180.495629][ T5740] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.496412][ T5740] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.516649][ T5740] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 180.661552][ T7091] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.661604][ T7091] use the actual size instead. [ 180.983046][ T1940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.153971][ T1940] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 181.159009][ T1940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.159037][ T1940] usb 5-1: Product: syz [ 181.159055][ T1940] usb 5-1: Manufacturer: syz [ 181.159073][ T1940] usb 5-1: SerialNumber: syz [ 181.171994][ T1940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 181.172043][ T1940] usb 5-1: setting power ON [ 181.378239][ T1940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.379136][ T1940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 181.379190][ T1940] usb 5-1: media controller created [ 181.399932][ T1940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.430230][ T1940] usb 5-1: selecting invalid altsetting 6 [ 181.430277][ T1940] usb 5-1: digital interface selection failed (-22) [ 181.431777][ T1940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 181.433514][ T1940] usb 5-1: setting power OFF [ 182.382289][ T1940] dvb-usb: bulk message failed: -71 (2/0) [ 182.382351][ T1940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 182.386820][ T1940] usb 5-1: setting power ON [ 182.388656][ T1940] dvb-usb: bulk message failed: -71 (2/0) [ 182.390329][ T1940] usb 5-1: analog interface selection failed (-71) [ 182.524094][ T1940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 182.524152][ T1940] dvb_usb_cxusb 5-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 182.534531][ T1940] usb 5-1: USB disconnect, device number 6 [ 183.318040][ T5740] usb 3-1: USB disconnect, device number 23 [ 183.320945][ T5740] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 183.571835][ T7111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.623135][ T7111] md: could not open device unknown-block(7,0). [ 183.630327][ T6874] md_update_sb: can't update sb for read-only array md0 [ 183.675904][ T6874] md_update_sb: can't update sb for read-only array md0 [ 183.713497][ T6874] md_update_sb: can't update sb for read-only array md0 [ 183.743049][ T6874] md_update_sb: can't update sb for read-only array md0 [ 184.026782][ T6874] md_update_sb: can't update sb for read-only array md0 [ 184.084054][ T6874] md_update_sb: can't update sb for read-only array md0 [ 184.085541][ T5740] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 184.143106][ T7120] md: could not open device unknown-block(1,0). [ 184.151433][ T6874] md_update_sb: can't update sb for read-only array md0 [ 184.213209][ T7120] md: could not open device unknown-block(1,1). [ 184.219737][ T6874] md_update_sb: can't update sb for read-only array md0 [ 184.282151][ T5740] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 184.289687][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.289715][ T5740] usb 3-1: Product: syz [ 184.289732][ T5740] usb 3-1: Manufacturer: syz [ 184.289750][ T5740] usb 3-1: SerialNumber: syz [ 184.516850][ T5740] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 185.035846][ T7154] CIFS: Attempting to mount //127.0.0.1/share [ 185.046024][ T7154] CIFS: VFS: cifs_mount failed w/return code = -5 [ 185.073006][ T6535] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 185.224666][ T6535] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.230593][ T6535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.230620][ T6535] usb 7-1: Product: syz [ 185.230637][ T6535] usb 7-1: Manufacturer: syz [ 185.230655][ T6535] usb 7-1: SerialNumber: syz [ 185.350022][ T25] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.973685][ T5858] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 185.983751][ T5858] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 186.244734][ T5858] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 186.593893][ T25] usb 7-1: Service connection timeout for: 256 [ 186.607987][ T25] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 186.638375][ T25] ath9k_htc: Failed to initialize the device [ 186.653368][ T25] usb 7-1: ath9k_htc: USB layer deinitialized [ 186.753856][ T5858] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 186.780399][ T7166] ceph: No mds server is up or the cluster is laggy [ 186.970334][ T5906] usb 7-1: USB disconnect, device number 11 [ 187.132956][ T5858] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.293682][ T5858] usb 5-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 187.304218][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 187.304300][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 187.304348][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.319173][ T7173] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 187.319325][ T7173] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 187.803429][ T5858] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 187.954426][ T5858] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 187.955873][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.196849][ T5858] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, 3e:47:b7:43:db:f3 [ 188.752312][ T5619] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 188.761980][ T5619] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 188.769464][ T5619] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 188.778874][ T5619] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 188.784092][ T5619] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 188.847359][ T5740] dvb_usb_rtl28xxu 3-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.894034][ T5740] usb 3-1: USB disconnect, device number 24 [ 188.903767][ T5621] Bluetooth: hci12: Opcode 0x0c03 failed: -71 [ 188.904167][ T6535] usb 5-1: USB disconnect, device number 7 [ 189.110495][ T6534] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.113520][ T6534] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.365494][ T6535] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.682620][ T7200] rdma_rxe: rxe_newlink: failed to add lo [ 189.711029][ T7202] kAFS: unparsable volume name [ 189.875117][ T6534] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.932432][ T7192] ceph: No mds server is up or the cluster is laggy [ 190.048682][ T7212] CIFS: Attempting to mount //127.0.0.1/share [ 190.055848][ T7212] CIFS: VFS: cifs_mount failed w/return code = -5 [ 190.833096][ T5621] Bluetooth: hci13: command tx timeout [ 191.183066][ T5906] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.333754][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 1.00 [ 191.335621][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.560266][ T6534] usb 3-1: USB disconnect, device number 25 [ 192.913293][ T5621] Bluetooth: hci13: command tx timeout [ 193.235722][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.302'. [ 193.293251][ T5906] usb 7-1: USB disconnect, device number 12 [ 193.301893][ T5906] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 193.354149][ T5740] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 193.506546][ T5740] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 193.508642][ T5740] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 193.508676][ T5740] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.508704][ T5740] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 193.508733][ T5740] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 193.508760][ T5740] usb 3-1: config 1 interface 0 has no altsetting 0 [ 193.508796][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.519288][ T7227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.519440][ T7227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.519580][ T7227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.519719][ T7227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.528231][ T5740] usb 3-1: probing VID:PID(0424:012C) [ 193.539044][ T5740] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 193.539071][ T5740] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 193.539093][ T5740] usb 3-1: vub300 testing BULK OUT EndPoint(2) 01 [ 193.539115][ T5740] usb 3-1: vub300 testing BULK OUT EndPoint(3) 02 [ 193.539137][ T5740] usb 3-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 193.559792][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.559854][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.747695][ T5740] vub300 3-1:1.0: probe with driver vub300 failed with error -32 [ 193.986262][ T11] device offline error, dev sda, sector 868662 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.986338][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2038 starting block 108582) [ 193.986440][ T11] Buffer I/O error on device sda1, logical block 108544 [ 193.986559][ T11] device offline error, dev sda, sector 876846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.986589][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2038 starting block 109605) [ 193.986633][ T11] Buffer I/O error on device sda1, logical block 109567 [ 193.987087][ T11] device offline error, dev sda, sector 794934 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.987118][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2037 starting block 99366) [ 193.987162][ T11] Buffer I/O error on device sda1, logical block 99328 [ 193.987244][ T11] device offline error, dev sda, sector 771166 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.987272][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96395) [ 193.987308][ T11] Buffer I/O error on device sda1, logical block 96357 [ 193.987388][ T11] device offline error, dev sda, sector 771334 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.987417][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96416) [ 193.987445][ T11] Buffer I/O error on device sda1, logical block 96378 [ 193.987524][ T11] device offline error, dev sda, sector 771582 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.987552][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96447) [ 193.987581][ T11] Buffer I/O error on device sda1, logical block 96409 [ 193.988155][ T11] device offline error, dev sda, sector 771598 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.988186][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96449) [ 193.988215][ T11] Buffer I/O error on device sda1, logical block 96411 [ 193.988304][ T11] device offline error, dev sda, sector 771646 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.988333][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96455) [ 193.988361][ T11] Buffer I/O error on device sda1, logical block 96417 [ 193.991390][ T11] device offline error, dev sda, sector 771918 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.991423][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96489) [ 193.991453][ T11] Buffer I/O error on device sda1, logical block 96451 [ 193.991539][ T11] device offline error, dev sda, sector 772046 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 193.991568][ T11] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96505) [ 193.991614][ T11] Buffer I/O error on device sda1, logical block 96467 [ 194.019415][ T4942] Aborting journal on device sda1-8. [ 194.020414][ T11] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 194.030429][ T4942] JBD2: I/O error when updating journal superblock for sda1-8. [ 194.030540][ T7235] EXT4-fs error (device sda1): ext4_journal_check_start:94: comm syz.5.308: Detected aborted journal [ 194.031642][ T11] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 194.031965][ T7235] EXT4-fs (sda1): I/O error while writing superblock [ 194.031983][ T7235] EXT4-fs (sda1): Remounting filesystem read-only [ 194.155527][ T7241] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 194.155636][ T7241] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 194.155674][ T7241] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 