last executing test programs: 14.93990931s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000003c0)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)) 14.08822284s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000001900)='-2 -3 +4\n', 0x9) write(r0, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r6, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v4,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r7, &(0x7f0000001500)='test\x00', 0x4) 12.996975779s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='add syz0 127.0.0.1\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1\n', 0xf) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 12.349659534s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/test_subsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/test_subsys/namespaces/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/test_subsys/namespaces/1/ana_grpid\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='2\x00', 0x2) 11.917159463s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000300)="ffffffff00"/24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0xc01c6f06, &(0x7f0000000500)='\x00'/28) 11.547914675s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 4 00000000 2147483647 /\n', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 9.748532591s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/fs/cgroup/memory\x00', 0x0, 0x0) 9.557722541s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/\x00', &(0x7f0000000000)='./nfs_mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000200)='addr=127.0.0.1\x00') 9.242771928s ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, &(0x7f0000000440)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, &(0x7f0000000440)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, &(0x7f0000000440)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@data_frame={@msdu=@type00={{}, {}, @device_b, @device_a, @from_mac}, @random="00112233"}, 0x1c) 7.776327524s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='mydomain / 2147483647 8192 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1,timeo=1,retrans=1,retry=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 4.573461642s ago: executing program 4 (id=16): mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080), &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) 4.313162281s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/mycluster/node\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='127.0.0.1\n\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='7777\n\x00', 0x5) 4.22946564s ago: executing program 1 (id=19): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) read(r0, &(0x7f0000002000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000004000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 4.042788038s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 3.811751767s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) 3.767015649s ago: executing program 1 (id=22): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b10e07700002010203010902270001010080fa0904000003ff00ff00070584030002000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x84, 0x4, &(0x7f0000000100)='\x00\x00ZZ') (async) syz_usb_ep_write(r0, 0x84, 0x4, &(0x7f0000000100)='\x00\x00ZZ') (async) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000400)="ffd80000") (async) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000300), 0x1000) 2.786029281s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000260)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1\x00', 0x1) 2.637884292s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)="020052487f00000100"/128, 0x80) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)="020030397f00000100"/128, 0x80) close(r2) r3 = syz_io_uring_setup(0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="0600000000000000020000000401000000000000000000006d796c7300"/128, 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000780)="01000000", 0x4) bind(r8, &(0x7f00000007c0)=@in={0x2, 0x3039, @loopback}, 0x80) connect(r8, &(0x7f0000000840)=@in={0x2, 0x5248, @loopback}, 0x80) write(r8, &(0x7f00000008c0)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r8, &(0x7f0000000900)="02000300010000000200000010000400", 0x10) 1.145127235s ago: executing program 3 (id=25): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @empty}, r2}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x28, 0xfa00, {{0xa, 0x4e20, 0x0, @empty}, {0xa, 0x4e20, 0x0, @empty}, r2, 0x3e8}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x18, 0xfa00, {r2, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x18, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 705.263389ms ago: executing program 4 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='thunderbolt\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd) 417.587433ms ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001000000010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x40, "0100"/96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) nanosleep(&(0x7f0000000300)={0x64}, 0x0) 222.796015ms ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1 1 1 1\n', 0x8) 0s ago: executing program 4 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='core\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='mem\n', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 91.932118][ T5581] cgroup: Unknown subsys name 'net' [ 92.138760][ T821] cfg80211: failed to load regulatory.db [ 92.245236][ T5581] cgroup: Unknown subsys name 'cpuset' [ 