last executing test programs: 56.089800599s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:00.0\x00', 0xd) 55.788462851s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./rpc_pipefs\x00', &(0x7f0000002100)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r8, &(0x7f0000001500)='test\x00', 0x4) 50.728253999s ago: executing program 0 (id=7): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) read(r0, &(0x7f0000000300)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000380)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000400)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000480)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000500)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000580)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000600)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000680)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000700)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000780)=""/1, 0x1) 45.807808205s ago: executing program 3 (id=23): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) ftruncate(r3, 0xa00000) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ff) ftruncate(r4, 0xa00000) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x42, 0x1ff) ftruncate(r5, 0xa00000) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./dm_control\x00', 0x81b6, 0xaec) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dm_control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063616368655f64657600"/322) ioctl(r6, 0xc138fd09, &(0x7f0000002000)="0400000000000000000000009d010000380100000100000000000000000000000000000000000000000000000000000063616368655f64657600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000650000006361636865000000000000000000000030202f6465762f6c6f6f7030202f6465762f6c6f6f7031202f6465762f6c6f6f70322031323820312077726974656261636b2064656661756c74203000") ioctl(r6, 0xc138fd06, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063616368655f64657600"/322) 45.073563617s ago: executing program 3 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x22, 0x1, [{0x10000}]}}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x2086, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) accept(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='test\x00', 0x0) ftruncate(r2, 0x10000) sendfile(r1, r2, 0x0, 0x10000) 44.399374446s ago: executing program 3 (id=30): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e91700000000000000010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/dri/0/VGA-1/edid_override\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/dri/1/VGA-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) write(r1, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) r2 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 42.036012086s ago: executing program 4 (id=34): syz_usb_connect$cdc_ecm(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002fefefe40341278560001010203010902200001010080320904000002fefefe000705810200020007050202000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 41.679241742s ago: executing program 3 (id=36): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x100000], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 39.167396774s ago: executing program 4 (id=39): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="02000800ffffffff0100000001020407080b0d0e01020407080b0d0e", 0x1c, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="02000800ffffffff0100000001020407080b0d0e01020407080b0d0e", 0x1c, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 39.044643427s ago: executing program 4 (id=40): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408f0587630001010203010902200001010080320904000002080650000705810200020007050202000200"], 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408f0587630001010203010902200001010080320904000002080650000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r1) 38.363558475s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)="001122", 0x3) 36.546841131s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+3 -4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='vers=3,addr=127.0.0.1,port=2049,mountport=2049\x00']) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000580)='./mnt/file1\x00', &(0x7f00000005c0)='./mnt/file2\x00') 35.91303765s ago: executing program 4 (id=45): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x1a, {"488b04250000c0fef4"}}], 0x1a}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.051289896s ago: executing program 32 (id=7): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) read(r0, &(0x7f0000000300)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000380)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000400)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000480)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000500)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000580)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000600)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000680)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000006c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000700)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000740)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000780)=""/1, 0x1) 35.032419814s ago: executing program 2 (id=47): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 34.894703419s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/create_on_open\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/10, 0xa) write(0x1, &(0x7f0000000300)='\x00'/10, 0xa) 34.838994871s ago: executing program 4 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4recoverydir\x00', 0x0, 0x0) 34.738971859s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r0, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r1, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) 34.611236584s ago: executing program 4 (id=51): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) 34.53237757s ago: executing program 2 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1a, 0x301, 0x0, 0x0, "", [@typed={0x4, 0xae}]}, 0x14}], 0x1}, 0x0) 34.427296047s ago: executing program 2 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000800)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000900)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000a00)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700000000000000002c0100"/88) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 32.118358492s ago: executing program 2 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='10\n', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='10\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd/cld\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) (async) close(r7) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) close(r6) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1,port=2049'}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0x42, 0x1ff) close(r8) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/file2\x00', 0x0) 27.448114771s ago: executing program 5 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r5, &(0x7f0000001500)='test\x00', 0x4) 20.655409239s ago: executing program 33 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+3 -4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='vers=3,addr=127.0.0.1,port=2049,mountport=2049\x00']) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000580)='./mnt/file1\x00', &(0x7f00000005c0)='./mnt/file2\x00') 19.187770214s ago: executing program 34 (id=51): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) 16.853170845s ago: executing program 35 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./rpc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./rpc\x00', &(0x7f0000000740)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='10\n', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='10\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./rpc/nfsd/cld\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) (async) close(r7) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) close(r6) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{'addr=127.0.0.1,port=2049'}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0x42, 0x1ff) close(r8) linkat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/file2\x00', 0x0) 12.226540585s ago: executing program 36 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r5, &(0x7f0000001500)='test\x00', 0x4) 10.624222038s ago: executing program 1 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='pcspkr\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='acpi-thermal\n', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='pcspkr\n', 0x7) 10.387143129s ago: executing program 1 (id=75): r0 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="20811a00"/36], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 7.604955446s ago: executing program 6 (id=77): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037a6565200000000000000000000000000000000000000001b532ba900"/240, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 7.216285945s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* ./tmp 2147483647 0 