194.155708][ T7241] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 194.155742][ T7241] Buffer I/O error on dev sda1, logical block 164, lost async page write [ 194.155777][ T7241] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 194.155812][ T7241] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 194.155868][ T7241] Buffer I/O error on dev sda1, logical block 8196, lost async page write [ 194.457943][ T7241] EXT4-fs (sda1): shut down requested (2) [ 194.610159][ T7185] lo speed is unknown, defaulting to 1000 [ 194.667088][ T7241] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 194.993530][ T5621] Bluetooth: hci13: command tx timeout [ 195.221043][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.228320][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.228434][ T7185] bridge_slave_0: entered allmulticast mode [ 195.231423][ T7185] bridge_slave_0: entered promiscuous mode [ 195.315078][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.315228][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.315393][ T7185] bridge_slave_1: entered allmulticast mode [ 195.321478][ T7185] bridge_slave_1: entered promiscuous mode [ 195.398899][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.417416][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.456763][ T7185] team0: Port device team_slave_0 added [ 195.466345][ T7185] team0: Port device team_slave_1 added [ 195.508170][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.518070][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.543308][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.552240][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.552256][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.552294][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.636092][ T7185] hsr_slave_0: entered promiscuous mode [ 195.642977][ T7185] hsr_slave_1: entered promiscuous mode [ 195.649381][ T7185] debugfs: 'hsr0' already exists in 'hsr' [ 195.655288][ T7185] Cannot create hsr debugfs directory [ 195.868405][ T7185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.967457][ T7185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.046221][ T7185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.088556][ T7185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.156378][ T5760] usb 3-1: USB disconnect, device number 26 [ 196.356237][ T7185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.372485][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.426302][ T7185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.444963][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.475449][ T7185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.489088][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.493937][ T7185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.500152][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.585616][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.621264][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.639726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.639868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.734842][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.780012][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.780163][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.938198][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.074108][ T5621] Bluetooth: hci13: command tx timeout [ 197.097098][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.211398][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.429588][ T5275] 8021q: adding VLAN 0 to HW filter on device eth0 [ 197.454711][ T13] bridge_slave_1: left allmulticast mode [ 197.468248][ T13] bridge_slave_1: left promiscuous mode [ 197.469617][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.489353][ T13] bridge_slave_0: left allmulticast mode [ 197.489401][ T13] bridge_slave_0: left promiscuous mode [ 197.490036][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.681542][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.694112][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.705775][ T13] bond0 (unregistering): Released all slaves [ 197.814736][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 197.836560][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 197.891958][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 198.330803][ T13] hsr_slave_0: left promiscuous mode [ 198.337576][ T13] hsr_slave_1: left promiscuous mode [ 198.338680][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.338712][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.354694][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.354715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.379316][ T13] veth1_macvtap: left promiscuous mode [ 198.379401][ T13] veth0_macvtap: left promiscuous mode [ 198.379521][ T13] veth1_vlan: left promiscuous mode [ 198.379641][ T13] veth0_vlan: left promiscuous mode [ 198.652476][ T13] team0 (unregistering): Port device team_slave_1 removed [ 198.682503][ T13] team0 (unregistering): Port device team_slave_0 removed [ 199.634032][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.657411][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.682728][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 199.724739][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.748645][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 199.772762][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 199.814594][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.886294][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.016310][ T13] bridge_slave_1: left allmulticast mode [ 200.023772][ T13] bridge_slave_1: left promiscuous mode [ 200.030652][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.041174][ T13] bridge_slave_0: left allmulticast mode [ 200.041205][ T13] bridge_slave_0: left promiscuous mode [ 200.042744][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.061278][ T13] bridge_slave_1: left allmulticast mode [ 200.061314][ T13] bridge_slave_1: left promiscuous mode [ 200.061875][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.075248][ T13] bridge_slave_0: left allmulticast mode [ 200.075271][ T13] bridge_slave_0: left promiscuous mode [ 200.075487][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.270410][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.285571][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.295739][ T13] bond0 (unregistering): Released all slaves [ 200.407128][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.420286][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.434674][ T13] bond0 (unregistering): Released all slaves [ 200.464420][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 200.526388][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 200.602471][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 200.627973][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 201.435797][ T13] hsr_slave_0: left promiscuous mode [ 201.441255][ T13] hsr_slave_1: left promiscuous mode [ 201.442218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.459610][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.470872][ T13] hsr_slave_0: left promiscuous mode [ 201.476813][ T13] hsr_slave_1: left promiscuous mode [ 201.478165][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.478187][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.484523][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.484544][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.512718][ T13] veth1_macvtap: left promiscuous mode [ 201.512821][ T13] veth0_macvtap: left promiscuous mode [ 201.519437][ T13] veth1_vlan: left promiscuous mode [ 201.519514][ T13] veth0_vlan: left promiscuous mode [ 201.807443][ T13] team0 (unregistering): Port device team_slave_1 removed [ 201.822328][ T13] team0 (unregistering): Port device team_slave_0 removed [ 202.126331][ T13] team0 (unregistering): Port device team_slave_1 removed [ 202.142294][ T13] team0 (unregistering): Port device team_slave_0 removed [ 202.288191][ T49] smc: removing ib device rxe0 [ 202.307392][ T5906] lo speed is unknown, defaulting to 1000 [ 202.307425][ T5906] rxe0: Port: 1 Link DOWN [ 202.339696][ T49] smbdirect: ib_dev[rxe0] removed [ 205.878482][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 205.878926][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 205.879214][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 205.879578][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 236.120977][ T4980] udevd[4980]: worker [5889] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 239.668851][ T985] ath6kl: Failed to get board file ath6k/AR6004/hw1.3/bdata.bin (-110), trying to find default board file. [ 239.686650][ T985] usb 6-1: loading /lib/firmware/updates/syzkaller/ath6k/AR6004/hw1.3/bdata.bin failed with error -5 [ 239.687058][ T985] usb 6-1: loading /lib/firmware/updates/ath6k/AR6004/hw1.3/bdata.bin failed with error -5 [ 239.687442][ T985] usb 6-1: loading /lib/firmware/syzkaller/ath6k/AR6004/hw1.3/bdata.bin failed with error -5 [ 239.687852][ T985] usb 6-1: loading /lib/firmware/ath6k/AR6004/hw1.3/bdata.bin failed with error -5 [ 239.687905][ T985] usb 6-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -5 [ 239.687929][ T985] usb 6-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 246.833086][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 251.953241][ T4928] Bluetooth: hci7: command 0x0406 tx timeout [ 254.998382][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.998473][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.203764][ T5621] Bluetooth: hci8: command 0x2016 tx timeout [ 263.313260][ T31] INFO: task syz-executor:5616 blocked for more than 143 seconds. [ 263.313316][ T31] Not tainted syzkaller #0 [ 263.313350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.313368][ T31] task:syz-executor state:D stack:22208 pid:5616 tgid:5616 ppid:1 task_flags:0x400140 flags:0x00080002 [ 263.313449][ T31] Call Trace: [ 263.313465][ T31] [ 263.313490][ T31] __schedule+0x17db/0x58f0 ** replaying previous printk message ** [ 263.313490][ T31] __schedule+0x17db/0x58f0 [ 263.313580][ T31] ? __pfx___schedule+0x10/0x10 [ 263.313636][ T31] ? schedule+0x90/0x2b0 [ 263.313681][ T31] schedule+0x164/0x2b0 [ 263.313724][ T31] schedule_preempt_disabled+0x13/0x30 [ 263.313766][ T31] __mutex_lock+0x7c1/0x1550 [ 263.313818][ T31] ? __mutex_lock+0x5d4/0x1550 [ 263.313878][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 263.313935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 263.313988][ T31] ? net_generic+0x1e/0x240 [ 263.314036][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.314077][ T31] ? net_generic+0x1e/0x240 [ 263.314123][ T31] ? net_generic+0x1e/0x240 [ 263.314166][ T31] ? net_generic+0x1e/0x240 [ 263.314212][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.314254][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 263.314302][ T31] nfsd_umount+0x41/0x60 [ 263.314339][ T31] deactivate_locked_super+0xbc/0x110 [ 263.314383][ T31] cleanup_mnt+0x3d3/0x460 [ 263.314434][ T31] task_work_run+0x1d9/0x270 [ 263.314474][ T31] ? __pfx_task_work_run+0x10/0x10 [ 263.314520][ T31] exit_to_user_mode_loop+0x204/0x770 [ 263.314552][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.314590][ T31] ? rcu_is_watching+0x16/0xb0 [ 263.314632][ T31] do_syscall_64+0x328/0x520 [ 263.316657][ T31] ? trace_irq_disable+0x3b/0x140 [ 263.316688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.316722][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.316749][ T31] RIP: 0033:0x7f978199f397 [ 263.316795][ T31] RSP: 002b:00007ffee1b6c118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 263.316822][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f978199f397 [ 263.316840][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee1b6c1d0 [ 263.316857][ T31] RBP: 00007ffee1b6c1d0 R08: 00007ffee1b6d1d0 R09: 00000000ffffffff [ 263.316881][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee1b6d260 [ 263.316898][ T31] R13: 00007f9781a34474 R14: 000000000001b810 R15: 00007ffee1b6d2a0 [ 263.316936][ T31] [ 263.316988][ T31] INFO: task syz.5.42:6024 blocked for more than 143 seconds. [ 263.317007][ T31] Not tainted syzkaller #0 [ 263.317020][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.317031][ T31] task:syz.5.42 state:D stack:26096 pid:6024 tgid:6021 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 263.317101][ T31] Call Trace: [ 263.317111][ T31] [ 263.317125][ T31] __schedule+0x17db/0x58f0 [ 263.317163][ T31] ? __lock_acquire+0x6df/0x2e50 [ 263.317201][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.317239][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.317274][ T31] ? look_up_lock_class+0x57/0x110 [ 263.317319][ T31] ? __pfx___schedule+0x10/0x10 [ 263.317351][ T31] ? lock_acquire+0x115/0x350 [ 263.317384][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.317418][ T31] ? schedule+0x90/0x2b0 [ 263.317456][ T31] schedule+0x164/0x2b0 [ 263.317494][ T31] schedule_timeout+0xc0/0x2c0 [ 263.317540][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 263.317575][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.317604][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.317646][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.317689][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.317731][ T31] ? wait_for_completion+0x272/0x5e0 [ 263.317780][ T31] wait_for_completion+0x2ca/0x5e0 [ 263.317836][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 263.317880][ T31] ? fast_dput+0x481/0x690 [ 263.317917][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.317947][ T31] ? dput+0x39/0x60 [ 263.317977][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.318007][ T31] ? rpc_queue_upcall+0x29b/0x320 [ 263.318049][ T31] nfsd4_cld_tracking_init+0xda0/0x13a0 [ 263.318088][ T31] ? irqentry_exit+0x218/0x910 [ 263.318134][ T31] ? __pfx_nfsd4_cld_tracking_init+0x10/0x10 [ 263.318176][ T31] ? net_generic+0x1e/0x240 [ 263.318218][ T31] ? net_generic+0x1e/0x240 [ 263.318252][ T31] ? net_generic+0x1e/0x240 [ 263.318284][ T31] ? net_generic+0x1e/0x240 [ 263.318319][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.318354][ T31] nfsd4_client_tracking_init+0xca/0x1c0 [ 263.318402][ T31] nfs4_state_start_net+0xc95/0x1180 [ 263.318444][ T31] nfsd_svc+0x481/0x710 [ 263.318476][ T31] write_threads+0x434/0x610 [ 263.318512][ T31] ? __pfx_write_threads+0x10/0x10 [ 263.318552][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.318594][ T31] ? _copy_from_user+0x94/0xb0 [ 263.318623][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.318653][ T31] ? simple_transaction_get+0x12d/0x160 [ 263.318692][ T31] nfsctl_transaction_write+0x10f/0x160 [ 263.318726][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 263.318759][ T31] vfs_write+0x296/0xba0 [ 263.318807][ T31] ? __pfx_vfs_write+0x10/0x10 [ 263.318846][ T31] ? __fget_files+0x2a/0x420 [ 263.318891][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.318922][ T31] ? __fget_files+0x3a2/0x420 [ 263.318955][ T31] ? __fget_files+0x2a/0x420 [ 263.318993][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.319028][ T31] ksys_write+0x150/0x270 [ 263.319069][ T31] ? __pfx_ksys_write+0x10/0x10 [ 263.319119][ T31] do_syscall_64+0x166/0x520 [ 263.319157][ T31] ? trace_irq_disable+0x3b/0x140 [ 263.319183][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.319216][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.319243][ T31] RIP: 0033:0x7fe7f5d9e159 [ 263.319265][ T31] RSP: 002b:00007fe7f6ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.319291][ T31] RAX: ffffffffffffffda RBX: 00007fe7f6026090 RCX: 00007fe7f5d9e159 [ 263.319311][ T31] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000005 [ 263.319328][ T31] RBP: 00007fe7f5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 263.319345][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.319361][ T31] R13: 00007fe7f6026128 R14: 00007fe7f6026090 R15: 00007fff4a838e88 [ 263.319401][ T31] [ 263.319412][ T31] INFO: task iou-wrk-6022:6026 blocked for more than 143 seconds. [ 263.319430][ T31] Not tainted syzkaller #0 [ 263.319443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.319454][ T31] task:iou-wrk-6022 state:D stack:28448 pid:6026 tgid:6021 ppid:5613 task_flags:0x404050 flags:0x00080006 [ 263.319529][ T31] Call Trace: [ 263.319537][ T31] [ 263.319553][ T31] __schedule+0x17db/0x58f0 [ 263.319609][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.319649][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.319685][ T31] ? __pfx___schedule+0x10/0x10 [ 263.319730][ T31] ? schedule+0x90/0x2b0 [ 263.319769][ T31] schedule+0x164/0x2b0 [ 263.319806][ T31] schedule_preempt_disabled+0x13/0x30 [ 263.319841][ T31] __mutex_lock+0x7c1/0x1550 [ 263.319882][ T31] ? io_write+0x11d5/0x1680 [ 263.319911][ T31] ? __mutex_lock+0x5d4/0x1550 [ 263.319954][ T31] ? write_threads+0x3b1/0x610 [ 263.319987][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 263.320024][ T31] ? simple_strntoull+0x114/0x190 [ 263.320065][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320095][ T31] ? qword_get+0x5ad/0x650 [ 263.320133][ T31] write_threads+0x3b1/0x610 [ 263.320168][ T31] ? __pfx_write_threads+0x10/0x10 [ 263.320206][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320247][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320277][ T31] ? _copy_from_user+0x94/0xb0 [ 263.320305][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320335][ T31] ? simple_transaction_get+0x12d/0x160 [ 263.320373][ T31] nfsctl_transaction_write+0x10f/0x160 [ 263.320410][ T31] loop_rw_iter+0x426/0x690 [ 263.320453][ T31] io_write+0x11d5/0x1680 [ 263.320488][ T31] ? __pfx_io_write+0x10/0x10 [ 263.320520][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320556][ T31] __io_issue_sqe+0x188/0x4d0 [ 263.320600][ T31] io_issue_sqe+0x16d/0x1020 [ 263.320638][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320667][ T31] ? rcu_is_watching+0x16/0xb0 [ 263.320698][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.320734][ T31] io_wq_submit_work+0x7ab/0xc90 [ 263.320779][ T31] io_worker_handle_work+0x7a1/0x1140 [ 263.320812][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.320872][ T31] io_wq_worker+0x452/0xf10 [ 263.320923][ T31] ? io_wq_worker+0x37c/0xf10 [ 263.320954][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 263.320987][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.321017][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.321054][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.321089][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.321124][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.321158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.321190][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 263.321223][ T31] ret_from_fork+0x514/0xb70 [ 263.321253][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 263.321293][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.321323][ T31] ? __switch_to+0xc89/0x1420 [ 263.321364][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 263.321395][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.321455][ T31] [ 263.321522][ T31] [ 263.321522][ T31] Showing all locks held in the system: [ 263.321535][ T31] locks held by kworker/0:1/10: 2, on CPU#0: [ 263.321554][ T31] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.321630][ T31] #1: ffffc900000f7c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.321704][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 263.321723][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 263.321790][ T31] #1: ffffffff9ad31098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 263.321872][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 263.321890][ T31] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 263.321955][ T31] locks held by kworker/u8:2/40: 3, last CPU#1: [ 263.321973][ T31] #0: ffff888032614940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.322045][ T31] #1: ffffc90000b07c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.322120][ T31] #2: ffff88807fad01c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 263.322202][ T31] locks held by kworker/1:2/985: 6, on CPU#1: [ 263.322221][ T31] #0: ffff888022ac2d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.322292][ T31] #1: ffffc90004a2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.322365][ T31] #2: ffff88802a5471d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 263.322428][ T31] #3: ffff88802b5c41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 263.322490][ T31] #4: ffff888081f371a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 263.322552][ T31] #5: ffffffff8ebf7cc8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 263.322638][ T31] locks held by klogd/4969: 1, last CPU#0: [ 263.322656][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 263.322735][ T31] locks held by getty/5369: 2, on CPU#1: [ 263.322753][ T31] #0: ffff8880348a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 263.322824][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 263.333178][ T31] locks held by syz-executor/5616: 2, on CPU#1: [ 263.333197][ T31] #0: ffff8880539fa0e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 263.333276][ T31] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 263.333365][ T31] locks held by kworker/1:6/5838: 5, on CPU#1: [ 263.333383][ T31] #0: ffff888022ac2d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.333457][ T31] #1: ffffc900046bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 263.333529][ T31] #2: ffff88802a2fd1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 263.333592][ T31] #3: ffff88807b47b1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 263.333665][ T31] #4: ffff88807ec381a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 263.333731][ T31] locks held by udevd/5889: 4, on CPU#1: [ 263.333748][ T31] #0: ffff88807581e758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 263.333813][ T31] #1: ffff888086e3cc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 263.333893][ T31] #2: ffff888038f59878 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 263.333969][ T31] #3: ffff88802b5c41d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 263.334046][ T31] locks held by syz.5.42/6024: 3, on CPU#1: [ 263.334075][ T31] #0: ffff88802bb86630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.334150][ T31] #1: ffff88803543a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.334303][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.334375][ T31] locks held by iou-wrk-6022/6026: 1, on CPU#1: [ 263.334394][ T31] #0: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.334479][ T31] locks held by syz.3.95/6240: 3, on CPU#1: [ 263.334496][ T31] #0: ffff888031058ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.334568][ T31] #1: ffff888076ba4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.334672][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.334741][ T31] locks held by syz.3.95/6242: 3, on CPU#1: [ 263.334759][ T31] #0: ffff88802bb87970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.334829][ T31] #1: ffff888076ba4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.334913][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.334981][ T31] locks held by syz.3.95/6243: 3, on CPU#0: [ 263.334999][ T31] #0: ffff88802bba1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.335070][ T31] #1: ffff888076ba4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.335148][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 263.335218][ T31] locks held by syz.3.95/6246: 3, on CPU#1: [ 263.335236][ T31] #0: ffff88802be9a2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.335307][ T31] #1: ffff888076ba4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.335387][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd4_write_time+0xb1/0x6c0 [ 263.335456][ T31] locks held by syz.3.95/6249: 3, on CPU#1: [ 263.335474][ T31] #0: ffff888031d702b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.335544][ T31] #1: ffff888076ba4460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.335624][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.335695][ T31] locks held by syz.0.107/6329: 3, on CPU#1: [ 263.335712][ T31] #0: ffff888077c067f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.335784][ T31] #1: ffff88802a8ea460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.335866][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.335953][ T31] locks held by syz.0.107/6330: 3, on CPU#1: [ 263.335971][ T31] #0: ffff8880358a2b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.336042][ T31] #1: ffff88802a8ea460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.336122][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.336190][ T31] locks held by syz.0.107/6333: 3, on CPU#1: [ 263.336209][ T31] #0: ffff88803586a9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.336281][ T31] #1: ffff88802a8ea460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.336360][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.336429][ T31] locks held by iou-wrk-6334/6335: 1, on CPU#0: [ 263.336447][ T31] #0: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.336520][ T31] locks held by syz.7.174/6651: 3, on CPU#1: [ 263.336538][ T31] #0: ffff888077a160f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.336609][ T31] #1: ffff88803384a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.336688][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.336757][ T31] locks held by syz.7.174/6652: 3, on CPU#1: [ 263.336775][ T31] #0: ffff888077f84630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.336846][ T31] #1: ffff88803384a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.336930][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.336998][ T31] locks held by syz.7.174/6655: 3, on CPU#1: [ 263.337016][ T31] #0: ffff88802031d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.337087][ T31] #1: ffff88803384a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.337166][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.337234][ T31] locks held by syz.9.179/6672: 3, on CPU#1: [ 263.337252][ T31] #0: ffff888020712ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.337323][ T31] #1: ffff88807de9c460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.337402][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.337470][ T31] locks held by syz.9.179/6673: 3, on CPU#1: [ 263.337488][ T31] #0: ffff8880227900f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.337559][ T31] #1: ffff88807de9c460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.337639][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.337710][ T31] locks held by syz.8.251/7018: 5, on CPU#1: [ 263.337728][ T31] #0: ffff88806f6f8470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.337799][ T31] #1: ffff8880396ba460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.337882][ T31] #2: ffff88807e838c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 263.337950][ T31] #3: ffff888054749008 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 263.338024][ T31] #4: ffff88807b47b1d8 (&dev->mutex){....}-{4:4}, at: autosuspend_delay_ms_store+0x13d/0x1c0 [ 263.338094][ T31] locks held by syz.8.251/7025: 5, on CPU#1: [ 263.338112][ T31] #0: ffff888079d9f430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.338183][ T31] #1: ffff8880396ba460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.338261][ T31] #2: ffff888038eb7880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 263.338329][ T31] #3: ffff888099794d28 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 263.338403][ T31] #4: ffff88802b5c41d8 (&dev->mutex){....}-{4:4}, at: autosuspend_delay_ms_store+0x13d/0x1c0 [ 263.338472][ T31] locks held by syz.1.293/7177: 3, on CPU#0: [ 263.338490][ T31] #0: ffff88803363b5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.338561][ T31] #1: ffff888025434460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.338641][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.338709][ T31] locks held by syz.1.293/7178: 3, on CPU#0: [ 263.338727][ T31] #0: ffff88807a17b970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.338798][ T31] #1: ffff888025434460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.338881][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.338950][ T31] locks held by syz.1.293/7181: 3, on CPU#1: [ 263.338967][ T31] #0: ffff88802aa14ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.339039][ T31] #1: ffff888025434460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.339118][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.339186][ T31] locks held by syz.4.304/7217: 3, on CPU#1: [ 263.339204][ T31] #0: ffff88807a8dfb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.339276][ T31] #1: ffff88807b612460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.339355][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.339424][ T31] locks held by syz.4.304/7218: 3, on CPU#1: [ 263.339441][ T31] #0: ffff88807a8de2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.339513][ T31] #1: ffff88807b612460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.339592][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.339659][ T31] locks held by syz.4.304/7219: 3, on CPU#1: [ 263.339678][ T31] #0: ffff888030fbd7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.339749][ T31] #1: ffff88807b612460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.339828][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.339902][ T31] locks held by syz.6.307/7232: 3, on CPU#0: [ 263.339920][ T31] #0: ffff888028c3db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.339992][ T31] #1: ffff888032a8a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.340071][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 263.340139][ T31] locks held by syz.6.307/7237: 3, on CPU#0: [ 263.340157][ T31] #0: ffff88807f72b970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.340228][ T31] #1: ffff888032a8a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.340307][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 263.340375][ T31] locks held by syz.6.307/7238: 3, on CPU#0: [ 263.340393][ T31] #0: ffff88807b6bcd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 263.340465][ T31] #1: ffff888032a8a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 263.340544][ T31] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.340612][ T31] locks held by iou-wrk-7242/7243: 1, on CPU#0: [ 263.340630][ T31] #0: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 263.340704][ T31] [ 263.340711][ T31] ============================================= [ 263.340711][ T31] [ 263.340722][ T31] NMI backtrace for cpu 0 [ 263.340737][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 263.340764][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.340779][ T31] Call Trace: [ 263.340789][ T31] [ 263.340800][ T31] dump_stack_lvl+0xe8/0x150 [ 263.340838][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 263.340874][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.340917][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 263.340952][ T31] sys_info+0x135/0x170 [ 263.340979][ T31] watchdog+0xfd7/0x1030 [ 263.341013][ T31] ? watchdog+0x1c7/0x1030 [ 263.341045][ T31] kthread+0x38b/0x480 [ 263.341071][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.341093][ T31] ? __pfx_kthread+0x10/0x10 [ 263.341120][ T31] ret_from_fork+0x514/0xb70 [ 263.341148][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 263.341187][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.341217][ T31] ? __switch_to+0xc89/0x1420 [ 263.341255][ T31] ? __pfx_kthread+0x10/0x10 [ 263.341282][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.341338][ T31] [ 263.341347][ T31] Sending NMI from CPU 0 to CPUs 1: [ 263.341374][ C1] NMI backtrace for cpu 1 [ 263.341388][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 263.341412][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.341425][ C1] RIP: 0010:check_preemption_disabled+0x1a/0xd0 [ 263.341451][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 4b 5e b0 07 65 48 8b 0d 1b 5e b0 07 85 c9 74 0c 5b <41> 5e 41 5f 5d e9 07 3f 2c f5 cc 9c 59 f7 c1 00 02 00 00 74 ea 65 [ 263.341470][ C1] RSP: 0018:ffffc90000157898 EFLAGS: 00000002 [ 263.341489][ C1] RAX: 0000000000000001 RBX: 0000000000000993 RCX: 8000000000000002 [ 263.341505][ C1] RDX: 0000000000000001 RSI: ffffffff8c6d9460 RDI: ffffffff8c6d9420 [ 263.341521][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 263.341535][ C1] R10: dffffc0000000000 R11: ffffffff8be286c0 R12: 1ffffffff35a626d [ 263.341553][ C1] R13: 00000000ffffffff R14: 0000009aa145df3b R15: 0000000000000917 [ 263.341571][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 263.341590][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.341606][ C1] CR2: 0000565264566660 CR3: 000000000eb48000 CR4: 0000000000350ef0 [ 263.341625][ C1] Call Trace: [ 263.341633][ C1] [ 263.341643][ C1] delay_tsc+0x6c/0xd0 [ 263.341671][ C1] wait_for_lsr+0x147/0x2f0 [ 263.341710][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 263.341744][ C1] serial8250_console_write+0xaa1/0x1200 [ 263.341787][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 263.341822][ C1] ? __schedule+0x17f1/0x58f0 [ 263.341853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.341885][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.341917][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 263.341953][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 263.341982][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.342009][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 263.342044][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.342071][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 263.342104][ C1] nbcon_kthread_func+0x679/0x880 [ 263.342133][ C1] ? nbcon_kthread_func+0x163/0x880 [ 263.342156][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 263.342181][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.342211][ C1] ? __kthread_parkme+0x71/0x1f0 [ 263.342246][ C1] ? __kthread_parkme+0x199/0x1f0 [ 263.342283][ C1] kthread+0x38b/0x480 [ 263.342305][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 263.342328][ C1] ? __pfx_kthread+0x10/0x10 [ 263.342351][ C1] ret_from_fork+0x514/0xb70 [ 263.342380][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.342416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.342442][ C1] ? __switch_to+0xc89/0x1420 [ 263.342477][ C1] ? __pfx_kthread+0x10/0x10 [ 263.342499][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.342546][ C1] [ 263.359192][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 265.902159][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 265.911262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 265.921310][ T31] Call Trace: [ 265.924582][ T31] [ 265.927504][ T31] vpanic+0x56d/0xa60 [ 265.931494][ T31] ? __pfx___schedule+0x10/0x10 [ 265.936348][ T31] ? __pfx_vpanic+0x10/0x10 [ 265.940863][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.946502][ T31] panic+0xc5/0xd0 [ 265.950227][ T31] ? __pfx_panic+0x10/0x10 [ 265.954643][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 265.960104][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 265.965474][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 265.971651][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 265.977812][ T31] watchdog+0x1030/0x1030 [ 265.982146][ T31] ? watchdog+0x1c7/0x1030 [ 265.986566][ T31] kthread+0x38b/0x480 [ 265.990638][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.995308][ T31] ? __pfx_kthread+0x10/0x10 [ 265.999897][ T31] ret_from_fork+0x514/0xb70 [ 266.004482][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 266.009599][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.015226][ T31] ? __switch_to+0xc89/0x1420 [ 266.019905][ T31] ? __pfx_kthread+0x10/0x10 [ 266.024488][ T31] ret_from_fork_asm+0x1a/0x30 [ 266.029272][ T31] [ 266.032511][ T31] Kernel Offset: disabled [ 266.036819][ T31] Rebooting in 86400 seconds..