92.316612][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.289407][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.988895][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.014330][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.015426][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.034024][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.052366][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.073290][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.079038][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.092418][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.095503][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.101214][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.122316][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.150525][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.151457][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.157086][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.163453][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.174638][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.186594][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.192122][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.197797][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.218226][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.237667][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.243926][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.266732][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.267776][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.296204][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.387587][ T5600] Bluetooth: hci1: command tx timeout [ 99.387746][ T5602] Bluetooth: hci3: command tx timeout [ 99.387842][ T5601] Bluetooth: hci2: command tx timeout [ 99.465927][ T5601] Bluetooth: hci0: command tx timeout [ 99.465939][ T5602] Bluetooth: hci4: command tx timeout [ 100.080302][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.081648][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.082272][ T5596] bridge_slave_0: entered allmulticast mode [ 100.084371][ T5596] bridge_slave_0: entered promiscuous mode [ 100.165482][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.165591][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.180402][ T5596] bridge_slave_1: entered allmulticast mode [ 100.189705][ T5596] bridge_slave_1: entered promiscuous mode [ 100.353764][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.353954][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.354319][ T5595] bridge_slave_0: entered allmulticast mode [ 100.359103][ T5595] bridge_slave_0: entered promiscuous mode [ 100.387865][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.410827][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.410954][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.411131][ T5594] bridge_slave_0: entered allmulticast mode [ 100.413647][ T5594] bridge_slave_0: entered promiscuous mode [ 100.452825][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.452979][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.453496][ T5595] bridge_slave_1: entered allmulticast mode [ 100.463524][ T5595] bridge_slave_1: entered promiscuous mode [ 100.494095][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.519843][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.519970][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.520867][ T5594] bridge_slave_1: entered allmulticast mode [ 100.522721][ T5594] bridge_slave_1: entered promiscuous mode [ 100.598898][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.599022][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.599170][ T5597] bridge_slave_0: entered allmulticast mode [ 100.601091][ T5597] bridge_slave_0: entered promiscuous mode [ 100.641088][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.641350][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.641743][ T5598] bridge_slave_0: entered allmulticast mode [ 100.643600][ T5598] bridge_slave_0: entered promiscuous mode [ 100.700591][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.700725][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.701242][ T5597] bridge_slave_1: entered allmulticast mode [ 100.703265][ T5597] bridge_slave_1: entered promiscuous mode [ 100.740735][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.740894][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.741078][ T5598] bridge_slave_1: entered allmulticast mode [ 100.743305][ T5598] bridge_slave_1: entered promiscuous mode [ 100.776310][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.779236][ T5596] team0: Port device team_slave_0 added [ 100.810606][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.847797][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.850155][ T5596] team0: Port device team_slave_1 added [ 100.879755][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.952609][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.979065][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.022482][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.047038][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.049168][ T5595] team0: Port device team_slave_0 added [ 101.050565][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.050577][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.050602][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.116348][ T5594] team0: Port device team_slave_0 added [ 101.139277][ T5595] team0: Port device team_slave_1 added [ 101.140087][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.140100][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.140120][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.200011][ T5594] team0: Port device team_slave_1 added [ 101.248865][ T5597] team0: Port device team_slave_0 added [ 101.272170][ T5598] team0: Port device team_slave_0 added [ 101.297826][ T5597] team0: Port device team_slave_1 added [ 101.318789][ T5598] team0: Port device team_slave_1 added [ 101.319562][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.319573][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.319593][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.378905][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.378918][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.378938][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.448165][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.448178][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.448199][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.466015][ T5601] Bluetooth: hci2: command tx timeout [ 101.466045][ T5601] Bluetooth: hci1: command tx timeout [ 101.469442][ T5602] Bluetooth: hci3: command tx timeout [ 101.491275][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.491320][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.491403][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.545889][ T5601] Bluetooth: hci0: command tx timeout [ 101.545907][ T5602] Bluetooth: hci4: command tx timeout [ 102.009080][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.009094][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.009113][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.037055][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.037082][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.037169][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.104071][ T5596] hsr_slave_0: entered promiscuous mode [ 102.112260][ T5596] hsr_slave_1: entered promiscuous mode [ 102.123308][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.123321][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.123369][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.131144][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.131195][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.131269][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.329819][ T5595] hsr_slave_0: entered promiscuous mode [ 102.330881][ T5595] hsr_slave_1: entered promiscuous mode [ 102.331692][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 102.331780][ T5595] Cannot create hsr debugfs directory [ 102.375284][ T5594] hsr_slave_0: entered promiscuous mode [ 102.381910][ T5594] hsr_slave_1: entered promiscuous mode [ 102.382664][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.382683][ T5594] Cannot create hsr debugfs directory [ 102.476954][ T5597] hsr_slave_0: entered promiscuous mode [ 102.478169][ T5597] hsr_slave_1: entered promiscuous mode [ 102.478871][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 102.478889][ T5597] Cannot create hsr debugfs directory [ 102.494467][ T5598] hsr_slave_0: entered promiscuous mode [ 102.499992][ T5598] hsr_slave_1: entered promiscuous mode [ 102.502399][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.502470][ T5598] Cannot create hsr debugfs directory [ 103.473310][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.523678][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.545052][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.546841][ T5601] Bluetooth: hci1: command tx timeout [ 103.546874][ T5601] Bluetooth: hci2: command tx timeout [ 103.564083][ T5602] Bluetooth: hci3: command tx timeout [ 103.597006][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.600227][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.626164][ T5602] Bluetooth: hci0: command tx timeout [ 103.626200][ T5602] Bluetooth: hci4: command tx timeout [ 103.651291][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.683825][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.713025][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.836463][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.870935][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.873935][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.920634][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.923630][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.949280][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.984824][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.010432][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.170564][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.209475][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.213526][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.250424][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.268965][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.304966][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.341054][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.369222][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.547227][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.570762][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.587060][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.611420][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.626198][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.675073][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.713505][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.742292][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.892144][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.971985][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.012486][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.029444][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.096510][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.104072][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.139657][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.145346][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.189700][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.250016][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.288083][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.309371][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.309542][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.392897][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.393387][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.499980][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.520979][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.556460][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.556597][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.626203][ T5601] Bluetooth: hci2: command tx timeout [ 105.626237][ T5601] Bluetooth: hci1: command tx timeout [ 105.626261][ T5601] Bluetooth: hci3: command tx timeout [ 105.635526][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.635681][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.716386][ T5602] Bluetooth: hci4: command tx timeout [ 105.716420][ T5602] Bluetooth: hci0: command tx timeout [ 105.716866][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.789957][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.794212][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.794372][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.883239][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.883364][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.021016][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.108878][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.109102][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.137032][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.226695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.226871][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.383850][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.535250][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.547349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.654262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.654434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.220125][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.798951][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.226128][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.274785][ T5594] veth0_vlan: entered promiscuous mode [ 108.376736][ T5594] veth1_vlan: entered promiscuous mode [ 108.447887][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.588960][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.607631][ T5596] veth0_vlan: entered promiscuous mode [ 108.689730][ T5596] veth1_vlan: entered promiscuous mode [ 108.711332][ T5594] veth0_macvtap: entered promiscuous mode [ 108.731826][ T5597] veth0_vlan: entered promiscuous mode [ 108.760968][ T5594] veth1_macvtap: entered promiscuous mode [ 108.808029][ T5598] veth0_vlan: entered promiscuous mode [ 108.813374][ T5597] veth1_vlan: entered promiscuous mode [ 108.863313][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.887812][ T5598] veth1_vlan: entered promiscuous mode [ 108.914176][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.932101][ T5595] veth0_vlan: entered promiscuous mode [ 108.957200][ T5596] veth0_macvtap: entered promiscuous mode [ 108.992930][ T5596] veth1_macvtap: entered promiscuous mode [ 109.008731][ T5595] veth1_vlan: entered promiscuous mode [ 109.102029][ T5597] veth0_macvtap: entered promiscuous mode [ 109.209099][ T5597] veth1_macvtap: entered promiscuous mode [ 109.243014][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.315443][ T5598] veth0_macvtap: entered promiscuous mode [ 109.388007][ T5598] veth1_macvtap: entered promiscuous mode [ 109.443588][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.535009][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.582964][ T5595] veth0_macvtap: entered promiscuous mode [ 109.624785][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.635360][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.657070][ T5595] veth1_macvtap: entered promiscuous mode [ 109.687483][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.687513][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.788002][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.177584][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.247387][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.247410][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.304137][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.491766][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.491791][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.147686][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.147709][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.614940][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.614963][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.619099][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619513][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619549][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619579][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619611][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619643][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.619672][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.048808][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.048858][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.290213][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.290441][ T1433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.514649][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.514671][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.679518][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.679539][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.847936][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.853999][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.854251][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.854466][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.854637][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.957560][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.958154][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.958171][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.958592][ T1195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.193953][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.193976][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.263217][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.264760][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.340510][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.806205][ T5805] kAFS: unable to lookup cell 'syz0' [ 114.006478][ T1073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.056065][ T5791] NFSD: Unable to initialize client