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:./tmp\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 6.792544079s ago: executing program 1 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void}, 0x52) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 6.755399323s ago: executing program 6 (id=80): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="c0011e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) 5.299307347s ago: executing program 1 (id=81): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000000)="00000008000000000001002101000400") nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x4, 0x100, &(0x7f0000000200)=""/256) syz_usb_ep_write(r0, 0x82, 0x18, &(0x7f0000000100)="1200004e0000000a00000000000201000001000000000000") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x8923, &(0x7f0000000300)='wlan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan99\x00'/32) ioctl(r1, 0x8923, &(0x7f0000000400)='wlan2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan0\x00'/32) syz_80211_join_ibss(&(0x7f0000000500)='wlan0\x00', &(0x7f0000000600)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000800)={0x11, 0x300, r2}, 0x14) sendto$packet(r1, &(0x7f0000000900)="00000000000000000000000008004500001c00004000401100007f0000017f0000010035003500080000", 0x2a, 0x0, 0x0, 0x0) 4.101800948s ago: executing program 6 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='15', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='15', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000150)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 /\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9218 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000500)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') 2.255250987s ago: executing program 1 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x1}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='freeze\x00', 0x6) 1.93147155s ago: executing program 6 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)='hello', 0x5) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x1, 0x2) write$midi(r4, &(0x7f00000004c0)='hello', 0x5) r5 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x2) write$midi(r5, &(0x7f0000000540)='hello', 0x5) 119.623914ms ago: executing program 6 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) 0s ago: executing program 6 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:03.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 72.088504][ T5579] cgroup: Unknown subsys name 'net' [ 72.328256][ T5579] cgroup: Unknown subsys name 'cpuset' [ 72.404541][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.967691][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.268972][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.292601][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.307142][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.308828][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.311825][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.329118][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.337377][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.339955][ T4909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.347047][ T4909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.358991][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.362602][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.369724][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.372493][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.375915][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.399781][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.438217][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.460440][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.471899][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.473609][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.478210][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.546662][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.551123][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.553137][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.578363][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.580557][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.425114][ T59] Bluetooth: hci0: command tx timeout [ 78.584671][ T59] Bluetooth: hci1: command tx timeout [ 78.585503][ T59] Bluetooth: hci3: command tx timeout [ 78.664681][ T59] Bluetooth: hci2: command tx timeout [ 78.675834][ T59] Bluetooth: hci4: command tx timeout [ 78.860607][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.861759][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.861868][ T5591] bridge_slave_0: entered allmulticast mode [ 78.863372][ T5591] bridge_slave_0: entered promiscuous mode [ 78.893585][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.893719][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.893817][ T5602] bridge_slave_0: entered allmulticast mode [ 78.896839][ T5602] bridge_slave_0: entered promiscuous mode [ 78.900205][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.900314][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.900447][ T5594] bridge_slave_0: entered allmulticast mode [ 78.903793][ T5594] bridge_slave_0: entered promiscuous mode [ 78.936331][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.936440][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.936963][ T5591] bridge_slave_1: entered allmulticast mode [ 78.941267][ T5591] bridge_slave_1: entered promiscuous mode [ 78.961825][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.962001][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.962134][ T5602] bridge_slave_1: entered allmulticast mode [ 78.966432][ T5602] bridge_slave_1: entered promiscuous mode [ 78.968193][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.968299][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.968431][ T5594] bridge_slave_1: entered allmulticast mode [ 78.970890][ T5594] bridge_slave_1: entered promiscuous mode [ 78.972488][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.972593][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.972724][ T5592] bridge_slave_0: entered allmulticast mode [ 78.976464][ T5592] bridge_slave_0: entered promiscuous mode [ 79.008856][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.009244][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.009389][ T5595] bridge_slave_0: entered allmulticast mode [ 79.011828][ T5595] bridge_slave_0: entered promiscuous mode [ 79.059188][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.059321][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.059780][ T5592] bridge_slave_1: entered allmulticast mode [ 79.062121][ T5592] bridge_slave_1: entered promiscuous mode [ 79.085684][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.085803][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.085939][ T5595] bridge_slave_1: entered allmulticast mode [ 79.090371][ T5595] bridge_slave_1: entered promiscuous mode [ 79.149272][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.174414][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.177847][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.197258][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.218305][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.220210][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.222742][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.248812][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.279503][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.466745][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.509449][ T5591] team0: Port device team_slave_0 added [ 79.526789][ T5602] team0: Port device team_slave_0 added [ 79.528563][ T5594] team0: Port device team_slave_0 added [ 79.549123][ T5591] team0: Port device team_slave_1 added [ 79.569380][ T5602] team0: Port device team_slave_1 added [ 79.570911][ T5594] team0: Port device team_slave_1 added [ 79.572584][ T5592] team0: Port device team_slave_0 added [ 79.599766][ T5595] team0: Port device team_slave_0 added [ 79.628805][ T5592] team0: Port device team_slave_1 added [ 79.647063][ T5595] team0: Port device team_slave_1 added [ 79.685758][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.685769][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.685782][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.704281][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.704293][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.704310][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.705911][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.705924][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.705948][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.731079][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.731094][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.731117][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.755776][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.755790][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.755815][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.763031][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.763046][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.763079][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.767635][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.767650][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.767673][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.786745][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.786761][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.786784][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.815090][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.815106][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.815129][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.823552][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.823567][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.823599][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.037715][ T5602] hsr_slave_0: entered promiscuous mode [ 80.039144][ T5602] hsr_slave_1: entered promiscuous mode [ 80.052875][ T5591] hsr_slave_0: entered promiscuous mode [ 80.054679][ T5591] hsr_slave_1: entered promiscuous mode [ 80.055570][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 80.056142][ T5591] Cannot create hsr debugfs directory [ 80.106869][ T5594] hsr_slave_0: entered promiscuous mode [ 80.108137][ T5594] hsr_slave_1: entered promiscuous mode [ 80.108966][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 80.108988][ T5594] Cannot create hsr debugfs directory [ 80.122909][ T5592] hsr_slave_0: entered promiscuous mode [ 80.124223][ T5592] hsr_slave_1: entered promiscuous mode [ 80.125451][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 80.125472][ T5592] Cannot create hsr debugfs directory [ 80.165003][ T5595] hsr_slave_0: entered promiscuous mode [ 80.166282][ T5595] hsr_slave_1: entered promiscuous mode [ 80.168686][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 80.168708][ T5595] Cannot create hsr debugfs directory [ 80.504400][ T59] Bluetooth: hci0: command tx timeout [ 80.664608][ T59] Bluetooth: hci3: command tx timeout [ 80.664653][ T59] Bluetooth: hci1: command tx timeout [ 80.744102][ T5603] Bluetooth: hci2: command tx timeout [ 80.744199][ T59] Bluetooth: hci4: command tx timeout [ 81.352581][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.407570][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.429577][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.468534][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.472716][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.508113][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.533563][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.572369][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.782842][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.825824][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.830283][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.857209][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.880075][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.908435][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.930640][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.969246][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.109097][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.138630][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.143239][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.178069][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.186422][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.217130][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.237622][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.278318][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.442859][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.469387][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.476287][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.508773][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.519794][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.560101][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.586093][ T59] Bluetooth: hci0: command tx timeout [ 82.596347][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.636974][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.707160][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.744357][ T5603] Bluetooth: hci1: command tx timeout [ 82.744449][ T59] Bluetooth: hci3: command tx timeout [ 82.804939][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.824379][ T5603] Bluetooth: hci2: command tx timeout [ 82.824499][ T59] Bluetooth: hci4: command tx timeout [ 82.847845][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.853880][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.898128][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.920628][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.958533][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.962255][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.008644][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.024920][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.062157][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.075288][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.075957][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.150187][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.150274][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.207308][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.249335][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.249468][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.271432][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.305605][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.305678][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.386641][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.423014][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.423174][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.460486][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.515962][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.516507][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.707438][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.753004][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.760333][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.760523][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.803469][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.803678][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.986671][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.070198][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.070594][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.168620][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.168757][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.322167][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.664084][ T59] Bluetooth: hci0: command tx timeout [ 84.779650][ T5602] veth0_vlan: entered promiscuous mode [ 84.824435][ T5603] Bluetooth: hci1: command tx timeout [ 84.824479][ T59] Bluetooth: hci3: command tx timeout [ 84.851509][ T5602] veth1_vlan: entered promiscuous mode [ 84.907421][ T59] Bluetooth: hci4: command tx timeout [ 84.907453][ T59] Bluetooth: hci2: command tx timeout [ 85.099658][ T5602] veth0_macvtap: entered promiscuous mode [ 85.149926][ T5602] veth1_macvtap: entered promiscuous mode [ 85.218603][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.241331][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.346578][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.389583][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.483819][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.770213][ T5592] veth0_vlan: entered promiscuous mode [ 85.961184][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.026513][ T5592] veth1_vlan: entered promiscuous mode [ 86.154724][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.154748][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.240654][ T5591] veth0_vlan: entered promiscuous mode [ 86.257227][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.257246][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.309007][ T5595] veth0_vlan: entered promiscuous mode [ 86.330278][ T5591] veth1_vlan: entered promiscuous mode [ 86.358092][ T5592] veth0_macvtap: entered promiscuous mode [ 86.379905][ T5594] veth0_vlan: entered promiscuous mode [ 86.391342][ T5592] veth1_macvtap: entered promiscuous mode [ 86.393759][ T5595] veth1_vlan: entered promiscuous mode [ 86.450510][ T5594] veth1_vlan: entered promiscuous mode [ 86.519119][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.567838][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.571066][ T5591] veth0_macvtap: entered promiscuous mode [ 86.638092][ T5591] veth1_macvtap: entered promiscuous mode [ 86.660421][ T5595] veth0_macvtap: entered promiscuous mode [ 86.750210][ T5595] veth1_macvtap: entered promiscuous mode [ 86.756715][ T5594] veth0_macvtap: entered promiscuous mode [ 86.797510][ T42] cfg80211: failed to load regulatory.db [ 86.932307][ T5594] veth1_macvtap: entered promiscuous mode [ 86.953433][ T198] thunderbolt 