last executing test programs: 25.459408407s ago: executing program 0 (id=5): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) 25.384329039s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.866786031s ago: executing program 0 (id=15): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) 23.296715868s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r0, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) write(r1, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 22.420056382s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/module/nfsd/parameters/cltrack_prog\x00', 0x2, 0x0) write(r1, &(0x7f0000000b40)='/bin/true\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) 20.643592054s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902240001010080fa0904000002ffffff00090502020002000000090586020002000000"], 0x0) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem', 0x3) 20.643266369s ago: executing program 1 (id=26): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102000200070501020002000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 17.529970197s ago: executing program 1 (id=41): write(0xffffffffffffffff, &(0x7f0000001700)='tcp 2049\n', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r1, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) 17.529641605s ago: executing program 1 (id=42): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 14.459913048s ago: executing program 1 (id=46): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020240000007058602400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 11.430329703s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2,timeo=1,retrans=1,retry=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 10.098462289s ago: executing program 2 (id=56): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='tcp 20', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000340), 0x0) (async) 9.669383332s ago: executing program 1 (id=57): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) read(r0, &(0x7f0000000300)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000380)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000400)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000480)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000500)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000580)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000600)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0xfa}, 0x2) 8.359469995s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ed) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000500)='nfs\x00', 0x0, &(0x7f0000000540)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 7.406546319s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 6.899635472s ago: executing program 2 (id=63): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='172.20.20.24\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000000580)='4421\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4421\x00', 0x3c) 5.493623883s ago: executing program 32 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902240001010080fa0904000002ffffff00090502020002000000090586020002000000"], 0x0) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem', 0x3) 5.459785556s ago: executing program 3 (id=65): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=', 0xb1) 5.400298251s ago: executing program 3 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000800)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, &(0x7f0000000540)) 4.798155475s ago: executing program 3 (id=67): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"]}}, 0x0) nanosleep(&(0x7f0000000d00)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 4.631765794s ago: executing program 2 (id=68): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='tcp 20', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) (async) 3.900180133s ago: executing program 3 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/drivers/eeepc\x00', 0x0, 0x0) 3.89996028s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n', 0x1) 3.887810423s ago: executing program 4 (id=64): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x800) pwrite64(r0, &(0x7f0000001000)="444f5301", 0x4, 0x0) pwrite64(r0, &(0x7f0000001004)="00000002", 0x4, 0x400) pwrite64(r0, &(0x7f0000001008)="fffffff9", 0x4, 0x414) pwrite64(r0, &(0x7f000000100c)="00000001", 0x4, 0x538) pwrite64(r0, &(0x7f0000001010)="00000003", 0x4, 0x53c) pwrite64(r0, &(0x7f0000001014)="00000001", 0x4, 0x5fc) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) mount(&(0x7f0000004000)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./dir0\x00', &(0x7f0000005000)='affs\x00', 0x0, 0x0) 3.833814373s ago: executing program 4 (id=71): r0 = syz_usb_connect(0x0, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109027800030100c00009040000000101000009040001010101000007058303400001090401000001020000090401010101020000072401010101000b2402010203180144ac0007058101000201090402000001020000090402010101020000072401010101000b2402010203180144ac0007050201000201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) 1.530479579s ago: executing program 4 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='devices\n\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='mem\n\x00', 0x5) 59.153824ms ago: executing program 2 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/tty/ttyS3/type\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='4\x00', 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000500)={0x1}) write(r1, &(0x7f0000000600)='hello\x00', 0x5) 0s ago: executing program 2 (id=74): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46580' (ED25519) to the list of known hosts. [ 42.332003][ T5723] cgroup: Unknown subsys name 'net' [ 42.480543][ T5723] cgroup: Unknown subsys name 'cpuset' [ 42.486221][ T5723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.407690][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.135466][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.141142][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.143644][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.144552][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.147541][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.151779][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.153068][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.154413][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.155786][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.157267][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.157420][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.158253][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.158598][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.159813][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.161724][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.167190][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.167880][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.168547][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.171525][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.175643][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.661097][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.663883][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.666203][ T5740] bridge_slave_0: entered allmulticast mode [ 47.671167][ T5740] bridge_slave_0: entered promiscuous mode [ 47.690353][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.692858][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.695158][ T5740] bridge_slave_1: entered allmulticast mode [ 47.697976][ T5740] bridge_slave_1: entered promiscuous mode [ 47.755250][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.786776][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.807091][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.811532][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.814828][ T5752] bridge_slave_0: entered allmulticast mode [ 47.818885][ T5752] bridge_slave_0: entered promiscuous mode [ 47.825332][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.827748][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.829993][ T5752] bridge_slave_1: entered allmulticast mode [ 47.833246][ T5752] bridge_slave_1: entered promiscuous mode [ 47.854506][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.856822][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.859152][ T5741] bridge_slave_0: entered allmulticast mode [ 47.861803][ T5741] bridge_slave_0: entered promiscuous mode [ 47.865657][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.868001][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.870238][ T5741] bridge_slave_1: entered allmulticast mode [ 47.872907][ T5741] bridge_slave_1: entered promiscuous mode [ 47.917650][ T5740] team0: Port device team_slave_0 added [ 47.921796][ T5740] team0: Port device team_slave_1 added [ 47.926346][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.932692][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.936490][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.939531][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.942455][ T5747] bridge_slave_0: entered allmulticast mode [ 47.946151][ T5747] bridge_slave_0: entered promiscuous mode [ 47.950755][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.953709][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.956506][ T5747] bridge_slave_1: entered allmulticast mode [ 47.959421][ T5747] bridge_slave_1: entered promiscuous mode [ 47.963080][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.995798][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.999326][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.001574][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.009598][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.014599][ T5752] team0: Port device team_slave_0 added [ 48.029692][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.031978][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.040086][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.044861][ T5752] team0: Port device team_slave_1 added [ 48.048101][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.052679][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.084999][ T5741] team0: Port device team_slave_0 added [ 48.089051][ T5741] team0: Port device team_slave_1 added [ 48.101797][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.104027][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.112528][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.123308][ T5747] team0: Port device team_slave_0 added [ 48.131635][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.133820][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.141903][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.152995][ T5747] team0: Port device team_slave_1 added [ 48.158350][ T5740] hsr_slave_0: entered promiscuous mode [ 48.160693][ T5740] hsr_slave_1: entered promiscuous mode [ 48.167503][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.169765][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.177964][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.187472][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.189706][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.197740][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.217214][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.219479][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.227792][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.250248][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.252620][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.260805][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.279304][ T5741] hsr_slave_0: entered promiscuous mode [ 48.281541][ T5741] hsr_slave_1: entered promiscuous mode [ 48.283654][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.285503][ T5741] Cannot create hsr debugfs directory [ 48.296312][ T5752] hsr_slave_0: entered promiscuous mode [ 48.298910][ T5752] hsr_slave_1: entered promiscuous mode [ 48.301501][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 48.303308][ T5752] Cannot create hsr debugfs directory [ 48.385366][ T5747] hsr_slave_0: entered promiscuous mode [ 48.388501][ T5747] hsr_slave_1: entered promiscuous mode [ 48.390685][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.392494][ T5747] Cannot create hsr debugfs directory [ 48.582390][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.589960][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.593372][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.597726][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.601092][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.606275][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.616269][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.621423][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.654066][ T5752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.659855][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.663900][ T5752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.668640][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.671515][ T5752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.676629][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.680158][ T5752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.685668][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.753575][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.759960][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.763602][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.769918][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.773422][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.779602][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.788880][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.794486][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.839796][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.843962][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.848728][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.856925][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.860759][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.866291][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.870875][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.873586][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.878131][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.886318][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.904991][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.914876][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.917576][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.931994][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.939831][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.942163][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.952972][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.955269][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.975786][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.978248][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.004279][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.021939][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.033692][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.036031][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.043739][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.065460][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.067903][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.087789][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.104921][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.113363][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115697][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.122161][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.132876][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.135182][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.227515][ T5101] Bluetooth: hci3: command tx timeout [ 49.227520][ T64] Bluetooth: hci1: command tx timeout [ 49.227813][ T5744] Bluetooth: hci2: command tx timeout [ 49.227819][ T64] Bluetooth: hci0: command tx timeout [ 49.305261][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.314682][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.343739][ T5740] veth0_vlan: entered promiscuous mode [ 49.358325][ T5740] veth1_vlan: entered promiscuous mode [ 49.363376][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.370221][ T5752] veth0_vlan: entered promiscuous mode [ 49.377373][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.389444][ T5752] veth1_vlan: entered promiscuous mode [ 49.408457][ T5740] veth0_macvtap: entered promiscuous mode [ 49.415548][ T5740] veth1_macvtap: entered promiscuous mode [ 49.441723][ T5752] veth0_macvtap: entered promiscuous mode [ 49.447141][ T5752] veth1_macvtap: entered promiscuous mode [ 49.450771][ T5747] veth0_vlan: entered promiscuous mode [ 49.455244][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.469319][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.477034][ T5741] veth0_vlan: entered promiscuous mode [ 49.480475][ T5747] veth1_vlan: entered promiscuous mode [ 49.484052][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.495923][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.499287][ T5741] veth1_vlan: entered promiscuous mode [ 49.527400][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541057][ T5747] veth0_macvtap: entered promiscuous mode [ 49.548026][ T5747] veth1_macvtap: entered promiscuous mode [ 49.567455][ T5741] veth0_macvtap: entered promiscuous mode [ 49.572543][ T5741] veth1_macvtap: entered promiscuous mode [ 49.583136][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.589458][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.599086][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.613714][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.616808][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.624782][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.630102][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.636103][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.649244][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.650714][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.656835][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.678957][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.687062][ T5740] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.688142][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.692785][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.700920][ T5740] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.708916][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.709952][ T5740] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.738397][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.741148][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.749443][ T5740] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.772288][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.783415][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.807652][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.812079][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.830361][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.834849][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.842031][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.845244][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.867182][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.872922][ T5744] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 49.876157][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.876226][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.881718][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 49.881735][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.881751][ T5744] Workqueue: hci3 hci_rx_work [ 49.881777][ T5744] Call Trace: [ 49.881796][ T5744] [ 49.881800][ T5744] dump_stack_lvl+0x100/0x190 [ 49.881817][ T5744] sysfs_warn_dup.cold+0x1c/0x28 [ 49.881835][ T5744] sysfs_create_dir_ns+0x24b/0x2b0 [ 49.881854][ T5744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 49.881871][ T5744] ? find_held_lock+0x2b/0x80 [ 49.881885][ T5744] ? kobject_add_internal+0x25f/0x930 [ 49.881897][ T5744] ? kobject_add_internal+0x25f/0x930 [ 49.881909][ T5744] ? do_raw_spin_unlock+0x145/0x1e0 [ 49.881924][ T5744] kobject_add_internal+0x2c8/0x930 [ 49.881943][ T5744] kobject_add+0x16a/0x1e0 [ 49.881955][ T5744] ? __pfx_kobject_add+0x10/0x10 [ 49.881966][ T5744] ? class_to_subsys+0x10f/0x150 [ 49.881981][ T5744] ? kobject_put+0xb9/0x640 [ 49.881997][ T5744] ? _raw_spin_unlock+0x28/0x50 [ 49.882014][ T5744] device_add+0x294/0x1970 [ 49.882026][ T5744] ? __pfx_dev_set_name+0x10/0x10 [ 49.882039][ T5744] ? __pfx_device_add+0x10/0x10 [ 49.882050][ T5744] ? mgmt_send_event_skb+0x2fb/0x460 [ 49.882068][ T5744] hci_conn_add_sysfs+0x1a3/0x260 [ 49.882084][ T5744] le_conn_complete_evt+0x11eb/0x1f60 [ 49.882102][ T5744] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 49.882115][ T5744] ? hci_event_packet+0x186/0xcd0 [ 49.882131][ T5744] hci_le_conn_complete_evt+0x23c/0x3a0 [ 49.882146][ T5744] ? skb_pull_data+0x15f/0x1e0 [ 49.882159][ T5744] hci_le_meta_evt+0x34a/0x5f0 [ 49.882175][ T5744] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 49.882190][ T5744] hci_event_packet+0x51c/0xcd0 [ 49.882204][ T5744] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 49.882219][ T5744] ? __pfx_hci_event_packet+0x10/0x10 [ 49.882233][ T5744] ? kcov_remote_start+0x384/0x670 [ 49.882249][ T5744] ? lockdep_hardirqs_on+0x78/0x100 [ 49.882271][ T5744] hci_rx_work+0x451/0xfc0 [ 49.882294][ T5744] process_one_work+0xa23/0x1940 [ 49.882326][ T5744] ? __pfx_process_one_work+0x10/0x10 [ 49.882358][ T5744] ? __pfx_hci_rx_work+0x10/0x10 [ 49.882382][ T5744] worker_thread+0x5ef/0xe50 [ 49.882416][ T5744] ? kthread+0x13a/0x450 [ 49.882433][ T5744] ? __pfx_worker_thread+0x10/0x10 [ 49.882448][ T5744] kthread+0x370/0x450 [ 49.882462][ T5744] ? __pfx_kthread+0x10/0x10 [ 49.882477][ T5744] ret_from_fork+0x72b/0xd50 [ 49.882491][ T5744] ? __pfx_ret_from_fork+0x10/0x10 [ 49.882504][ T5744] ? native_load_gs_index+0x1e/0xc0 [ 49.882520][ T5744] ? __switch_to+0x800/0x10f0 [ 49.882537][ T5744] ? __pfx_kthread+0x10/0x10 [ 49.882552][ T5744] ret_from_fork_asm+0x1a/0x30 [ 49.882573][ T5744] [ 49.882590][ T5744] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 49.900859][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901600][ T5744] Bluetooth: hci3: failed to register connection device [ 49.918009][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.998675][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.017733][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023126][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.026370][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.029398][ T5906] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 50.035487][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.056889][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.069745][ T5900] sl0: header compression turned on [ 50.269688][ T5920] lo speed is unknown, defaulting to 1000 [ 50.272380][ T5920] lo speed is unknown, defaulting to 1000 [ 50.275367][ T5920] lo speed is unknown, defaulting to 1000 [ 50.278120][ T5920] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.282556][ T5920] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.288957][ T5920] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.293650][ T5920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.300723][ T5920] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.306936][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.318617][ T5920] lo speed is unknown, defaulting to 1000 [ 50.321736][ T5920] lo speed is unknown, defaulting to 1000 [ 50.324670][ T5920] lo speed is unknown, defaulting to 1000 [ 50.327736][ T5920] lo speed is unknown, defaulting to 1000 [ 50.330720][ T5920] lo speed is unknown, defaulting to 1000 [ 50.398087][ T5833] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 50.400889][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.459621][ T29] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 50.462868][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.540351][ T5938] kAFS: unable to lookup cell 'syz0' [ 50.569378][ T5833] usb 5-1: not running at top speed; connect to a high speed hub [ 50.573317][ T5833] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 50.576068][ T5833] usb 5-1: config 0 has no interface number 0 [ 50.578419][ T5833] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 50.581206][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.604377][ T5848] lo speed is unknown, defaulting to 1000 [ 50.610220][ T5833] usb 5-1: config 0 descriptor?? [ 50.611147][ T5848] syz0: Port: 1 Link DOWN [ 50.613320][ T1166] smbdirect: ib_dev[syz0] removed [ 50.738572][ T5833] viperboard 5-1:0.143: version 0.00 found at bus 005 address 002 [ 50.754619][ T5833] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 50.759929][ T5833] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 50.959498][ T5916] usb 1-1: reset high-speed USB device number 2 using ehci-pci [ 51.003270][ T42] audit: type=1800 audit(1785863589.064:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="local" dev="configfs" ino=9004 res=0 errno=0 [ 51.009521][ T42] audit: type=1800 audit(1785863589.064:3): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="nodeid" dev="configfs" ino=9005 res=0 errno=0 [ 51.159377][ T5847] usb 5-1: USB disconnect, device number 2 [ 51.208946][ T5952] loop1: detected capacity change from 0 to 2048 [ 51.229230][ T5952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.290272][ T5952] md: invalid superblock checksum on loop1 [ 51.292389][ T5952] md: loop1 does not have a valid v1.1 superblock, not importing! [ 51.308630][ T5744] Bluetooth: hci2: command tx timeout [ 51.308642][ T5756] Bluetooth: hci3: command tx timeout [ 51.317078][ T5756] Bluetooth: hci0: command tx timeout [ 51.317553][ T5744] Bluetooth: hci1: command tx timeout [ 51.350120][ T42] audit: type=1800 audit(1785863589.414:4): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13" name="UDC" dev="configfs" ino=7827 res=0 errno=0 [ 51.637071][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.690282][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.693833][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.757159][ T5943] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.760754][ T5943] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.763790][ T5943] NFSD: starting 90-second grace period (net f000047d) [ 51.809048][ T5848] usb 5-1: Dual-Role OTG device on HNP port [ 51.812280][ T5848] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 51.815931][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.826815][ T5848] gspca_main: spca501-2.14.0 probing 0000:0000 [ 51.830094][ T5848] gspca_spca501: reg write: error -32 [ 51.832142][ T5848] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 51.834874][ T5848] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 51.946942][ T103] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.119483][ T103] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 52.122385][ T103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.131565][ T103] pvrusb2: Hardware description: Terratec Grabster AV400 [ 52.137127][ T103] pvrusb2: ********** [ 52.138455][ T103] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 52.141601][ T103] pvrusb2: Important functionality might not be entirely working. [ 52.144006][ T103] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 52.147559][ T103] pvrusb2: ********** [ 52.526812][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.699322][ T5848] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 52.704880][ T5848] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 52.707992][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.710513][ T5848] usb 6-1: Product: syz [ 52.711900][ T5848] usb 6-1: Manufacturer: syz [ 52.713404][ T5848] usb 6-1: SerialNumber: syz [ 52.725296][ T5848] go7007 6-1:1.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 52.728488][ T5848] go7007 6-1:1.0: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 53.386802][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 53.386976][ T5756] Bluetooth: hci0: command tx timeout [ 53.396795][ T5756] Bluetooth: hci1: command tx timeout [ 53.396810][ T5744] Bluetooth: hci2: command tx timeout [ 53.691344][ T2513] pvrusb2: Module ID 2 (cx25840) for device Terratec Grabster AV400 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 53.696607][ T2513] pvrusb2: Device being rendered inoperable [ 53.699945][ T2513] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 53.704207][ T2513] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 53.927752][ T29] usbhid 8-1:1.0: can't add hid device: -71 [ 53.929693][ T29] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 53.934559][ T29] usb 8-1: USB disconnect, device number 2 [ 53.964819][ T42] audit: type=1800 audit(1785863592.024:5): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="idVendor" dev="configfs" ino=7844 res=0 errno=0 [ 53.971901][ T42] audit: type=1800 audit(1785863592.024:6): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="idProduct" dev="configfs" ino=7845 res=0 errno=0 [ 53.980183][ T42] audit: type=1800 audit(1785863592.024:7): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="UDC" dev="configfs" ino=7846 res=0 errno=0 [ 54.336905][ T5978] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.340111][ T5978] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.342949][ T5978] NFSD: starting 90-second grace period (net f000058a) [ 54.825085][ T5998] nvme_fabrics: unknown parameter or missing value 'reconnect_del' in ctrl creation request [ 54.865694][ T6001] Zero length message leads to an empty skb [ 54.921886][ T6003] PM: suspend entry (deep) [ 54.939920][ T6005] kAFS: unable to lookup cell 'syz0' [ 54.964026][ T5856] Filesystems sync: 0.037 seconds [ 55.114613][ T6010] infiniband syz2: set active [ 55.116742][ T6010] infiniband syz2: added syz_tun [ 55.132007][ T6010] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 55.138160][ T6010] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 55.144017][ T6010] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 