recovery tracking! (-110) [ 114.056086][ T5791] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 114.056098][ T5791] NFSD: starting 90-second grace period (net f0000446) [ 114.206843][ T5810] nvmet: adding nsid 1 to subsystem test_subsys [ 114.412504][ T198] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.540770][ T5816] ubi0: attaching mtd0 [ 114.756725][ T5816] ubi0: scanning is finished [ 114.756754][ T5816] ubi0: empty MTD device detected [ 114.925164][ T198] usb 2-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 114.925197][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.925218][ T198] usb 2-1: Product: syz [ 114.925233][ T198] usb 2-1: Manufacturer: syz [ 114.925248][ T198] usb 2-1: SerialNumber: syz [ 115.397257][ T198] usb-storage 2-1:1.0: USB Mass Storage device detected [ 115.493587][ T198] scsi host1: usb-storage 2-1:1.0 [ 116.125551][ T5816] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 116.603042][ T5796] NFSD: Failed to start, no listeners configured. [ 117.088577][ T198] usb 2-1: USB disconnect, device number 2 [ 117.311779][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.366693][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.423166][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.706032][ T198] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.859484][ T198] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 118.859515][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.919102][ T198] usb 2-1: NFC: intf ffff88805f6b8000 id ffffffff8ebb9580 [ 118.993856][ T198] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 119.194392][ T1188] nfcmrvl 2-1:1.0: NFC: send entry, len 4 [ 120.967920][ T5856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.976364][ C0] nfcmrvl 2-1:1.0: NFC: urb ffff88802706d800 status -2 count 0 [ 121.070726][ T5730] usb 2-1: USB disconnect, device number 3 [ 121.131553][ T5730] usb 2-1: NFC: intf ffff88805f6b8000 [ 121.542813][ T5861] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 121.922347][ T5730] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 122.074336][ T5868] fido_id[5868]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.134886][ T37] audit: type=1800 audit(1785855279.983:2): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.20" name="streaming_maxpacket" dev="configfs" ino=9415 res=0 errno=0 [ 122.586216][ T5730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.645979][ T5821] NFSD: Unable to initialize client recovery tracking! (-110) [ 122.646006][ T5821] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 122.646015][ T5821] NFSD: starting 90-second grace period (net f000043d) [ 122.758430][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 122.761344][ T5730] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 122.761376][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.761396][ T5730] usb 2-1: Product: syz [ 122.761415][ T5730] usb 2-1: Manufacturer: syz [ 122.761425][ T5730] usb 2-1: SerialNumber: syz [ 122.883240][ T5730] go7007 2-1:1.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 122.883265][ T5730] go7007 2-1:1.0: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 123.465527][ T37] audit: type=1800 audit(1785855281.313:3): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.24" name="local" dev="configfs" ino=9446 res=0 errno=0 [ 123.511393][ T5883] dlm: Using TCP for communications [ 123.511409][ T5883] dlm: Detect multi-homed hosts but use only the first IP address. [ 123.511415][ T5883] dlm: Try SCTP, if you want to enable multi-link. [ 123.545392][ T5883] dlm: myls: joining the lockspace group... [ 124.445973][ T5850] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.445994][ T5850] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.446006][ T5850] NFSD: starting 90-second grace period (net f000043c) [ 124.940822][ T5596] svc: failed to register nfsdv3 RPC service (errno 111). [ 124.943978][ T5596] svc: failed to register nfsaclv3 RPC service (errno 111). [ 124.943996][ T5596] failed to unregister tcp with rpcbind [ 124.944670][ T5596] svc: failed to register nfsdv3 RPC service (errno 97). [ 124.944690][ T5596] svc: failed to register nfsaclv3 RPC service (errno 97). [ 124.944703][ T5596] failed to unregister tcp with rpcbind [ 125.204237][ T5892] lo speed is unknown, defaulting to 1000 [ 125.204327][ T5892] lo speed is unknown, defaulting to 1000 [ 125.352554][ T5892] lo speed is unknown, defaulting to 1000 [ 125.354556][ T5892] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 125.354584][ T5892] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 125.354615][ T5892] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 125.450310][ T5892] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.759016][ T5892] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 378.185989][ T38] INFO: task iou-wrk-5882:5883 blocked for more than 143 seconds. [ 378.186023][ T38] Not tainted syzkaller #0 [ 378.186031][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.186038][ T38] task:iou-wrk-5882 state:D stack:24768 pid:5883 tgid:5881 ppid:5594 task_flags:0x404150 flags:0x00080006 [ 378.186185][ T38] Call Trace: [ 378.186253][ T38] [ 378.186316][ T38] __schedule+0x16dc/0x5500 [ 378.186447][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 378.186522][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 378.186545][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 378.186624][ T38] ? __pfx___schedule+0x10/0x10 [ 378.186651][ T38] ? schedule+0x90/0x2b0 [ 378.186673][ T38] schedule+0x164/0x2b0 [ 378.186694][ T38] do_uevent+0x2c3/0x570 [ 378.186759][ T38] ? __pfx_do_uevent+0x10/0x10 [ 378.186776][ T38] ? kfree+0x1c5/0x6c0 [ 378.186855][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 378.186899][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 378.186934][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 378.186991][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 378.187030][ T38] __dlm_new_lockspace+0x1aa4/0x2060 [ 378.187050][ T38] ? __dlm_new_lockspace+0x273/0x2060 [ 378.187074][ T38] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 378.187094][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 378.187127][ T38] ? dlm_new_user_lockspace+0x3e/0x80 [ 378.187149][ T38] device_create_lockspace+0xc7/0x350 [ 378.187194][ T38] ? __pfx_device_create_lockspace+0x10/0x10 [ 378.187219][ T38] ? _copy_from_user+0x94/0xb0 [ 378.187298][ T38] device_write+0x875/0xed0 [ 378.187322][ T38] loop_rw_iter+0x42f/0x6a0 [ 378.187393][ T38] io_write+0x11e6/0x1690 [ 378.187423][ T38] ? __pfx_io_write+0x10/0x10 [ 378.187454][ T38] __io_issue_sqe+0x188/0x4d0 [ 378.187495][ T38] io_issue_sqe+0x16d/0x1020 [ 378.187528][ T38] io_wq_submit_work+0x7b4/0xca0 [ 378.187554][ T38] io_worker_handle_work+0x72e/0x10e0 [ 378.187611][ T38] ? io_wq_worker+0x3de/0xf10 [ 378.187644][ T38] io_wq_worker+0x452/0xf10 [ 378.187679][ T38] ? io_wq_worker+0x37c/0xf10 [ 378.187701][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 378.187726][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 378.187749][ T38] ? rt_spin_unlock+0x157/0x200 [ 378.187769][ T38] ? rt_spin_unlock+0x163/0x200 [ 378.187784][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 378.187807][ T38] ret_from_fork+0x514/0xb70 [ 378.187879][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 378.187904][ T38] ? __switch_to+0xc89/0x1420 [ 378.187945][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 378.187968][ T38] ret_from_fork_asm+0x1a/0x30 [ 378.188031][ T38] [ 378.188074][ T38] [ 378.188074][ T38] Showing all locks held in the system: [ 378.188103][ T38] 1 lock held by khungtaskd/38: [ 378.188130][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 378.188210][ T38] 2 locks held by getty/5348: [ 378.188276][ T38] #0: ffff8880349840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.188352][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 378.188395][ T38] 1 lock held by iou-wrk-5882/5883: [ 378.188403][ T38] #0: ffffffff99bcb458 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa3/0x2060 [ 378.188468][ T38] 1 lock held by dlm_recoverd/5885: [ 378.188476][ T38] #0: ffff88804d3d0d20 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xba/0x23e0 [ 378.188520][ T38] [ 378.188524][ T38] ============================================= [ 378.188524][ T38] [ 378.188534][ T38] NMI backtrace for cpu 1 [ 378.188552][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.188572][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.188581][ T38] Call Trace: [ 378.188588][ T38] [ 378.188594][ T38] dump_stack_lvl+0xe8/0x150 [ 378.188619][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 378.188655][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.188722][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 378.188742][ T38] sys_info+0x135/0x170 [ 378.188774][ T38] watchdog+0xfd7/0x1030 [ 378.188822][ T38] ? watchdog+0x1c7/0x1030 [ 378.188841][ T38] kthread+0x388/0x470 [ 378.188899][ T38] ? __pfx_watchdog+0x10/0x10 [ 378.188912][ T38] ? __pfx_kthread+0x10/0x10 [ 378.188937][ T38] ret_from_fork+0x514/0xb70 [ 378.188964][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 378.188989][ T38] ? __switch_to+0xc89/0x1420 [ 378.189017][ T38] ? __pfx_kthread+0x10/0x10 [ 378.189042][ T38] ret_from_fork_asm+0x1a/0x30 [ 378.189069][ T38] [ 378.189078][ T38] Sending NMI from CPU 1 to CPUs 0: [ 378.189146][ C0] NMI backtrace for cpu 0 [ 378.189161][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.189182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.189192][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 378.189265][ C0] Code: fb 6f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 89 25 00 fb f4 0c cf 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 378.189281][ C0] RSP: 0018:ffffffff8de07de0 EFLAGS: 00000246 [ 378.189325][ C0] RAX: 000000000013b0dd RBX: ffffffff819a2590 RCX: 0000000080000001 [ 378.189338][ C0] RDX: 0000000000000001 RSI: ffffffff8d88729a RDI: ffffffff8bca7880 [ 378.189351][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8633d5b R09: 1ffff110170c67ab [ 378.189365][ C0] R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 [ 378.189377][ C0] R13: 1ffffffff1bdede8 R14: 1ffffffff1bc0fc4 R15: dffffc0000000000 [ 378.189390][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 378.189404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.189416][ C0] CR2: 000055eaf1d4b000 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 378.189432][ C0] Call Trace: [ 378.189439][ C0] [ 378.189445][ C0] default_idle+0x9/0x20 [ 378.189472][ C0] default_idle_call+0x72/0xb0 [ 378.189508][ C0] do_idle+0x2e0/0x540 [ 378.189564][ C0] ? __pfx_do_idle+0x10/0x10 [ 378.189590][ C0] cpu_startup_entry+0x43/0x60 [ 378.189610][ C0] rest_init+0x2de/0x300 [ 378.189628][ C0] start_kernel+0x392/0x3e0 [ 378.189757][ C0] x86_64_start_reservations+0x24/0x30 [ 378.189801][ C0] x86_64_start_kernel+0x137/0x1b0 [ 378.189823][ C0] common_startup_64+0x13e/0x157 [ 378.189855][ C0] [ 378.190176][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 378.190188][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.190206][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.190215][ T38] Call Trace: [ 378.190221][ T38] [ 378.190227][ T38] vpanic+0x56c/0xa60 [ 378.190246][ T38] ? __pfx_vpanic+0x10/0x10 [ 378.190269][ T38] panic+0xc5/0xd0 [ 378.190284][ T38] ? __pfx_panic+0x10/0x10 [ 378.190302][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 378.190337][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 378.190359][ T38] watchdog+0x1030/0x1030 [ 378.190379][ T38] ? watchdog+0x1c7/0x1030 [ 378.190399][ T38] kthread+0x388/0x470 [ 378.190424][ T38] ? __pfx_watchdog+0x10/0x10 [ 378.190438][ T38] ? __pfx_kthread+0x10/0x10 [ 378.190463][ T38] ret_from_fork+0x514/0xb70 [ 378.190490][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 378.190518][ T38] ? __switch_to+0xc89/0x1420 [ 378.190540][ T38] ? __pfx_kthread+0x10/0x10 [ 378.190566][ T38] ret_from_fork_asm+0x1a/0x30 [ 378.190593][ T38] [ 378.191226][ T38] Kernel Offset: disabled