0000:00:00.0: error -EINVAL: cannot obtain PCI resources, aborting [ 86.953869][ T5792] thunderbolt 0000:00:00.0: probe with driver thunderbolt failed with error -22 [ 87.037780][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.226138][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.268151][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.340470][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.401064][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.429751][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.678369][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.678387][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.643291][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.643309][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.337820][ T93] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338448][ T93] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338635][ T93] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338796][ T93] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.339991][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.340007][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.434659][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.436691][ T156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.563205][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.563222][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.565826][ T156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.643795][ T5796] NFSD: Unable to initialize client recovery tracking! (-110) [ 89.643815][ T5796] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 89.643826][ T5796] NFSD: starting 90-second grace period (net f00003cd) [ 89.694923][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.695852][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.780332][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.966001][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.966019][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.098769][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.098788][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.125228][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125376][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125410][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125442][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125473][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125504][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125534][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125566][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125597][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125628][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125658][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.237795][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.361632][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.361652][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.558282][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 90.558312][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.291640][ T5806] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 91.291640][ T5806] [ 91.291803][ T5806] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 91.292111][ T5806] CIFS: Attempting to mount //127.0.0.1/share [ 91.441652][ T9] gud 4-1:1.0: No supported pixel formats found [ 91.441688][ T9] gud 4-1:1.0: probe with driver gud failed with error -22 [ 92.070221][ T5812] lo speed is unknown, defaulting to 1000 [ 92.070945][ T5812] lo speed is unknown, defaulting to 1000 [ 92.113271][ T5812] lo speed is unknown, defaulting to 1000 [ 92.151476][ T5812] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.151511][ T5812] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.151549][ T5812] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.316604][ T5812] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.480268][ T5806] CIFS: VFS: cifs_mount failed w/return code = -112 [ 92.588055][ T5806] syz.1.2 (5806) used greatest stack depth: 18608 bytes left [ 92.651786][ T5812] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.218613][ T5734] usb 4-1: USB disconnect, device number 2 [ 93.541473][ T5812] lo speed is unknown, defaulting to 1000 [ 93.571946][ T5833] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 93.635634][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.638226][ T5812] lo speed is unknown, defaulting to 1000 [ 93.955410][ T5812] lo speed is unknown, defaulting to 1000 [ 94.008342][ T5812] lo speed is unknown, defaulting to 1000 [ 94.020685][ T5812] lo speed is unknown, defaulting to 1000 [ 94.155156][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.344231][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 94.355744][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.355774][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.355813][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.355834][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.410848][ T9] usb 3-1: config 0 descriptor?? [ 94.813705][ T10] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 95.276287][ T10] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 95.276406][ T10] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 95.323095][ T5691] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 95.323133][ T5691] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 95.323213][ T5691] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 95.385826][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input7 [ 95.628577][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 95.994026][ T5729] misc userio: Buffer overflowed, userio client isn't keeping up [ 96.375083][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 96.375120][ T10] usb 4-1: can't read configurations, error -71 [ 96.429767][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Mouse [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 96.571661][ T9] usb 3-1: USB disconnect, device number 2 [ 96.730099][ T5874] fido_id[5874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 96.924057][ T5690] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.114385][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 97.114417][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 97.114441][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.114464][ T5690] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 97.114501][ T5690] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 97.114524][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.363010][ T5886] loop2: detected capacity change from 0 to 20480 [ 97.377237][ T5883] loop1: detected capacity change from 0 to 20480 [ 97.379445][ T5882] loop0: detected capacity change from 0 to 20480 [ 97.445454][ T5876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.446378][ T5876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.447137][ T5876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.447871][ T5876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.564774][ T5690] cxacru 2-1:1.0: send of cm 0x90 failed (-71) [ 97.634520][ T5893] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 97.634544][ T5893] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 97.934041][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.141314][ T5899] ufs: ufs_fill_super(): bad magic number [ 98.219742][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.219772][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.219791][ T10] usb 5-1: Product: syz [ 98.219829][ T10] usb 5-1: Manufacturer: syz [ 98.219841][ T10] usb 5-1: SerialNumber: syz [ 98.602379][ T5722] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.686777][ T5699] usb 2-1: USB disconnect, device number 2 [ 98.714099][ T821] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.814051][ T5690] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.879752][ T821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.880340][ T821] usb 3-1: not running at top speed; connect to a high speed hub [ 98.884631][ T821] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 98.884656][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.884675][ T821] usb 3-1: Product: syz [ 98.884688][ T821] usb 3-1: Manufacturer: syz [ 98.884701][ T821] usb 3-1: SerialNumber: syz [ 98.972214][ T5690] usb 4-1: New USB device found, idVendor=17e9, idProduct=0000, bcdDevice= 0.00 [ 98.972243][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.424257][ T5729] misc userio: Buffer overflowed, userio client isn't keeping up [ 99.866739][ T5722] usb 5-1: Service connection timeout for: 256 [ 99.866762][ T5722] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 100.046323][ T5915] lo speed is unknown, defaulting to 1000 [ 100.047451][ T5722] ath9k_htc: Failed to initialize the device [ 100.099693][ T5722] usb 5-1: ath9k_htc: USB layer deinitialized [ 100.411272][ T5690] udl 4-1:1.0: [drm] Unrecognized vendor firmware descriptor [ 100.413582][ T5690] [drm:udl_init] *ERROR* Selecting channel failed [ 100.430530][ T821] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 100.430556][ T821] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 100.430579][ T821] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 100.502762][ T821] usb 3-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 100.502779][ T821] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 100.502790][ T821] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 100.559050][ T821] usb 3-1: 2:0: failed to get current value for ch 0 (-22) [ 100.598249][ T821] usb 3-1: 2:0: failed to get current value for ch 1 (-22) [ 100.746706][ T5715] usb 5-1: USB disconnect, device number 2 [ 100.746998][ T821] usb 3-1: 2:0: failed to get current value for ch 1 (-22) [ 101.127583][ T5690] [drm] Initialized udl 0.0.1 for 4-1:1.0 on minor 2 [ 101.127608][ T5690] [drm] Initialized udl on minor 2 [ 101.206236][ T5690] udl 4-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.264279][ T5690] udl 4-1:1.0: [drm] Cannot find any crtc or sizes [ 101.331214][ T5690] usb 4-1: USB disconnect, device number 5 [ 101.352643][ T5715] udl 4-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.362697][ T5722] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.423610][ T5715] udl 4-1:1.0: [drm] Cannot find any crtc or sizes [ 101.545063][ T5722] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 101.545091][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.545122][ T5722] usb 5-1: Product: syz [ 101.545134][ T5722] usb 5-1: Manufacturer: syz [ 101.545147][ T5722] usb 5-1: SerialNumber: syz [ 101.617362][ T821] usb 3-1: USB disconnect, device number 3 [ 101.934611][ T5722] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 102.531297][ T5690] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.776859][ T5690] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 102.776889][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.776908][ T5690] usb 4-1: Product: syz [ 102.776922][ T5690] usb 4-1: Manufacturer: syz [ 102.776935][ T5690] usb 4-1: SerialNumber: syz [ 102.828117][ T5729] misc userio: Buffer overflowed, userio client isn't keeping up [ 103.040538][ T5722] usb 5-1: USB disconnect, device number 3 [ 103.674141][ T821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.835677][ T821] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 103.835766][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.039102][ T821] usb 3-1: can't set config #1, error -71 [ 104.051630][ T821] usb 3-1: USB disconnect, device number 4 [ 104.094335][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.309135][ T42] usb 5-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 104.309165][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.309237][ T42] usb 5-1: Product: syz [ 104.309248][ T42] usb 5-1: Manufacturer: syz [ 104.309255][ T42] usb 5-1: SerialNumber: syz [ 104.472511][ T42] usb-storage 5-1:1.0: USB Mass Storage device detected [ 104.560785][ T42] scsi host1: usb-storage 5-1:1.0 [ 104.672515][ T36] audit: type=1800 audit(1785858776.385:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="idProduct" dev="configfs" ino=8043 res=0 errno=0 [ 104.672559][ T36] audit: type=1800 audit(1785858776.385:3): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="idVendor" dev="configfs" ino=9125 res=0 errno=0 [ 104.684050][ T821] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 104.687023][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.688182][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.856228][ T821] usb 3-1: not running at top speed; connect to a high speed hub [ 104.892845][ T821] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 104.892873][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.892892][ T821] usb 3-1: Product: syz [ 104.892905][ T821] usb 3-1: Manufacturer: syz [ 104.892919][ T821] usb 3-1: SerialNumber: syz [ 104.919142][ T5603] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 105.007795][ T36] audit: type=1800 audit(1785858776.725:4): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="UDC" dev="configfs" ino=8049 res=0 errno=0 [ 105.206552][ T42] usb 5-1: USB disconnect, device number 4 [ 105.438072][ T5944] Config c/1 of g1 needs at least one function. [ 105.484447][ T5944] udc dummy_udc.0: failed to start g1: -22 [ 105.484476][ T5944] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 105.639261][ T5944] UDC core: g1: couldn't find an available UDC or it's busy [ 105.660389][ T821] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 105.779006][ T5690] usb 4-1: USB disconnect, device number 6 [ 106.235084][ T5729] misc userio: Buffer overflowed, userio client isn't keeping up [ 107.152884][ T198] usb 3-1: USB disconnect, device number 5 [ 107.288355][ T5959] svc: failed to register lockdv1 RPC service (errno 512). [ 107.288809][ T5959] lockd_up: makesock failed, error=-512 [ 107.945708][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.973645][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.980611][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.000747][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.003180][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.551789][ T5970] lo speed is unknown, defaulting to 1000 [ 108.654014][ T198] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.835013][ T198] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 108.835042][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.835061][ T198] usb 3-1: Product: syz [ 108.835075][ T198] usb 3-1: Manufacturer: syz [ 108.880456][ T198] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 109.187768][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.189095][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.189987][ T5970] bridge_slave_0: entered allmulticast mode [ 109.214346][ T5970] bridge_slave_0: entered promiscuous mode [ 109.234917][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.235012][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.235223][ T5970] bridge_slave_1: entered allmulticast mode [ 109.245982][ T5970] bridge_slave_1: entered promiscuous mode [ 109.339893][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.343539][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.386065][ T5970] team0: Port device team_slave_0 added [ 109.390723][ T5970] team0: Port device team_slave_1 added [ 109.452703][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.452720][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.452752][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.460411][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.460426][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.460450][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.670923][ T5970] hsr_slave_0: entered promiscuous mode [ 109.675677][ T5970] hsr_slave_1: entered promiscuous mode [ 109.676948][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 109.676970][ T5970] Cannot create hsr debugfs directory [ 110.107473][ T5603] Bluetooth: hci5: command tx timeout [ 110.139442][ T5593] usb 3-1: USB disconnect, device number 6 [ 110.484120][ T5729] misc userio: Buffer overflowed, userio client isn't keeping up [ 111.043666][ T5729] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 111.119876][ T5970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.158549][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.159562][ T5970] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.245176][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.251465][ T5970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.252781][ T6010] infiniband syz2: set active [ 111.252792][ T6010] infiniband syz2: added syz_tun [ 111.310796][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.329128][ T5970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.404674][ T5729] psmouse serio2: Failed to enable mouse on [ 111.404800][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.422588][ T6010] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 111.422625][ T6010] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 111.422663][ T6010] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 111.658130][ T6010] RDS/IB: syz2: added [ 111.673290][ T6010] smc: adding ib device syz2 with port count 1 [ 111.675508][ T6010] smc: ib device syz2 port 1 has no pnetid [ 111.819312][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.870957][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.891285][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.891461][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.919976][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.920091][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.011061][ T5970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.011084][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.184158][ T5603] Bluetooth: hci5: command tx timeout [ 112.727069][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.219050][ T5970] veth0_vlan: entered promiscuous mode [ 113.239393][ T5970] veth1_vlan: entered promiscuous mode [ 113.295147][ T5970] veth0_macvtap: entered promiscuous mode [ 113.325333][ T5970] veth1_macvtap: entered promiscuous mode [ 113.366784][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.403456][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.264170][ T5603] Bluetooth: hci5: command tx timeout [ 114.451010][ T1005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.527778][ T1176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.702193][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.702224][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.880296][ T1005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.999839][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.999858][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.043653][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.048758][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.048800][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.257980][ T1005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.598246][ T1005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.224416][ T1005] bridge_slave_1: left allmulticast mode [ 116.224651][ T1005] bridge_slave_1: left promiscuous mode [ 116.253858][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.344158][ T5603] Bluetooth: hci5: command tx timeout [ 116.455067][ T1005] bridge_slave_0: left allmulticast mode [ 116.455090][ T1005] bridge_slave_0: left promiscuous mode [ 116.455290][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.295353][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.374627][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.413796][ T1005] bond0 (unregistering): Released all slaves [ 117.468753][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 118.116307][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.699346][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.312725][ T1005] hsr_slave_0: left promiscuous mode [ 119.345694][ T1005] hsr_slave_1: left promiscuous mode [ 119.347013][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.347090][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.407970][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.407997][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.481456][ T1005] veth1_macvtap: left promiscuous mode [ 119.481626][ T1005] veth0_macvtap: left promiscuous mode [ 119.481794][ T1005] veth1_vlan: left promiscuous mode [ 119.482678][ T1005] veth0_vlan: left promiscuous mode [ 120.204712][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 120.244744][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 120.426015][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 122.209449][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.241891][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.243531][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.261523][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.262164][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.579438][ T6125] lo speed is unknown, defaulting to 1000 [ 122.998779][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.998899][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.999005][ T6125] bridge_slave_0: entered allmulticast mode [ 123.000361][ T6125] bridge_slave_0: entered promiscuous mode [ 123.002402][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.002530][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.002827][ T6125] bridge_slave_1: entered allmulticast mode [ 123.005441][ T6125] bridge_slave_1: entered promiscuous mode [ 123.066578][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.069898][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.106704][ T6125] team0: Port device team_slave_0 added [ 123.108959][ T6125] team0: Port device team_slave_1 added [ 123.140957][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.140972][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.140985][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.142226][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.142237][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.142254][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.239290][ T6125] hsr_slave_0: entered promiscuous mode [ 123.240084][ T6125] hsr_slave_1: entered promiscuous mode [ 123.489692][ T6125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.507703][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.508550][ T6125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.577859][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.580813][ T6125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.685294][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.686738][ T6125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.768702][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.769028][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.783802][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.813716][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.818378][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.820180][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.119852][ T6155] Bluetooth: MGMT ver 1.23 [ 124.345624][ T5603] Bluetooth: hci4: command tx timeout [ 124.514935][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.542646][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.552618][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.552804][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.653122][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.653361][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.746801][ T6144] lo speed is unknown, defaulting to 1000 [ 124.980627][ T6167] netlink: 'syz.1.65': attribute type 5 has an invalid length. [ 125.577474][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.944036][ T5603] Bluetooth: hci6: command tx timeout [ 125.962061][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.962174][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.962389][ T6144] bridge_slave_0: entered allmulticast mode [ 125.993835][ T6144] bridge_slave_0: entered promiscuous mode [ 126.050716][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.050850][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.051400][ T6144] bridge_slave_1: entered allmulticast mode [ 126.062362][ T6144] bridge_slave_1: entered promiscuous mode [ 126.153285][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.200738][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.203184][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.226497][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.229774][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.303334][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.367341][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.424060][ T59] Bluetooth: hci4: command tx timeout [ 126.455673][ T6144] team0: Port device team_slave_0 added [ 126.502165][ T6144] team0: Port device team_slave_1 added [ 126.560114][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.560129][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.560152][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.746890][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.746905][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.746919][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.870873][ T6144] hsr_slave_0: entered promiscuous mode [ 126.872679][ T6144] hsr_slave_1: entered promiscuous mode [ 126.873740][ T6144] debugfs: 'hsr0' already exists in 'hsr' [ 126.873773][ T6144] Cannot create hsr debugfs directory [ 126.998470][ T6125] veth0_vlan: entered promiscuous mode [ 127.079721][ T6197] lo speed is unknown, defaulting to 1000 [ 127.130383][ T6125] veth1_vlan: entered promiscuous mode [ 127.402107][ T6125] veth0_macvtap: entered promiscuous mode [ 127.423041][ T6125] veth1_macvtap: entered promiscuous mode [ 127.549260][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.603306][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.705121][ T6144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 127.746315][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.751905][ T6144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 127.790677][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.836839][ T6144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 127.856671][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.858809][ T6144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 127.907564][ T6144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.037254][ T59] Bluetooth: hci6: command tx timeout [ 128.420479][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.420498][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.434027][ T59] Bluetooth: hci7: command tx timeout [ 128.504054][ T59] Bluetooth: hci4: command tx timeout [ 128.556680][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.556698][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.712298][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.712409][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.712518][ T6197] bridge_slave_0: entered allmulticast mode [ 128.714804][ T6197] bridge_slave_0: entered promiscuous mode [ 128.753997][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.754110][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.754327][ T6197] bridge_slave_1: entered allmulticast mode [ 128.778032][ T6197] bridge_slave_1: entered promiscuous mode [ 