last executing test programs: 1m1.295469592s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem\n', 0x4) 1m1.201953079s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='/dev/ram0,4096\x00', 0xf) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000400), 0x1, 0x2) ioctl(r1, 0x40084d02, &(0x7f0000000010)="0000100000000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff0100"/24) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000200)="ffffffff0100000000002000000000000300040000000000766f6c3000"/128) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='ubi0:vol0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x410002, 0x0) 1m0.649355039s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/dlm/cluster/spaces/dlm1/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/dlm/cluster/spaces/dlm1/nodes/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/dlm-monitor\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='0', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000ac0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/dlm_dlm1\x00', 0x2, 0x0) 1m0.582585056s ago: executing program 3 (id=9): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x17, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290815002501950875018102c0"}}, 0x111c) nanosleep(&(0x7f0000000200)={0x1}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x3, '\x000\x00'}}, 0x111c) 1m0.196326476s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='writemostly\n', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_size\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1024\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='readonly\n', 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='1024\n', 0x5) 59.777517419s ago: executing program 1 (id=12): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x7, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010900a101c0"}}, 0x11f) syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x7, ' \x00\x00\x00\x00\x00\x00'}}, 0xd) 53.188042882s ago: executing program 4 (id=13): clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b8b87c0}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x3b994360}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) 53.089324361s ago: executing program 0 (id=14): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0x1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) write(r2, &(0x7f0000000140)="01ffec80080000002000000000000000", 0x10) 53.063708382s ago: executing program 2 (id=15): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x7f000001, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 53.01940705s ago: executing program 0 (id=16): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x6) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)='\x00', 0x1}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) write(r1, &(0x7f0000000600)="0100ec98080000001000000000000000", 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 52.915683808s ago: executing program 1 (id=17): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280002010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000003000)={0x1, 0x1f400000}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000004000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000005000)={0xb, @sdr}) 52.644504763s ago: executing program 0 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001001002000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002300)="00000050fe534d42400001000000000003000100010000000000000003000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 52.493734724s ago: executing program 5 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='/dev/ram0,4096\x00', 0xf) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000400), 0x1, 0x2) ioctl(r1, 0x40084d02, &(0x7f0000000010)="0000100000000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff0100"/24) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000200)="ffffffff0100000000002000000000000300040000000000766f6c3000"/128) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='ubi0:vol0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x410002, 0x0) 52.076059363s ago: executing program 5 (id=21): syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405e04ae020001010203010902190001010080fa0904000001ffffff0007058101000201"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x800) r1 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x800) r2 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x800) read(r0, &(0x7f0000000300), 0x100) read(r1, &(0x7f0000000300), 0x100) read(r2, &(0x7f0000000300), 0x100) close(r0) close(r1) close(r2) 52.01901542s ago: executing program 4 (id=22): mmap(&(0x7f0000000000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000033000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000035000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000037000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000003b000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x20000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x4000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x100000)=nil, 0x100000) 51.674432548s ago: executing program 0 (id=23): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0810010001000000010902200001010080fa0904000002ff0000000705830200020007050402000200"], 0x0) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) (async) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000200)='AAAAAAAAAAAAAAAA') (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 49.744059105s ago: executing program 5 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x777) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, &(0x7f0000000200)={[{@compress_force_algo={'compress-force', 0x3d, 'zstd'}, 0x0}]}, 0x0, 0x0, 0x0) 49.644525639s ago: executing program 5 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,data_digest\x00\x00', 0x35) (async) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000100)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000080)={0x0, 0x1dcd6500}, 0x0) 49.641018983s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n\x00', 0x2) close(r5) nanosleep(&(0x7f0000000540)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000480)='./mnt/file\x00', &(0x7f00000004c0)=@random={'system.', 'nfs4_acl\x00'}, &(0x7f0000000500)='\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06OWNER@\x00\x00', 0x1c, 0x0) 48.940434512s ago: executing program 4 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000010)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000010)='./sys\x00', &(0x7f0000000020)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='tcp 2049\n', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00']) (async) 48.687186984s ago: executing program 5 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410000000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002300)="00000050fe534d42400001000000000003000100010000000000000003000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) close(r1) accept(r0, 0x0, 0x0) 48.332125045s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) 48.296229151s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem\n', 0x4) 47.947243516s ago: executing program 2 (id=31): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x6) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)='\x00', 0x1}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) write(r1, &(0x7f0000000600)="0100ec98080000001000000000000000", 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 47.846232182s ago: executing program 1 (id=32): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0x1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) write(r2, &(0x7f0000000140)="01ffec80080000002000000000000000", 0x10) 47.741607926s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='/dev/ram0,4096\x00', 0xf) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000400), 0x1, 0x2) ioctl(r1, 0x40084d02, &(0x7f0000000010)="0000100000000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff0100"/24) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000200)="ffffffff0100000000002000000000000300040000000000766f6c3000"/128) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='ubi0:vol0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x410002, 0x0) 47.741517636s ago: executing program 5 (id=34): clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b8b87c0}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x3b994360}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) 47.716808749s ago: executing program 3 (id=35): syz_read_part_table(0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='image\x00', 0x42, 0x1ed) write(r0, &(0x7f0000001000), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./btrfs\x00', 0x1ed) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./btrfs\x00', &(0x7f0000000400)='btrfs\x00', 0x0, &(0x7f0000000500)='compress-force=zstd:6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./f2fs\x00', 0x1ed) mount(&(0x7f0000000b00)=@nullb, &(0x7f0000000700)='./f2fs\x00', &(0x7f0000000800)='f2fs\x00', 0x0, &(0x7f0000000900)='compress_algorithm=zstd:6\x00') 47.499968271s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/1/ns/net\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x28}}, 0x0) 47.471543223s ago: executing program 3 (id=37): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) 26.324575195s ago: executing program 32 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem\n', 0x4) 26.183137825s ago: executing program 33 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='/dev/ram0,4096\x00', 0xf) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000400), 0x1, 0x2) ioctl(r1, 0x40084d02, &(0x7f0000000010)="0000100000000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000100)="ffffffff0100"/24) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000200)="ffffffff0100000000002000000000000300040000000000766f6c3000"/128) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='ubi0:vol0\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, &(0x7f00000005c0)) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x410002, 0x0) 26.061998304s ago: executing program 34 (id=31): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x6) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)='\x00', 0x1}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) write(r1, &(0x7f0000000600)="0100ec98080000001000000000000000", 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 25.940394784s ago: executing program 35 (id=37): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x7, 0x0, 0x0, 0x4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="aabbccddeeff"}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}]}, 0x30}}, 0x0) 25.812844468s ago: executing program 36 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000010)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000010)='./sys\x00', &(0x7f0000000020)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='tcp 2049\n', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00']) (async) 25.660400876s ago: executing program 37 (id=34): clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b8b87c0}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x10}) clock_nanosleep(0x0, 0x1, &(0x7f0000000200)={0x6553f101, 0x3b994360}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x1, 0x0, 0x10}) clock_adjtime(0x0, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x2, 0x0, 0x10}) 7.040537153s ago: executing program 6 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='raid1\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000440)='readonly\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='frozen\x00', 0x7) 6.623749131s ago: executing program 6 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/dlm/cluster/spaces/dlm1/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/dlm/cluster/spaces/dlm1/nodes/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/dlm-monitor\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='0', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000ac0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/dlm_dlm1\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)="0600000000000000020000000101000003040000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00000000000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) write(r7, &(0x7f0000000300)="0600000000000000020000000201000000000000000000000100000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/121, 0x78) 5.627626526s ago: executing program 6 (id=45): openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/dlm_dlm1\x00', 0x2, 0x0) 5.499132891s ago: executing program 6 (id=46): mmap(&(0x7f0000000000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000023000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000027000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000002f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000033000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000035000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000037000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000003b000/0x1000)=nil, 0x1000, 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x4000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x100000)=nil, 0x100000) 4.711643191s ago: executing program 8 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='dummy_udc.0\n', 0xc) 4.576890452s ago: executing program 7 (id=39): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000200)="80000000000000000000") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000140)) syz_usb_ep_write(r0, 0x81, 0x17, &(0x7f0000000220)="830d00000000000000000000ff06fad50333010107ec00") 4.34090604s ago: executing program 8 (id=47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410000000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002300)="00000050fe534d42400001000000000003000100010000000000000003000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) close(r1) 4.057871959s ago: executing program 1 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000002400050600"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000c00010063616b655f6d7100"], 0x30}}, 0x0) 3.162902224s ago: executing program 8 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000400)='1\n', 0x2) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 3.002530843s ago: executing program 8 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='writemostly\n', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_size\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1024\n', 0x5) 2.649724029s ago: executing program 8 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000600)={0x0, 0x2000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000400)="ffffffff0100"/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000c10)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000800)="ffffffff01000000002d3101000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='ubi0:vol0\x00', &(0x7f0000000900)='./mnt\x00', &(0x7f0000000b00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x410000, 0x0) 2.411739473s ago: executing program 7 (id=51): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b58, @loopback}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "1234567800000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000e00)='./file0\x00', 0x1ff, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/256, 0x100}], 0x1, &(0x7f0000000600)=""/256, 0x100}, 0x0, 0x0, 0x1}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="000000010000000200000002000008000000000100000000000000000000000000000000000001ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fffffff00"/120, 0x78}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "1234567800000000"}], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000d00), &(0x7f0000000e00)='./file0\x00', &(0x7f0000000f00), 0x0, &(0x7f0000001100)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/file\x00', 0x40, 0x1ff) 2.092445238s ago: executing program 7 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/dlm/cluster/spaces/dlm1/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/dlm/cluster/spaces/dlm1/nodes/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/dlm-monitor\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000ac0)='1', 0x1) 1.620708176s ago: executing program 8 (id=53): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040010001000000000000010902220001010000000904000001030000000921000100012208000705810308000a"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022080000000600ff0901a101c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 1.295767789s ago: executing program 6 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/dlm/cluster/spaces/dlm1/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/dlm/cluster/spaces/dlm1/nodes/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/dlm-monitor\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/dlm-control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='0', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000ac0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/dlm_dlm1\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)="0600000000000000020000000101000003040000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00000000000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) 1.012890723s ago: executing program 7 (id=55): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) write(r2, &(0x7f0000000400)="01008000800000000000000200004000"/128, 0x80) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 414.858322ms ago: executing program 6 (id=56): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 7 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 71.205849][ T5598] cgroup: Unknown subsys name 'net' [ 71.306151][ T5598] cgroup: Unknown subsys name 'cpuset' [ 71.314516][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.720952][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.383698][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.393964][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.404337][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.404792][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.406000][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.406433][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.407229][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.414603][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.415678][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.424520][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.425081][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.425755][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.435950][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.436831][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.437904][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.439428][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.440724][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.441051][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.442313][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.442983][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.443947][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.444833][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.445471][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.448727][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.449270][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.450320][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.456544][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.457439][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.459287][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.465423][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.353669][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.353900][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.354656][ T5612] bridge_slave_0: entered allmulticast mode [ 77.357838][ T5612] bridge_slave_0: entered promiscuous mode [ 77.364889][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.364998][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.365130][ T5612] bridge_slave_1: entered allmulticast mode [ 77.367243][ T5612] bridge_slave_1: entered promiscuous mode [ 77.509274][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.518584][ T5626] Bluetooth: hci5: command tx timeout [ 77.518702][ T5626] Bluetooth: hci1: command tx timeout [ 77.518781][ T5626] Bluetooth: hci4: command tx timeout [ 77.518851][ T5626] Bluetooth: hci0: command tx timeout [ 77.574603][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.592557][ T5634] Bluetooth: hci2: command tx timeout [ 77.592690][ T5634] Bluetooth: hci3: command tx timeout [ 77.776431][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776558][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.776695][ T5610] bridge_slave_0: entered allmulticast mode [ 77.778985][ T5610] bridge_slave_0: entered promiscuous mode [ 77.793306][ T5612] team0: Port device team_slave_0 added [ 77.830718][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.830887][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.831331][ T5610] bridge_slave_1: entered allmulticast mode [ 77.838132][ T5610] bridge_slave_1: entered promiscuous mode [ 77.867761][ T5612] team0: Port device team_slave_1 added [ 77.995104][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.996438][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.996454][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.996483][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.999599][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.999614][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.999644][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.051157][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.140834][ T5610] team0: Port device team_slave_0 added [ 78.141046][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.141165][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.141847][ T5613] bridge_slave_0: entered allmulticast mode [ 78.143818][ T5613] bridge_slave_0: entered promiscuous mode [ 78.147122][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.147229][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.147359][ T5615] bridge_slave_0: entered allmulticast mode [ 78.149554][ T5615] bridge_slave_0: entered promiscuous mode [ 78.153356][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.153464][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.153593][ T5615] bridge_slave_1: entered allmulticast mode [ 78.155860][ T5615] bridge_slave_1: entered promiscuous mode [ 78.226520][ T5610] team0: Port device team_slave_1 added [ 78.253562][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.254029][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.254178][ T5613] bridge_slave_1: entered allmulticast mode [ 78.256229][ T5613] bridge_slave_1: entered promiscuous mode [ 78.305356][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.305392][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.305423][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.358867][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.359036][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.359168][ T5611] bridge_slave_0: entered allmulticast mode [ 78.361342][ T5611] bridge_slave_0: entered promiscuous mode [ 78.365755][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.365771][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.365800][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.397562][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.407537][ T5612] hsr_slave_0: entered promiscuous mode [ 78.408686][ T5612] hsr_slave_1: entered promiscuous mode [ 78.439570][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.441163][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.441294][ T5611] bridge_slave_1: entered allmulticast mode [ 78.446919][ T5611] bridge_slave_1: entered promiscuous mode [ 78.487081][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.489712][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.507683][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.507779][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.507908][ T5609] bridge_slave_0: entered allmulticast mode [ 78.509954][ T5609] bridge_slave_0: entered promiscuous mode [ 78.533334][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.537195][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.565213][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.565351][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.565484][ T5609] bridge_slave_1: entered allmulticast mode [ 78.568360][ T5609] bridge_slave_1: entered promiscuous mode [ 78.608118][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.624283][ T5615] team0: Port device team_slave_0 added [ 78.627520][ T5615] team0: Port device team_slave_1 added [ 78.667710][ T5610] hsr_slave_0: entered promiscuous mode [ 78.669109][ T5610] hsr_slave_1: entered promiscuous mode [ 78.669857][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 78.669914][ T5610] Cannot create hsr debugfs directory [ 78.726767][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.730127][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.749624][ T5613] team0: Port device team_slave_0 added [ 78.752991][ T5613] team0: Port device team_slave_1 