128.983611][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.017721][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.155960][ T6197] team0: Port device team_slave_0 added [ 129.172352][ T6197] team0: Port device team_slave_1 added [ 129.219261][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.219273][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.219286][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.246096][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.246246][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.246272][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.267838][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.353123][ T6197] hsr_slave_0: entered promiscuous mode [ 129.355902][ T6197] hsr_slave_1: entered promiscuous mode [ 129.356837][ T6197] debugfs: 'hsr0' already exists in 'hsr' [ 129.356857][ T6197] Cannot create hsr debugfs directory [ 129.448808][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.528716][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.528836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.595354][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.599703][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.696318][ T5959] svc: failed to register nfsdv3 RPC service (errno 512). [ 129.696512][ T5959] svc: failed to register nfsaclv3 RPC service (errno 512). [ 129.696526][ T5959] failed to unregister tcp with rpcbind [ 129.696729][ T5959] svc: failed to register nfsdv3 RPC service (errno 97). [ 129.696745][ T5959] svc: failed to register nfsaclv3 RPC service (errno 97). [ 129.696756][ T5959] failed to unregister tcp with rpcbind [ 129.872097][ T4857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.016478][ T4857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.104808][ T59] Bluetooth: hci6: command tx timeout [ 130.204182][ T1176] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.240112][ T4857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.419810][ T6197] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.500445][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.503660][ T6197] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.505743][ T59] Bluetooth: hci7: command tx timeout [ 130.579606][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.584349][ T59] Bluetooth: hci4: command tx timeout [ 130.611486][ T6197] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.663434][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.727735][ T6197] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.778333][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 130.823822][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 130.844905][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 130.851990][ T6197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.852462][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 130.859343][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 131.274704][ T6018] NFSD: Unable to initialize client recovery tracking! (-110) [ 131.274723][ T6018] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 131.274734][ T6018] NFSD: starting 10-second grace period (net f0000445) [ 131.696026][ T6254] siw: device registration error -23 [ 132.186100][ T59] Bluetooth: hci6: command tx timeout [ 132.280007][ T6266] jffs2: notice: (6266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.584527][ T59] Bluetooth: hci7: command tx timeout [ 132.763262][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763360][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.984454][ T59] Bluetooth: hci8: command tx timeout [ 133.152088][ T1176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.354297][ T6052] svc: failed to register nfsdv3 RPC service (errno 111). [ 133.356139][ T6052] svc: failed to register nfsaclv3 RPC service (errno 111). [ 133.356155][ T6052] failed to unregister tcp with rpcbind [ 133.357294][ T6052] svc: failed to register nfsdv3 RPC service (errno 97). [ 133.357311][ T6052] svc: failed to register nfsaclv3 RPC service (errno 97). [ 133.357322][ T6052] failed to unregister tcp with rpcbind [ 133.778503][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.76'. [ 134.312712][ T1176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.447697][ T6233] lo speed is unknown, defaulting to 1000 [ 134.666695][ T59] Bluetooth: hci7: command tx timeout [ 135.068747][ T59] Bluetooth: hci8: command tx timeout [ 135.222607][ T6307] loop1: detected capacity change from 0 to 2048 [ 135.832215][ T1176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.861603][ T6308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.923542][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.430850][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.444081][ T5715] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 136.448222][ T1176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.506702][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.559209][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.597947][ T5715] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 136.597977][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.023198][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.144068][ T59] Bluetooth: hci8: command tx timeout [ 137.263176][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.659091][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.663401][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.762520][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.762613][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.846428][ T6144] veth0_vlan: entered promiscuous mode [ 137.984353][ T1176] bridge_slave_1: left allmulticast mode [ 137.984380][ T1176] bridge_slave_1: left promiscuous mode [ 137.986393][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.095943][ T1176] bridge_slave_0: left allmulticast mode [ 138.095975][ T1176] bridge_slave_0: left promiscuous mode [ 138.096137][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.115218][ T10] usb 7-1: USB disconnect, device number 2 [ 138.846049][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.906410][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.946050][ T1176] bond0 (unregistering): Released all slaves [ 139.143811][ T6144] veth1_vlan: entered promiscuous mode [ 139.215128][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.215308][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.215473][ T6233] bridge_slave_0: entered allmulticast mode [ 139.217028][ T6233] bridge_slave_0: entered promiscuous mode [ 139.224580][ T59] Bluetooth: hci8: command tx timeout [ 139.262366][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.262450][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.262615][ T6233] bridge_slave_1: entered allmulticast mode [ 139.266273][ T6233] bridge_slave_1: entered promiscuous mode [ 139.378792][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.397196][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.705758][ T6233] team0: Port device team_slave_0 added [ 139.801101][ T6233] team0: Port device team_slave_1 added [ 139.906901][ T6360] NFSD: Unable to initialize client recovery tracking! (-110) [ 139.906922][ T6360] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 139.906933][ T6360] NFSD: starting 15-second grace period (net f00003fb) [ 140.367394][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.367411][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.367435][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.506210][ T6144] veth0_macvtap: entered promiscuous mode [ 140.510865][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.510879][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.510903][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.613029][ T6386] PM: suspend entry (s2idle) [ 140.686920][ T6144] veth1_macvtap: entered promiscuous mode [ 140.875618][ T6233] hsr_slave_0: entered promiscuous mode [ 140.908575][ T6233] hsr_slave_1: entered promiscuous mode [ 140.913701][ T6233] debugfs: 'hsr0' already exists in 'hsr' [ 140.913726][ T6233] Cannot create hsr debugfs directory [ 141.047013][ T36] audit: type=1800 audit(1785858812.775:5): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.84" name="idVendor" dev="configfs" ino=13331 res=0 errno=0 [ 141.048373][ T36] audit: type=1800 audit(1785858812.775:6): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.84" name="idProduct" dev="configfs" ino=13332 res=0 errno=0 [ 141.072372][ T36] audit: type=1800 audit(1785858812.795:7): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.84" name="UDC" dev="configfs" ino=12466 res=0 errno=0 [ 141.140471][ T4857] Filesystems sync: 0.518 seconds [ 141.485130][ T6386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.485265][ T6386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.666449][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.093500][ T6386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.300284][ T6386] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 142.300364][ T6386] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 142.338638][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.440776][ T6386] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 142.524377][ T1176] hsr_slave_0: left promiscuous mode [ 142.555801][ T6386] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 142.555992][ T6386] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 142.582786][ T1176] hsr_slave_1: left promiscuous mode [ 142.589477][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.589501][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.614944][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.614969][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.651038][ T6386] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 142.736311][ T6386] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 142.747255][ T6386] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 142.765771][ T1176] veth1_macvtap: left promiscuous mode [ 142.765879][ T1176] veth0_macvtap: left promiscuous mode [ 142.766126][ T1176] veth1_vlan: left promiscuous mode [ 142.769498][ T1176] veth0_vlan: left promiscuous mode [ 142.827158][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.871524][ T6386] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 143.004056][ T821] usb 1-1: Dual-Role OTG device on HNP port [ 143.004389][ T821] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02 [ 143.004411][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.465434][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.514698][ T156] device offline error, dev sda, sector 754870 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.514734][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94358) [ 143.518787][ T156] Buffer I/O error on device sda1, logical block 94320 [ 143.559582][ T156] device offline error, dev sda, sector 755934 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.559615][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94491) [ 143.559660][ T156] Buffer I/O error on device sda1, logical block 94453 [ 143.598155][ T156] device offline error, dev sda, sector 794934 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.598187][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2035 starting block 99366) [ 143.598249][ T156] Buffer I/O error on device sda1, logical block 99328 [ 143.598350][ T156] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.598464][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2030 starting block 100390) [ 143.598491][ T156] Buffer I/O error on device sda1, logical block 100352 [ 143.598582][ T156] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.598603][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2030 starting block 101413) [ 143.598642][ T156] Buffer I/O error on device sda1, logical block 101375 [ 143.598735][ T156] device offline error, dev sda, sector 835894 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.598757][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2036 starting block 104486) [ 143.598781][ T156] Buffer I/O error on device sda1, logical block 104448 [ 143.598863][ T156] device offline error, dev sda, sector 844078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 143.598884][ T156] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2036 starting block 105509) [ 143.598998][ T156] Buffer I/O error on device sda1, logical block 105471 [ 143.908283][ T4922] device offline error, dev sda, sector 1050846 op 0x1:(WRITE) flags 0x809800 phys_seg 3 prio class 2 [ 143.931531][ T4922] Aborting journal on device sda1-8. [ 143.933412][ T97] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x809800 phys_seg 1 prio class 2 [ 143.933545][ T97] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x809800 phys_seg 1 prio class 2 [ 143.933809][ T97] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 143.985207][ T4922] JBD2: I/O error when updating journal superblock for sda1-8. [ 144.057643][ T13] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2036 starting block 104486) [ 144.057688][ T13] Buffer I/O error on device sda1, logical block 104448 [ 144.057791][ T13] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2036 starting block 105509) [ 144.057832][ T13] Buffer I/O error on device sda1, logical block 105471 [ 144.059527][ T5579] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm syz-executor: Detected aborted journal [ 144.223466][ T97] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 144.256576][ T5579] EXT4-fs (sda1): I/O error while writing superblock [ 144.256594][ T5579] EXT4-fs (sda1): Remounting filesystem read-only [ 144.344574][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 144.591045][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 144.754030][ T59] Bluetooth: hci8: command 0x0c1a tx timeout [ 144.928006][ T6414] EXT4-fs (sda1): shut down requested (2) [ 145.545520][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.956912][ T6414] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 146.022604][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 146.118695][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 146.424092][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 146.592136][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 146.600131][ T10] lo speed is unknown, defaulting to 1000 [ 146.600171][ T10] syz0: Port: 1 Link DOWN [ 146.623182][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.664582][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 146.827100][ T59] Bluetooth: hci8: command 0x0c1a tx timeout [ 146.859402][ T13] smbdirect: ib_dev[syz0] removed [ 147.549299][ T5691] BUG: unable to handle page fault for address: 000000000001c000 [ 147.549311][ T5691] #PF: supervisor read access in kernel mode [ 147.549317][ T5691] #PF: error_code(0x0000) - not-present page [ 147.549323][ T5691] PGD 0 P4D 0 [ 147.549355][ T5691] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 147.549385][ T5691] CPU: 0 UID: 0 PID: 5691 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.549406][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.549417][ T5691] Workqueue: events azx_probe_work [ 147.549447][ T5691] RIP: 0010:azx_probe_work+0xa6e/0x2820 [ 147.549458][ T5691] Code: 44 89 38 48 8b 7c 24 10 e8 2f 87 fd fb 49 bf 00 00 00 00 00 fc ff df 42 80 3c 3b 00 74 08 4c 89 e7 e8 36 45 23 f9 49 8b 04 24 <66> 44 8b 20 0f 1f 44 00 00 e8 94 d1 b9 f8 48 8b 84 24 b8 00 00 00 [ 147.549467][ T5691] RSP: 0018:ffffc90004c0f960 EFLAGS: 00010246 [ 147.549474][ T5691] RAX: 000000000001c000 RBX: 1ffff110071ea00b RCX: 0000000000000000 [ 147.549481][ T5691] RDX: 0000000000000006 RSI: ffffffff8d88729a RDI: 00000000ffffffff [ 147.549488][ T5691] RBP: ffffc90004c0faf0 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 147.549496][ T5691] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffff888038f50058 [ 147.549508][ T5691] R13: dffffc0000000000 R14: ffff888038f507f8 R15: dffffc0000000000 [ 147.549521][ T5691] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 147.549536][ T5691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.549548][ T5691] CR2: 000000000001c000 CR3: 000000005eff4000 CR4: 00000000003526f0 [ 147.549564][ T5691] Call Trace: [ 147.549571][ T5691] [ 147.549587][ T5691] ? __pfx_azx_probe_work+0x10/0x10 [ 147.549604][ T5691] ? rcu_is_watching+0x15/0xb0 [ 147.549617][ T5691] ? process_scheduled_works+0xa20/0x14e0 [ 147.549629][ T5691] process_scheduled_works+0xa8e/0x14e0 [ 147.549645][ T5691] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.549660][ T5691] ? assign_work+0x3cf/0x5d0 [ 147.549680][ T5691] worker_thread+0xa47/0xfb0 [ 147.549707][ T5691] ? __kthread_parkme+0x71/0x1f0 [ 147.549732][ T5691] kthread+0x388/0x470 [ 147.549755][ T5691] ? __pfx_worker_thread+0x10/0x10 [ 147.549767][ T5691] ? __pfx_kthread+0x10/0x10 [ 147.549780][ T5691] ret_from_fork+0x514/0xb70 [ 147.549795][ T5691] ? __pfx_ret_from_fork+0x10/0x10 [ 147.549808][ T5691] ? __switch_to+0xc89/0x1420 [ 147.549827][ T5691] ? __pfx_kthread+0x10/0x10 [ 147.549850][ T5691] ret_from_fork_asm+0x1a/0x30 [ 147.549874][ T5691] [ 147.549880][ T5691] Modules linked in: [ 147.549899][ T5691] CR2: 000000000001c000 [ 147.549911][ T5691] ---[ end trace 0000000000000000 ]--- [ 147.549923][ T5691] RIP: 0010:azx_probe_work+0xa6e/0x2820 [ 147.549934][ T5691] Code: 44 89 38 48 8b 7c 24 10 e8 2f 87 fd fb 49 bf 00 00 00 00 00 fc ff df 42 80 3c 3b 00 74 08 4c 89 e7 e8 36 45 23 f9 49 8b 04 24 <66> 44 8b 20 0f 1f 44 00 00 e8 94 d1 b9 f8 48 8b 84 24 b8 00 00 00 [ 147.549941][ T5691] RSP: 0018:ffffc90004c0f960 EFLAGS: 00010246 [ 147.549949][ T5691] RAX: 000000000001c000 RBX: 1ffff110071ea00b RCX: 0000000000000000 [ 147.549955][ T5691] RDX: 0000000000000006 RSI: ffffffff8d88729a RDI: 00000000ffffffff [ 147.549961][ T5691] RBP: ffffc90004c0faf0 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 147.549968][ T5691] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffff888038f50058 [ 147.549975][ T5691] R13: dffffc0000000000 R14: ffff888038f507f8 R15: dffffc0000000000 [ 147.549987][ T5691] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 147.550001][ T5691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.550013][ T5691] CR2: 000000000001c000 CR3: 000000005eff4000 CR4: 00000000003526f0 [ 147.550031][ T5691] Kernel panic - not syncing: Fatal exception [ 147.550173][ T5691] Kernel Offset: disabled