added [ 78.767435][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.767509][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.767541][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.812638][ T5611] team0: Port device team_slave_0 added [ 78.826982][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.827056][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.827087][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.866626][ T5611] team0: Port device team_slave_1 added [ 78.881344][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.881420][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.881450][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.904742][ T5609] team0: Port device team_slave_0 added [ 78.943712][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.943882][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.943913][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.963464][ T5609] team0: Port device team_slave_1 added [ 79.015870][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.015909][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.015940][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.072071][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.072100][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.072131][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.088807][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.088822][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.088852][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.150810][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.150826][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.150856][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.195571][ T5615] hsr_slave_0: entered promiscuous mode [ 79.198211][ T5615] hsr_slave_1: entered promiscuous mode [ 79.199017][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 79.199036][ T5615] Cannot create hsr debugfs directory [ 79.315266][ T5613] hsr_slave_0: entered promiscuous mode [ 79.316373][ T5613] hsr_slave_1: entered promiscuous mode [ 79.317114][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 79.317132][ T5613] Cannot create hsr debugfs directory [ 79.358870][ T5611] hsr_slave_0: entered promiscuous mode [ 79.359979][ T5611] hsr_slave_1: entered promiscuous mode [ 79.360715][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 79.360733][ T5611] Cannot create hsr debugfs directory [ 79.522607][ T5609] hsr_slave_0: entered promiscuous mode [ 79.523782][ T5609] hsr_slave_1: entered promiscuous mode [ 79.524636][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 79.524656][ T5609] Cannot create hsr debugfs directory [ 79.591779][ T5626] Bluetooth: hci0: command tx timeout [ 79.591907][ T5626] Bluetooth: hci4: command tx timeout [ 79.591953][ T5626] Bluetooth: hci1: command tx timeout [ 79.591981][ T5626] Bluetooth: hci5: command tx timeout [ 79.671930][ T5634] Bluetooth: hci3: command tx timeout [ 79.671985][ T5634] Bluetooth: hci2: command tx timeout [ 79.826933][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.839144][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.840259][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.851568][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.886916][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.896947][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.897814][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.911270][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.092192][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.102544][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.115077][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.125597][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.140189][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.149902][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.150824][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.161517][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.227125][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.237595][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.253901][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.264450][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.265303][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.275467][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.277871][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.282648][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.365564][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.376831][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.379526][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.386878][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.402441][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.412695][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.417199][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.424592][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.491310][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.535833][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.545508][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.564892][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.574975][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.600020][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.605186][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.622595][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.630700][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.636813][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.663696][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.663830][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.696806][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.696971][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.721471][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.746743][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.757728][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.782292][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.792816][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.793682][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.805857][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.824491][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.834595][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.854718][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.916679][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.916807][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.961634][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.961917][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.004664][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.169827][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.221625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.221795][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.283165][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.311491][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.311635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.426850][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.445282][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.477768][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.521613][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.521781][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.603801][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.603969][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.654204][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.674853][ T5634] Bluetooth: hci1: command tx timeout [ 81.674900][ T5634] Bluetooth: hci4: command tx timeout [ 81.674944][ T5634] Bluetooth: hci0: command tx timeout [ 81.675094][ T5626] Bluetooth: hci5: command tx timeout [ 81.694882][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.721408][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.721536][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.752651][ T5616] Bluetooth: hci2: command tx timeout [ 81.752701][ T5616] Bluetooth: hci3: command tx timeout [ 81.786168][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.786295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.791734][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.791837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.836526][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.836660][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.069024][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.347489][ T5612] veth0_vlan: entered promiscuous mode [ 82.406341][ T5612] veth1_vlan: entered promiscuous mode [ 82.535687][ T5612] veth0_macvtap: entered promiscuous mode [ 82.567031][ T5612] veth1_macvtap: entered promiscuous mode [ 82.661143][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.716538][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.787169][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.787971][ T1457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.793859][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.794996][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013821][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240386][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.240436][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.359898][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.476147][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.484802][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.484848][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.536655][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.743428][ T5611] veth0_vlan: entered promiscuous mode [ 83.751456][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.753970][ T5616] Bluetooth: hci0: command tx timeout [ 83.754001][ T5616] Bluetooth: hci4: command tx timeout [ 83.754026][ T5616] Bluetooth: hci1: command tx timeout [ 83.754094][ T5626] Bluetooth: hci5: command tx timeout [ 83.827730][ T5613] veth0_vlan: entered promiscuous mode [ 83.832548][ T5626] Bluetooth: hci3: command tx timeout [ 83.832580][ T5626] Bluetooth: hci2: command tx timeout [ 83.852971][ T5611] veth1_vlan: entered promiscuous mode [ 83.875933][ T5613] veth1_vlan: entered promiscuous mode [ 83.926990][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.963865][ T5610] veth0_vlan: entered promiscuous mode [ 83.997881][ T5611] veth0_macvtap: entered promiscuous mode [ 84.005812][ T5610] veth1_vlan: entered promiscuous mode [ 84.027258][ T5611] veth1_macvtap: entered promiscuous mode [ 84.049946][ T5613] veth0_macvtap: entered promiscuous mode [ 84.073024][ T5613] veth1_macvtap: entered promiscuous mode [ 84.125015][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.138268][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.142015][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.186953][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.207098][ T5609] veth0_vlan: entered promiscuous mode [ 84.238440][ T5610] veth0_macvtap: entered promiscuous mode [ 84.245653][ T1457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.245749][ T1457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.245794][ T1457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.245837][ T1457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247512][ T5610] veth1_macvtap: entered promiscuous mode [ 84.252263][ T1007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.253253][ T1007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.312392][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.312850][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.339580][ T5609] veth1_vlan: entered promiscuous mode [ 84.360448][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.420130][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.436384][ T5615] veth0_vlan: entered promiscuous mode [ 84.499123][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.499163][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.524486][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.524578][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.524631][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527672][ T5615] veth1_vlan: entered promiscuous mode [ 84.582185][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.582220][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.590708][ T5609] veth0_macvtap: entered promiscuous mode [ 84.616632][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.616673][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.637774][ T5609] veth1_macvtap: entered promiscuous mode [ 84.644776][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.700411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.700453][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.737978][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.805232][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.875717][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.875764][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.912744][ T5615] veth0_macvtap: entered promiscuous mode [ 84.972465][ T1209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973380][ T1209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973446][ T1209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973497][ T1209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007959][ T5615] veth1_macvtap: entered promiscuous mode [ 85.090595][ T5860] PM: suspend entry (deep) [ 85.099818][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.099860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.182644][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.236104][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.401553][ T5864] UBIFS error (pid: 5864): cannot open "ubi0:vol0", error -19 [ 85.410985][ T5861] ftl_cs: FTL header not found. [ 85.458274][ T5861] block2mtd: mtd1: [/dev/ram0] erase_size = 4KiB [4096] [ 85.559452][ T1209] Filesystems sync: 0.462 seconds [ 85.578592][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.578641][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.747784][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.747831][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.805467][ T984] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 85.822680][ T1007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.826896][ T1457] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833546][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.836424][ T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.865913][ T984] wiimote 0005:057E:0306.0001: New device registered [ 85.880290][ T5873] dlm: Using TCP for communications [ 85.911106][ T5873] dlm: dlm1: joining the lockspace group... [ 85.920942][ T5860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.921063][ T5860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.939338][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.939375][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.039096][ T5860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.065881][ T878] cfg80211: failed to load regulatory.db [ 86.093537][ T5873] dlm: dlm1: group event done 0 [ 86.102872][ T5860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.103066][ T5860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.114306][ T5876] dlm: dlm1: dlm_recover 10943241791393489829 [ 86.116370][ T5876] dlm: dlm1: add member 1 [ 86.119082][ T5876] dlm: dlm1: dlm_recover_members 1 nodes [ 86.119191][ T5876] dlm: dlm1: generation 1 slots 1 1:1 [ 86.119208][ T5876] dlm: dlm1: dlm_recover_directory [ 86.120957][ T5876] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 86.121358][ T5876] dlm: dlm1: dlm_recover 10943241791393489829 generation 1 done: 0 ms [ 86.122498][ T5873] dlm: dlm1: join complete [ 86.170785][ T5860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.193005][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.193242][ T5860] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.224203][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.224241][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.250231][ T5860] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.278184][ T5860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.286433][ T5860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.307291][ T5860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.325458][ T5880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.344449][ T5860] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 86.352232][ T5860] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 86.366915][ T5860] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 86.410569][ T5860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.410689][ T5860] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.445021][ T5860] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.456748][ T5867] dlm: dlm1: no userland control daemon, stopping lockspace [ 86.460889][ T5867] dlm: dlm user daemon left 1 lockspaces [ 86.507288][ T5746] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 86.517203][ T5860] Freezing user space processes [ 86.523479][ T5746] wiimote 0005:057E:0306.0002: New device registered [ 86.532222][ T5884] wiimote 0005:057E:0306.0002: Device removed [ 86.953392][ T984] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 86.975330][ T984] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 86.981466][ T984] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 86.985592][ T984] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 87.592322][ T5746] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 87.592965][ T5746] sysfs: cannot create duplicate filename '/class/power_supply/wiimote_battery_syz0' [ 87.592987][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 87.593016][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 87.593033][ T5746] Workqueue: events wiimote_init_worker [ 87.593080][ T5746] Call Trace: [ 87.593090][ T5746] [ 87.593107][ T5746] dump_stack_lvl+0xe8/0x150 [ 87.593148][ T5746] sysfs_warn_dup+0x8e/0xa0 [ 87.593188][ T5746] sysfs_do_create_link_sd+0xc0/0x110 [ 87.593231][ T5746] device_add_class_symlinks+0x1cf/0x240 [ 87.593277][ T5746] device_add+0x467/0xb80 [ 87.593320][ T5746] __power_supply_register+0xb88/0xf60 [ 87.593360][ T5746] ? __pfx___power_supply_register+0x10/0x10 [ 87.593394][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593425][ T5746] ? trace_kmalloc+0x2a/0xf0 [ 87.593480][ T5746] wiimod_battery_probe+0x202/0x3a0 [ 87.593515][ T5746] ? __pfx_wiimod_battery_probe+0x10/0x10 [ 87.593554][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593585][ T5746] ? input_ff_create_memless+0x2e4/0x600 [ 87.593627][ T5746] wiimote_init_worker+0x20c9/0x2f00 [ 87.593680][ T5746] ? __pfx_wiimote_init_worker+0x10/0x10 [ 87.593724][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593753][ T5746] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.593798][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593827][ T5746] ? lock_acquire+0x115/0x350 [ 87.593854][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593891][ T5746] ? rcu_is_watching+0x16/0xb0 [ 87.593921][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.593952][ T5746] ? process_scheduled_works+0x97a/0x1630 [ 87.593987][ T5746] process_scheduled_works+0xc3d/0x1630 [ 87.594020][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.594084][ T5746] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.594131][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.594159][ T5746] ? assign_work+0x3cf/0x5d0 [ 87.594199][ T5746] worker_thread+0xa47/0xfb0 [ 87.594236][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.594276][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.594305][ T5746] ? __kthread_parkme+0x71/0x1f0 [ 87.594354][ T5746] kthread+0x38b/0x480 [ 87.594380][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 87.594412][ T5746] ? __pfx_kthread+0x10/0x10 [ 87.594439][ T5746] ret_from_fork+0x514/0xb70 [ 87.594468][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 87.594507][ T5746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.594536][ T5746] ? __switch_to+0xc89/0x1420 [ 87.594575][ T5746] ? __pfx_kthread+0x10/0x10 [ 87.594602][ T5746] ret_from_fork_asm+0x1a/0x30 [ 87.594659][ T5746] [ 87.597391][ T5746] wiimote 0005:057E:0306.0002: cannot register battery device [ 87.832640][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.153635][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.234630][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.321814][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.392333][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 88.472961][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.921798][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.232708][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.321996][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.392748][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.477361][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 90.553774][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.780668][ T5860] Freezing user space processes completed (elapsed 5.263 seconds) [ 91.780817][ T5860] OOM killer disabled. [ 91.780827][ T5860] Freezing remaining freezable tasks [ 91.784221][ T5860] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 91.784613][ T5860] printk: Suspending console(s) (use no_console_suspend to debug) [ 91.995283][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.018099][ T5860] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 92.018168][ T5860] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 92.018234][ T5860] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 92.018306][ T5860] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 92.018372][ T5860] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 92.018439][ T5860] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 92.018506][ T5860] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 92.018570][ T5860] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 92.018640][ T5860] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 92.018704][ T5860] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 92.018769][ T5860] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 92.018835][ T5860] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 92.018905][ T5860] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 92.018970][ T5860] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 92.019043][ T5860] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 92.057079][ T5898] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 92.321834][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.396942][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.471845][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.473872][ T5860] ACPI: PM: Preparing to enter system sleep state S3 [ 92.474557][ T5860] ACPI: PM: Saving platform NVS memory [ 92.475868][ T5860] Disabling non-boot CPUs ... [ 92.493604][ T5860] smpboot: CPU 1 is now offline [ 92.505963][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 92.511564][ T5860] ACPI: PM: Low-level resume complete [ 92.511611][ T5860] ACPI: PM: Restoring platform NVS memory [ 92.535189][ T5860] Enabling non-boot CPUs ... [ 92.536906][ T5860] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 92.549549][ T5860] CPU1 is up [ 92.550489][ T5860] ACPI: PM: Waking up from system sleep state S3 [ 92.585988][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.662870][ T83] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 92.985722][ T5860] OOM killer enabled. [ 92.985941][ T5860] Restarting tasks: Starting [ 93.007743][ T5860] Restarting tasks: Done [ 93.011149][ T5860] random: crng reseeded on system resumption [ 93.012344][ T5860] hwrng_fill thread creation failed [ 93.013572][ T5860] PM: suspend exit [ 93.215078][ T5872] wiimote 0005:057E:0306.0001: Device removed [ 93.252718][ T5953] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.252759][ T5953] use the actual size instead. [ 93.300514][ T5959] lo speed is unknown, defaulting to 1000 [ 93.319988][ T5959] lo speed is unknown, defaulting to 1000 [ 93.383116][ T5959] lo speed is unknown, defaulting to 1000 [ 93.522377][ T5966] fido_id[5966]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.602685][ T5975] CIFS: Attempting to mount //127.0.0.1/share [ 93.641149][ T5975] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange [ 93.676710][ T5978] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks [ 93.716897][ T5743] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.745713][ T5982] block2mtd: error: cannot open device /dev/ram0 [ 93.801269][ T5983] ubi0: attaching mtd1 [ 93.880045][ T5743] usb 2-1: not running at top speed; connect to a high speed hub [ 93.880377][ T5743] usb 2-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 2.00 [ 93.883900][ T5743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.887465][ T5743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 93.893313][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.894536][ T5743] usb 2-1: Product: syz [ 93.895516][ T5743] usb 2-1: Manufacturer: syz [ 93.896890][ T5743] usb 2-1: SerialNumber: syz [ 93.919305][ T5971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.921270][ T5971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.940121][ T5983] ubi0: scanning is finished [ 93.940240][ T5983] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 93.955026][ T1221] lo speed is unknown, defaulting to 1000 [ 93.955376][ T5959] infiniband rxe0: set active [ 93.955395][ T5959] infiniband rxe0: added lo [ 93.959931][ T5982] UBIFS error (pid: 5982): cannot open "ubi0:vol0", error -19 [ 93.975976][ T5959] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.976035][ T5959] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.976121][ T5959] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.009068][ T5959] RDS/IB: rxe0: added [ 94.009436][ T5959] smc: adding ib device rxe0 with port count 1 [ 94.009555][ T5959] smc: ib device rxe0 port 1 has no pnetid [ 94.012661][ T9] lo speed is unknown, defaulting to 1000 [ 94.026757][ T5959] lo speed is unknown, defaulting to 1000 [ 94.044351][ T5983] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 94.152297][ T5743] usb 2-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 94.425898][ T1221] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.436541][ T5975] CIFS: VFS: cifs_mount failed w/return code = -11 [ 94.528011][ T5959] lo speed is unknown, defaulting to 1000 [ 94.583031][ T1221] usb 6-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice= 1.00 [ 94.594579][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.594660][ T1221] usb 6-1: Product: syz [ 94.594680][ T1221] usb 6-1: Manufacturer: syz [ 94.594697][ T1221] usb 6-1: SerialNumber: syz [ 94.633368][ T1221] gspca_main: kinect-2.14.0 probing 045e:02ae [ 94.877086][ T5798] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.026740][ T5798] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 95.028486][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.060904][ T5798] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 95.082377][ T5959] lo speed is unknown, defaulting to 1000 [ 95.453774][ T5959] lo speed is unknown, defaulting to 1000 [ 95.766470][ T5798] gspca_mr97310a: reg write [19] error -110 [ 95.766615][ T5798] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 95.805445][ T5959] lo speed is unknown, defaulting to 1000 [ 95.832899][ T5798] usb 6-1: USB disconnect, device number 2 [ 96.158059][ T5959] lo speed is unknown, defaulting to 1000 [ 96.799912][ T6001] nvme nvme0: failed to connect socket: -111 [ 97.284677][ T5746] usb 1-1: USB disconnect, device number 2 [ 97.535068][ T6016] CIFS: Attempting to mount //127.0.0.1/share [ 97.549218][ T6018] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks [ 97.601420][ T6016] CIFS: VFS: \\127.0.0.1\IPC$ validate protocol negotiate failed: -11 [ 97.603805][ T6016] CIFS: VFS: \\127.0.0.1 failed to connect to IPC (rc=-5) [ 97.857390][ T31] audit: type=1800 audit(1700000005.578:2): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.29" name="idVendor" dev="configfs" ino=8919 res=0 errno=0 [ 97.861202][ T31] audit: type=1800 audit(1700000005.578:3): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.29" name="idProduct" dev="configfs" ino=8920 res=0 errno=0 [ 97.868587][ T31] audit: type=1800 audit(1700000005.588:4): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.29" name="direction" dev="configfs" ino=8927 res=0 errno=0 [ 97.928310][ T6025] PM: suspend entry (deep) [ 97.945965][ T6007] NFSD: Unable to initialize client recovery tracking! (-110) [ 97.945998][ T6007] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 97.946063][ T6007] NFSD: starting 90-second grace period (net f00004f3) [ 98.062087][ T152] Filesystems sync: 0.133 seconds [ 98.347796][ T5743] dvb_usb_rtl28xxu 2-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.361538][ T6016] CIFS: VFS: cifs_mount failed w/return code = -512 [ 98.374169][ T5743] usb 2-1: USB disconnect, device number 2 [ 98.512492][ T6040] block2mtd: error: cannot open device /dev/ram0 [ 98.569990][ T6043] ubi0: attaching mtd1 [ 98.599197][ T6043] ubi0: scanning is finished [ 98.600989][ T6043] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 98.616797][ T6042] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 98.617742][ T6042] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 98.617931][ T6042] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 98.617953][ T6042] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 98.693504][ T6043] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 98.760302][ T6025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.760515][ T6025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.760702][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.760861][ T6025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.761013][ T6025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 98.761167][ T6025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.763257][ T6040] UBIFS error (pid: 6040): cannot open "ubi0:vol0", error -19 [ 98.768816][ T6025] Freezing user space processes [ 99.385978][ T6019] NFSD: Unable to initialize client recovery tracking! (-110) [ 99.386842][ T6019] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 99.386858][ T6019] NFSD: starting 90-second grace period (net f0000455) [ 99.566248][ T6025] Freezing user space processes completed (elapsed 0.795 seconds) [ 99.566289][ T6025] OOM killer disabled. [ 99.566306][ T6025] Freezing remaining freezable tasks [ 100.175925][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.816139][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout [ 100.816163][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.816203][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.816207][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.816736][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.576273][ T6025] Freezing remaining freezable tasks failed after 20.009 seconds (0 tasks refusing to freeze, wq_busy=1): [ 119.576328][ T6025] Showing freezable workqueues that are still busy: [ 119.576355][ T6025] workqueue cifsiod: flags=0x10c [ 119.576374][ T6025] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 119.576436][ T6025] in-flight: 5617:smb2_reconnect_server for 21s [ 119.576548][ T6025] workqueue wg-kex-wg0: flags=0x6 [ 119.576565][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.576640][ T6025] inactive: wg_packet_handshake_send_worker [ 119.576703][ T6025] workqueue wg-kex-wg1: flags=0x6 [ 119.576718][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.576773][ T6025] inactive: wg_packet_handshake_send_worker [ 119.576833][ T6025] workqueue wg-kex-wg2: flags=0x6 [ 119.576849][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.576904][ T6025] inactive: wg_packet_handshake_send_worker [ 119.576960][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577005][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577055][ T6025] workqueue wg-kex-wg0: flags=0x6 [ 119.577070][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577115][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577165][ T6025] workqueue wg-kex-wg1: flags=0x6 [ 119.577179][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577224][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577275][ T6025] workqueue wg-kex-wg2: flags=0x6 [ 119.577287][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577332][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577380][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577425][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577477][ T6025] workqueue wg-kex-wg0: flags=0x6 [ 119.577490][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577534][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577586][ T6025] workqueue wg-kex-wg1: flags=0x6 [ 119.577601][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577651][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577703][ T6025] workqueue wg-kex-wg2: flags=0x6 [ 119.577716][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577761][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577810][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577855][ T6025] inactive: wg_packet_handshake_send_worker [ 119.577907][ T6025] workqueue wg-kex-wg1: flags=0x6 [ 119.577920][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.577967][ T6025] inactive: wg_packet_handshake_send_worker [ 119.578017][ T6025] workqueue wg-kex-wg2: flags=0x6 [ 119.578029][ T6025] pwq 8: cpus=0-1 flags=0x4 nice=0 active=0 refcnt=2 [ 119.578072][ T6025] inactive: wg_packet_handshake_send_worker [ 119.578171][ T6025] Restarting kernel threads ... [ 119.583259][ T6025] Done restarting kernel threads. [ 119.588163][ T6025] OOM killer enabled. [ 119.588173][ T6025] Restarting tasks: Starting [ 119.614985][ T6025] Restarting tasks: Done [ 119.615100][ T6025] random: crng reseeded on system resumption [ 119.779840][ T6025] hwrng_fill thread creation failed [ 119.828663][ T6025] PM: suspend exit [ 120.043080][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.052111][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.059496][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.066922][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.067852][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.640458][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.653582][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.654503][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.655493][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.656467][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.756067][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 120.766912][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 120.775183][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 120.782988][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 120.792548][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 121.077793][ T5626] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 121.091497][ T5626] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 121.100128][ T5626] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 121.112683][ T5626] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 121.122909][ T5626] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 121.285175][ T5626] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 121.301301][ T5626] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 121.308580][ T5626] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 121.319019][ T5626] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 121.329428][ T5626] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 121.449967][ T5626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 121.463309][ T5626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 121.472491][ T5626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 121.482151][ T5626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 121.492442][ T5626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 122.096355][ T5630] Bluetooth: hci6: command tx timeout [ 122.275164][ T5947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.334846][ T6055] lo speed is unknown, defaulting to 1000 [ 122.450475][ T5947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.638896][ T5947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.735885][ T5630] Bluetooth: hci7: command tx timeout [ 122.816435][ T5630] Bluetooth: hci8: command tx timeout [ 122.862639][ T5947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.990323][ T6067] lo speed is unknown, defaulting to 1000 [ 123.216778][ T5630] Bluetooth: hci9: command tx timeout [ 123.249636][ T5947] bridge_slave_1: left allmulticast mode [ 123.249696][ T5947] bridge_slave_1: left promiscuous mode [ 123.250969][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.270583][ T5947] bridge_slave_0: left allmulticast mode [ 123.270632][ T5947] bridge_slave_0: left promiscuous mode [ 123.271690][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.386278][ T5630] Bluetooth: hci10: command tx timeout [ 123.461581][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.474461][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.486580][ T5947] bond0 (unregistering): Released all slaves [ 123.508983][ T6064] lo speed is unknown, defaulting to 1000 [ 123.536502][ T5630] Bluetooth: hci11: command tx timeout [ 124.134474][ T6073] lo speed is unknown, defaulting to 1000 [ 124.176346][ T5630] Bluetooth: hci6: command tx timeout [ 124.244131][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.344410][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.351747][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.360646][ T6055] bridge_slave_0: entered allmulticast mode [ 124.364970][ T6055] bridge_slave_0: entered promiscuous mode [ 124.403555][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.403689][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.404130][ T6055] bridge_slave_1: entered allmulticast mode [ 124.411259][ T6055] bridge_slave_1: entered promiscuous mode [ 124.503303][ T6082] lo speed is unknown, defaulting to 1000 [ 124.540661][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.578182][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.800185][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.800323][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.800993][ T6067] bridge_slave_0: entered allmulticast mode [ 124.802970][ T6067] bridge_slave_0: entered promiscuous mode [ 124.807877][ T6055] team0: Port device team_slave_0 added [ 124.827092][ T5630] Bluetooth: hci7: command tx timeout [ 124.843496][ T6055] team0: Port device team_slave_1 added [ 124.843721][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.843894][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.844039][ T6067] bridge_slave_1: entered allmulticast mode [ 124.847073][ T6067] bridge_slave_1: entered promiscuous mode [ 124.896060][ T5630] Bluetooth: hci8: command tx timeout [ 125.002297][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.013375][ T6077] lo speed is unknown, defaulting to 1000 [ 125.100105][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.100154][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.100188][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.109607][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.184331][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.184366][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.184423][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.296285][ T5630] Bluetooth: hci9: command tx timeout [ 125.297933][ T6067] team0: Port device team_slave_0 added [ 125.401541][ T6067] team0: Port device team_slave_1 added [ 125.461942][ T5630] Bluetooth: hci10: command tx timeout [ 125.617035][ T5630] Bluetooth: hci11: command tx timeout [ 125.743094][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 125.756582][ T6055] hsr_slave_0: entered promiscuous mode [ 125.757697][ T6055] hsr_slave_1: entered promiscuous mode [ 125.758446][ T6055] debugfs: 'hsr0' already exists in 'hsr' [ 125.758465][ T6055] Cannot create hsr debugfs directory [ 125.787323][ T5947] hsr_slave_0: left promiscuous mode [ 125.792781][ T5947] hsr_slave_1: left promiscuous mode [ 125.793767][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.793797][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.799521][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.799541][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.821451][ T5947] veth1_macvtap: left promiscuous mode [ 125.821500][ T5947] veth0_macvtap: left promiscuous mode [ 125.821660][ T5947] veth1_vlan: left promiscuous mode [ 125.821750][ T5947] veth0_vlan: left promiscuous mode [ 126.043711][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 126.063658][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 126.237005][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.244616][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.271022][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.279383][ T5630] Bluetooth: hci6: command tx timeout [ 126.348271][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.348888][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.348920][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.393596][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.393813][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.393947][ T6064] bridge_slave_0: entered allmulticast mode [ 126.397796][ T6064] bridge_slave_0: entered promiscuous mode [ 126.451281][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.451415][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.451674][ T6064] bridge_slave_1: entered allmulticast mode [ 126.455161][ T6064] bridge_slave_1: entered promiscuous mode [ 126.586794][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.620159][ T6067] hsr_slave_0: entered promiscuous mode [ 126.621260][ T6067] hsr_slave_1: entered promiscuous mode [ 126.647708][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.762858][ T6064] team0: Port device team_slave_0 added [ 126.832481][ T6064] team0: Port device team_slave_1 added [ 126.895977][ T5630] Bluetooth: hci7: command tx timeout [ 126.979907][ T5630] Bluetooth: hci8: command tx timeout [ 127.051534][ T5947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.072702][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.081029][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.107390][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.191737][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.198961][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.225295][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.342546][ T5947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.364844][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.373238][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.373418][ T6073] bridge_slave_0: entered allmulticast mode [ 127.381775][ T5630] Bluetooth: hci9: command tx timeout [ 127.395210][ T6073] bridge_slave_0: entered promiscuous mode [ 127.430501][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.449520][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.449700][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.449835][ T6073] bridge_slave_1: entered allmulticast mode [ 127.452058][ T6073] bridge_slave_1: entered promiscuous mode [ 127.536682][ T5630] Bluetooth: hci10: command tx timeout [ 127.568038][ T5947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.589116][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.592928][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.636154][ T6064] hsr_slave_0: entered promiscuous mode [ 127.637275][ T6064] hsr_slave_1: entered promiscuous mode [ 127.638061][ T6064] debugfs: 'hsr0' already exists in 'hsr' [ 127.638080][ T6064] Cannot create hsr debugfs directory [ 127.696019][ T5630] Bluetooth: hci11: command tx timeout [ 127.753872][ T5947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.766623][ T6073] team0: Port device team_slave_0 added [ 127.825492][ T6073] team0: Port device team_slave_1 added [ 127.858780][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.858952][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.859427][ T6082] bridge_slave_0: entered allmulticast mode [ 127.861448][ T6082] bridge_slave_0: entered promiscuous mode [ 127.905866][ T6055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.915412][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.930227][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.930415][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.930563][ T6082] bridge_slave_1: entered allmulticast mode [ 127.932476][ T6082] bridge_slave_1: entered promiscuous mode [ 127.980852][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.985992][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.986024][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.988316][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.988331][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.988361][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.015034][ T6055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.037413][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.038802][ T6055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.065530][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.142291][ T6055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.152368][ T6055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.164871][ T6082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.171050][ T6082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.210841][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.211035][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.211190][ T6077] bridge_slave_0: entered allmulticast mode [ 128.213215][ T6077] bridge_slave_0: entered promiscuous mode [ 128.312245][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.312445][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.312597][ T6077] bridge_slave_1: entered allmulticast mode [ 128.315047][ T6077] bridge_slave_1: entered promiscuous mode [ 128.346607][ T5630] Bluetooth: hci6: command tx timeout [ 128.375256][ T6082] team0: Port device team_slave_0 added [ 128.503375][ T6082] team0: Port device team_slave_1 added [ 128.524453][ T6073] hsr_slave_0: entered promiscuous mode [ 128.525612][ T6073] hsr_slave_1: entered promiscuous mode [ 128.526886][ T6073] debugfs: 'hsr0' already exists in 'hsr' [ 128.526907][ T6073] Cannot create hsr debugfs directory [ 128.532555][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.608475][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.765427][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.765467][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.767025][ T6082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.780618][ T6077] team0: Port device team_slave_0 added [ 128.842811][ T5947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.867812][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.871150][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.871183][ T6082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.904123][ T6077] team0: Port device team_slave_1 added [ 128.911521][ T6067] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 128.925699][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.929814][ T6067] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 128.942201][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.976617][ T5630] Bluetooth: hci7: command tx timeout [ 129.004037][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.010135][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.010167][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.011724][ T6067] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 129.041265][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.070689][ T5630] Bluetooth: hci8: command tx timeout [ 129.077650][ T5947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.116774][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 129.119077][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.119092][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.119146][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.141935][ T6067] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 129.161937][ T6067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.206432][ T6082] hsr_slave_0: entered promiscuous mode [ 129.207563][ T6082] hsr_slave_1: entered promiscuous mode [ 129.208313][ T6082] debugfs: 'hsr0' already exists in 'hsr' [ 129.208333][ T6082] Cannot create hsr debugfs directory [ 129.306777][ T5947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.401216][ T6077] hsr_slave_0: entered promiscuous mode [ 129.407865][ T6077] hsr_slave_1: entered promiscuous mode [ 129.414261][ T6077] debugfs: 'hsr0' already exists in 'hsr' [ 129.417968][ T6077] Cannot create hsr debugfs directory [ 129.460310][ T5947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.470874][ T5630] Bluetooth: hci9: command tx timeout [ 129.551729][ T6064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.561484][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.564740][ T6064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.571767][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.581198][ T6064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 129.590850][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.600424][ T6064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 129.615032][ T6064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.626833][ T5630] Bluetooth: hci10: command tx timeout [ 129.776615][ T5630] Bluetooth: hci11: command tx timeout [ 130.013318][ T6073] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 130.034165][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.035028][ T6073] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 130.048800][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.054340][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.155045][ T6073] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 130.167398][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.210139][ T6082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.244742][ T6073] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 130.261294][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.269903][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 130.307540][ T5947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.338602][ T6082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.391998][ T5947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.409264][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.455167][ T6082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.470844][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.470963][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.499498][ T5947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.534214][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.534329][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.557943][ T6082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.589589][ T5947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.694369][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.820744][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.820843][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.956626][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.969295][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.984943][ T6082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.995661][ T6082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.997603][ T6082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.012728][ T6082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.053193][ T6082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.072963][ T6082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.075500][ T6082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.094583][ T6082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.190795][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.190948][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.214870][ T5947] bridge_slave_1: left allmulticast mode [ 131.214918][ T5947] bridge_slave_1: left promiscuous mode [ 131.215124][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.233240][ T5947] bridge_slave_0: left allmulticast mode [ 131.233263][ T5947] bridge_slave_0: left promiscuous mode [ 131.233504][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.263285][ T5947] bridge_slave_1: left allmulticast mode [ 131.263331][ T5947] bridge_slave_1: left promiscuous mode [ 131.263518][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.288324][ T5947] bridge_slave_0: left allmulticast mode [ 131.288374][ T5947] bridge_slave_0: left promiscuous mode [ 131.288579][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.313963][ T5947] bridge_slave_1: left allmulticast mode [ 131.320347][ T5947] bridge_slave_1: left promiscuous mode [ 131.327125][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.338630][ T5947] bridge_slave_0: left allmulticast mode [ 131.344348][ T5947] bridge_slave_0: left promiscuous mode [ 131.362528][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.380794][ T5947] bridge_slave_1: left allmulticast mode [ 131.386600][ T5947] bridge_slave_1: left promiscuous mode [ 131.392394][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.402591][ T5947] bridge_slave_0: left allmulticast mode [ 131.402626][ T5947] bridge_slave_0: left promiscuous mode [ 131.404692][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.653827][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.665002][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.675469][ T5947] bond0 (unregistering): Released all slaves [ 131.769961][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.781409][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.791537][ T5947] bond0 (unregistering): Released all slaves [ 131.883379][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.894768][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.905491][ T5947] bond0 (unregistering): Released all slaves [ 131.994571][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.005457][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.017784][ T5947] bond0 (unregistering): Released all slaves [ 132.039068][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 132.058826][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.058956][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.088567][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.234540][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.234700][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.273306][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.278974][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.279079][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.573211][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.680625][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.680765][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.772819][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.772946][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.178589][ T6077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.195009][ T6077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.225024][ T6077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.240114][ T6077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.242684][ T6077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.254637][ T6077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.333042][ T6077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.342024][ T6077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.348142][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.391879][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 133.633337][ T6082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.829296][ T6082] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.900697][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.900848][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.912069][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.912199][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.204501][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.368682][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.409648][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.409799][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.490337][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.490493][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.618095][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.741697][ T6055] veth0_vlan: entered promiscuous mode [ 134.814979][ T6055] veth1_vlan: entered promiscuous mode [ 135.100059][ T6055] veth0_macvtap: entered promiscuous mode [ 135.144191][ T6055] veth1_macvtap: entered promiscuous mode [ 135.189917][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.302871][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.374862][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.461786][ T5924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.465062][ T1209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.465150][ T1209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.465691][ T1209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.948499][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.948541][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.090610][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.231763][ T5947] hsr_slave_0: left promiscuous mode [ 136.239937][ T5947] hsr_slave_1: left promiscuous mode [ 136.240868][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.240913][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.262149][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.269928][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.293525][ T5947] hsr_slave_0: left promiscuous mode [ 136.300049][ T5947] hsr_slave_1: left promiscuous mode [ 136.306430][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.313879][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.323411][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.327920][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.342730][ T5947] hsr_slave_0: left promiscuous mode [ 136.348260][ T5947] hsr_slave_1: left promiscuous mode [ 136.349177][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.349197][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.354418][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.354437][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.384456][ T5947] hsr_slave_0: left promiscuous mode [ 136.390065][ T5947] hsr_slave_1: left promiscuous mode [ 136.391072][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.391092][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.396597][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.396622][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.430207][ T5947] veth1_macvtap: left promiscuous mode [ 136.430253][ T5947] veth0_macvtap: left promiscuous mode [ 136.430364][ T5947] veth1_vlan: left promiscuous mode [ 136.430434][ T5947] veth0_vlan: left promiscuous mode [ 136.451831][ T5947] veth1_macvtap: left promiscuous mode [ 136.451880][ T5947] veth0_macvtap: left promiscuous mode [ 136.452010][ T5947] veth1_vlan: left promiscuous mode [ 136.452082][ T5947] veth0_vlan: left promiscuous mode [ 136.473720][ T5947] veth1_macvtap: left promiscuous mode [ 136.473783][ T5947] veth0_macvtap: left promiscuous mode [ 136.473903][ T5947] veth1_vlan: left promiscuous mode [ 136.473975][ T5947] veth0_vlan: left promiscuous mode [ 136.496289][ T5947] veth1_macvtap: left promiscuous mode [ 136.496342][ T5947] veth0_macvtap: left promiscuous mode [ 136.496651][ T5947] veth1_vlan: left promiscuous mode [ 136.496772][ T5947] veth0_vlan: left promiscuous mode [ 136.940753][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 136.952233][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 137.208439][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 137.226317][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 137.492682][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 137.504269][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 137.623104][ T5944] smc: removing ib device rxe0 [ 137.676663][ T5944] smbdirect: ib_dev[rxe0] removed [ 138.085291][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 138.144697][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 138.594715][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 138.652832][ T5766] lo speed is unknown, defaulting to 1000 [ 138.663673][ T5766] rxe0: Port: 1 Link DOWN [ 138.672290][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.672334][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.925318][ T6067] veth0_vlan: entered promiscuous mode [ 138.948178][ T6082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.969714][ T6067] veth1_vlan: entered promiscuous mode [ 138.982196][ T6064] veth0_vlan: entered promiscuous mode [ 139.072292][ T6064] veth1_vlan: entered promiscuous mode [ 139.302218][ T6407] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.365317][ T6407] md: loop0 has zero or unknown size, marking faulty! [ 139.385577][ T6067] veth0_macvtap: entered promiscuous mode [ 139.412986][ T6064] veth0_macvtap: entered promiscuous mode [ 139.425586][ T6082] veth0_vlan: entered promiscuous mode [ 139.452355][ T6067] veth1_macvtap: entered promiscuous mode [ 139.462810][ T6082] veth1_vlan: entered promiscuous mode [ 139.472111][ T6064] veth1_macvtap: entered promiscuous mode [ 139.570173][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.678800][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.719707][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.725566][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.746979][ T5876] dlm: dlm1: dlm_recover 10943241791393489831 [ 139.747046][ T5876] dlm: dlm1: dlm_recover_members 1 nodes [ 139.747077][ T5876] dlm: dlm1: generation 2 slots 1 1:1 [ 139.747094][ T5876] dlm: dlm1: dlm_recover_directory [ 139.747122][ T5876] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 139.747185][ T5876] dlm: dlm1: dlm_recover 10943241791393489831 generation 2 done: 0 ms [ 139.767664][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.867498][ T6419] dlm: dlm1: start ignored: lockspace running [ 140.005421][ T6082] veth0_macvtap: entered promiscuous mode [ 140.013131][ T6082] veth1_macvtap: entered promiscuous mode [ 140.140541][ T6073] veth0_vlan: entered promiscuous mode [ 140.220908][ T5921] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.221080][ T5921] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.221745][ T5921] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.221934][ T5921] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.221978][ T5921] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.222021][ T5921] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.313557][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.459775][ T6073] veth1_vlan: entered promiscuous mode [ 140.466472][ T5946] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.468458][ T5946] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.482570][ T6415] dlm: dlm1: no userland control daemon, stopping lockspace [ 140.482945][ T6415] dlm: dlm user daemon left 1 lockspaces [ 140.490857][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.692265][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.692310][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.720077][ T6077] veth0_vlan: entered promiscuous mode [ 140.735107][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 140.756283][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.756450][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.756495][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.756537][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.757021][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.757040][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.028911][ T6077] veth1_vlan: entered promiscuous mode [ 141.093079][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.093129][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.204848][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.204897][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.214781][ T6073] veth0_macvtap: entered promiscuous mode [ 141.310886][ T6073] veth1_macvtap: entered promiscuous mode [ 141.445925][ T5897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.445976][ T5897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.522358][ T31] audit: type=1800 audit(1700000044.028:5): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.40" name="idVendor" dev="configfs" ino=14568 res=0 errno=0 [ 141.522433][ T31] audit: type=1800 audit(1700000044.028:6): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.40" name="idProduct" dev="configfs" ino=14569 res=0 errno=0 [ 141.565315][ T31] audit: type=1800 audit(1700000044.068:7): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.40" name="direction" dev="configfs" ino=14571 res=0 errno=0 [ 141.574223][ T6077] veth0_macvtap: entered promiscuous mode [ 141.594839][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.644720][ T31] audit: type=1800 audit(1700000044.148:8): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.40" name="UDC" dev="configfs" ino=15433 res=0 errno=0 [ 141.672175][ T6437] Config c/1 of g1 needs at least one function. [ 141.672516][ T6437] udc dummy_udc.0: failed to start g1: -22 [ 141.672541][ T6437] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 141.673930][ T6437] UDC core: g1: couldn't find an available UDC or it's busy [ 141.754828][ T6077] veth1_macvtap: entered promiscuous mode [ 141.804670][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.831299][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.831348][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.887301][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 141.916189][ T5944] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.916262][ T5944] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.916326][ T5944] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.916375][ T5944] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.048260][ T10] usb 8-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 142.051744][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.072841][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.124677][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.203533][ T6449] CIFS: Attempting to mount //127.0.0.1/share [ 142.295993][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.297097][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.297143][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.297186][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.368031][ T6453] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks [ 142.393895][ T6449] CIFS: VFS: \\127.0.0.1\IPC$ validate protocol negotiate failed: -11 [ 142.943498][ T6449] CIFS: VFS: cifs_mount failed w/return code = -512 [ 142.964784][ C0] usb 8-1: NFC: It it not the response to the last command [ 142.972277][ T10] usb 8-1: NFC: Unable to get FW version [ 143.003618][ T10] pn533_usb 8-1:1.0: probe with driver pn533_usb failed with error -5 [ 143.128981][ T31] audit: type=1800 audit(1700000045.638:9): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.48" name="idVendor" dev="configfs" ino=15686 res=0 errno=0 [ 143.131516][ T31] audit: type=1800 audit(1700000045.638:10): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.48" name="idProduct" dev="configfs" ino=15687 res=0 errno=0 [ 143.192070][ T10] usb 8-1: USB disconnect, device number 2 [ 143.314205][ T6462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.438526][ T6462] md: could not open device unknown-block(1,0). [ 143.679315][ T6464] zram0: detected capacity change from 0 to 65536 [ 143.811833][ T6467] ubi0: attaching mtd1 [ 143.877255][ T6467] ubi0: scanning is finished [ 143.885914][ T6467] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 143.999465][ T6464] ftl_cs: FTL header not found. [ 144.025161][ T6475] UBIFS error (pid: 6475): cannot open "ubi0:vol0", error -19 [ 144.055974][ T6467] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 144.200442][ T6464] block2mtd: mtd2: [/dev/zram0] erase_size = 64KiB [65536] [ 144.364180][ T5876] dlm: dlm1: dlm_recover 10943241791393489833 [ 144.364281][ T5876] dlm: dlm1: dlm_clear_inactive 1 done [ 144.364314][ T5876] dlm: dlm1: dlm_recover_members 1 nodes [ 144.364344][ T5876] dlm: dlm1: generation 3 slots 1 1:1 [ 144.364361][ T5876] dlm: dlm1: dlm_recover_directory [ 144.364382][ T5876] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 144.364443][ T5876] dlm: dlm1: dlm_recover 10943241791393489833 generation 3 done: 0 ms [ 144.519696][ T6480] dlm: dlm1: start ignored: lockspace running [ 144.948650][ T1221] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 144.970979][ T6485] dlm: dlm1: start ignored: lockspace running [ 145.088468][ T6487] dlm: dlm1: start ignored: lockspace running [ 145.101805][ T1221] usb 9-1: New USB device found, idVendor=0001, idProduct=0001, bcdDevice= 0.00 [ 145.103226][ T1221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.468948][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.469030][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.490348][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 145.599147][ T1221] hid-generic 0003:0001:0001.0003: hiddev0,hidraw0: USB HID v1.00 Device [HID 0001:0001] on usb-dummy_hcd.8-1/input0 [ 145.725395][ T6484] dlm: dlm1: no userland control daemon, stopping lockspace [ 145.726848][ T6484] dlm: dlm user daemon left 1 lockspaces [ 146.077150][ T1221] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 146.090898][ T6490] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 146.227778][ T1221] usb 7-1: not running at top speed; connect to a high speed hub [ 146.235656][ T1221] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.00 [ 146.237702][ T1221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.240062][ T31] audit: type=1800 audit(1700000048.748:11): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.57" name="idVendor" dev="configfs" ino=15795 res=0 errno=0 [ 146.241293][ T31] audit: type=1800 audit(1700000048.748:12): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.57" name="idProduct" dev="configfs" ino=15796 res=0 errno=0 [ 146.244568][ T31] audit: type=1800 audit(1700000048.748:13): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.57" name="UDC" dev="configfs" ino=15799 res=0 errno=0 [ 146.251306][ T1221] usb 7-1: config 0 descriptor?? [ 146.282530][ T1221] usb 7-1: cannot find UAC_HEADER [ 146.541296][ T1221] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 146.565541][ T6500] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 146.698846][ T6500] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 146.710948][ T6500] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 146.719355][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.7.57 Not tainted syzkaller #0 PREEMPT(full) [ 146.728444][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 146.738481][ T6500] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 146.743936][ T6500] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b3 db 5a fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 15 [ 146.763525][ T6500] RSP: 0018:ffffc90002f2f708 EFLAGS: 00010212 [ 146.769578][ T6500] RAX: 00000000000000e6 RBX: ffff88806fcbc000 RCX: 0000000000080000 [ 146.777533][ T6500] RDX: ffffc9001f931000 RSI: 000000000002204e RDI: 000000000002204f [ 146.785486][ T6500] RBP: dffffc0000000000 R08: ffffffff907a137f R09: 1ffffffff20f426f [ 146.793443][ T6500] R10: dffffc0000000000 R11: fffffbfff20f4270 R12: 0000000000000730 [ 146.801397][ T6500] R13: dffffc0000000000 R14: ffff88806fcbc128 R15: dffffc0000000000 [ 146.809359][ T6500] FS: 00007f8d465216c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 146.818290][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.824863][ T6500] CR2: 00007fd57e343017 CR3: 00000000605f5000 CR4: 0000000000350ef0 [ 146.832820][ T6500] Call Trace: [ 146.836101][ T6500] [ 146.839026][ T6500] f_midi2_unbind+0x9b/0x340 [ 146.843629][ T6500] purge_configs_funcs+0x248/0x3d0 [ 146.848733][ T6500] configfs_composite_bind+0x106d/0x1410 [ 146.854383][ T6500] ? __pfx_configfs_composite_bind+0x10/0x10 [ 146.860375][ T6500] gadget_bind_driver+0x2ca/0x9e0 [ 146.865415][ T6500] ? __pfx_gadget_bind_driver+0x10/0x10 [ 146.870953][ T6500] really_probe+0x254/0xae0 [ 146.875445][ T6500] __driver_probe_device+0x1e8/0x360 [ 146.880718][ T6500] driver_probe_device+0x4f/0x240 [ 146.885731][ T6500] __driver_attach+0x339/0x600 [ 146.890492][ T6500] bus_for_each_dev+0x23b/0x2c0 [ 146.895333][ T6500] ? __pfx___driver_attach+0x10/0x10 [ 146.900631][ T6500] ? __pfx_bus_for_each_dev+0x10/0x10 [ 146.905998][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.911637][ T6500] ? do_raw_spin_unlock+0xf5/0x200 [ 146.916742][ T6500] bus_add_driver+0x345/0x670 [ 146.921412][ T6500] driver_register+0x23a/0x320 [ 146.926169][ T6500] usb_gadget_register_driver_owner+0xf9/0x270 [ 146.932315][ T6500] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 146.937941][ T6500] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 146.944092][ T6500] configfs_write_iter+0x337/0x430 [ 146.949209][ T6500] vfs_write+0x612/0xba0 [ 146.953455][ T6500] ? __pfx_vfs_write+0x10/0x10 [ 146.958243][ T6500] ? __fget_files+0x2a/0x420 [ 146.962868][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.968490][ T6500] ksys_write+0x150/0x270 [ 146.972813][ T6500] ? __pfx_ksys_write+0x10/0x10 [ 146.977665][ T6500] do_syscall_64+0x166/0x520 [ 146.982250][ T6500] ? trace_irq_disable+0x3b/0x140 [ 146.987258][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.993310][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.999189][ T6500] RIP: 0033:0x7f8d4559e159 [ 147.003588][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.023181][ T6500] RSP: 002b:00007f8d46521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.031587][ T6500] RAX: ffffffffffffffda RBX: 00007f8d45825fa0 RCX: 00007f8d4559e159 [ 147.039546][ T6500] RDX: 000000000000000b RSI: 0000200000000340 RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.047502][ T6500] RBP: 00007f8d45635024 R08: 0000000000000000 R09: 0000000000000000 [ 147.055457][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.063419][ T6500] R13: 00007f8d45826038 R14: 00007f8d45825fa0 R15: 00007ffded65fc08 [ 147.071402][ T6500] [ 147.074406][ T6500] Modules linked in: [ 147.081008][ T6500] ---[ end trace 0000000000000000 ]--- [ 147.153669][ T6500] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 147.153734][ T6500] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 b3 db 5a fa 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 15 [ 147.153770][ T6500] RSP: 0018:ffffc90002f2f708 EFLAGS: 00010212 [ 147.153803][ T6500] RAX: 00000000000000e6 RBX: ffff88806fcbc000 RCX: 0000000000080000 [ 147.153826][ T6500] RDX: ffffc9001f931000 RSI: 000000000002204e RDI: 000000000002204f [ 147.153849][ T6500] RBP: dffffc0000000000 R08: ffffffff907a137f R09: 1ffffffff20f426f [ 147.153874][ T6500] R10: dffffc0000000000 R11: fffffbfff20f4270 R12: 0000000000000730 [ 147.153897][ T6500] R13: dffffc0000000000 R14: ffff88806fcbc128 R15: dffffc0000000000 [ 147.153924][ T6500] FS: 00007f8d465216c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 147.153950][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.153973][ T6500] CR2: 00007fd581157e20 CR3: 00000000605f5000 CR4: 0000000000350ef0 [ 147.154000][ T6500] Kernel panic - not syncing: Fatal exception [ 147.254468][ T6500] Kernel Offset: disabled [ 147.258773][ T6500] Rebooting in 86400 seconds..