55.161558][ T6010] RDS/IB: syz2: added [ 55.163336][ T6010] smc: adding ib device syz2 with port count 1 [ 55.165927][ T6010] smc: ib device syz2 port 1 has no pnetid [ 55.466948][ T5744] Bluetooth: hci1: command tx timeout [ 55.466991][ T5756] Bluetooth: hci2: command tx timeout [ 55.469817][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 55.876173][ T1355] usb 7-1: USB disconnect, device number 2 [ 55.877258][ T103] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.029871][ T103] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 56.033045][ T103] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 56.036152][ T103] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 56.039484][ T103] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 56.042541][ T103] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 56.045388][ T103] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.051281][ T6016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.053673][ T6016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.056106][ T6016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.058652][ T6016] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.065935][ T103] cxacru 8-1:1.0: send of cm 0x90 failed (-71) [ 56.070061][ T6022] cxacru 8-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 56.073735][ T6022] cxacru 8-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 56.226840][ T1355] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.378598][ T1355] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 56.382471][ T1355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.392515][ T1355] usbtest 7-1:1.0: Linux gadget zero [ 56.394790][ T1355] usbtest 7-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 56.597894][ T103] usb 7-1: USB disconnect, device number 3 [ 57.146792][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.147471][ T6003] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 57.182112][ T6029] nvme_fabrics: unknown parameter or missing value 'reconnect_del' in ctrl creation request [ 57.270360][ T1355] usb 8-1: USB disconnect, device number 3 [ 57.546819][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 57.912910][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.919434][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.924147][ T6003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.926150][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.930415][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.933364][ T6003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.935354][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.939160][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.942280][ T6003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.944248][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.947851][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.950807][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.606793][ T6040] NFSD: Unable to initialize client recovery tracking! (-110) [ 58.609255][ T6040] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 58.612169][ T6040] NFSD: starting 90-second grace period (net f00003f7) [ 58.930178][ T6056] nvme_fabrics: unknown parameter or missing value 'reconnect_del' in ctrl creation request [ 58.973921][ T6058] vivid-000: unregistering video7 [ 58.978463][ T6058] vivid-000: unregistering video8 [ 58.982890][ T6058] vivid-000: unregistering vbi0 [ 59.005844][ T6058] vivid-000: unregistering vbi1 [ 59.013050][ T6058] vivid-000: unregistering swradio0 [ 59.018654][ T6058] vivid-000: unregistering radio0 [ 59.022190][ T6058] vivid-000: unregistering radio1 [ 59.033219][ T6058] vivid-000: unregistering video9 [ 59.040627][ T6058] vivid-000: unregistering video10 [ 59.050058][ T6058] vivid-000: unregistering v4l-touch0 [ 59.076620][ T6060] vim2m vim2m.0: Removing vim2m [ 59.094346][ T6060] vicodec vicodec.0: Removing vicodec [ 59.115924][ T6058] vivid-001: unregistering video11 [ 59.120507][ T6058] vivid-001: unregistering video12 [ 59.123365][ T6058] vivid-001: unregistering vbi2 [ 59.127430][ T6058] vivid-001: unregistering vbi3 [ 59.147522][ T6058] vivid-001: unregistering swradio1 [ 59.160446][ T6058] vivid-001: unregistering radio2 [ 59.163489][ T6058] vivid-001: unregistering radio3 [ 59.168195][ T6058] vivid-001: unregistering video13 [ 59.171468][ T6058] vivid-001: unregistering video14 [ 59.175107][ T6058] vivid-001: unregistering v4l-touch1 [ 59.219663][ T6058] vivid-002: unregistering video15 [ 59.222421][ T6058] vivid-002: unregistering video16 [ 59.225089][ T6058] vivid-002: unregistering vbi4 [ 59.226817][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.237889][ T6058] vivid-002: unregistering vbi5 [ 59.250120][ T6058] vivid-002: unregistering swradio2 [ 59.256617][ T6058] vivid-002: unregistering radio4 [ 59.261517][ T6058] vivid-002: unregistering radio5 [ 59.264276][ T6058] vivid-002: unregistering video17 [ 59.270987][ T6058] vivid-002: unregistering video18 [ 59.278728][ T6058] vivid-002: unregistering v4l-touch2 [ 59.301626][ T6058] vivid-003: unregistering video19 [ 59.304695][ T6058] vivid-003: unregistering video20 [ 59.308347][ T6058] vivid-003: unregistering vbi6 [ 59.311957][ T6058] vivid-003: unregistering vbi7 [ 59.316333][ T6058] vivid-003: unregistering swradio3 [ 59.331262][ T6058] vivid-003: unregistering radio6 [ 59.336947][ T6058] vivid-003: unregistering radio7 [ 59.339424][ T6058] vivid-003: unregistering video21 [ 59.341888][ T6058] vivid-003: unregistering video22 [ 59.346819][ T6058] vivid-003: unregistering v4l-touch3 [ 59.377562][ T847] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.383305][ T6058] vivid-004: unregistering video23 [ 59.386030][ T6058] vivid-004: unregistering video24 [ 59.392326][ T6058] vivid-004: unregistering vbi8 [ 59.400488][ T6058] vivid-004: unregistering vbi9 [ 59.406203][ T6058] vivid-004: unregistering swradio4 [ 59.414369][ T6058] vivid-004: unregistering radio8 [ 59.422369][ T6058] vivid-004: unregistering radio9 [ 59.426484][ T6058] vivid-004: unregistering video25 [ 59.429141][ T6058] vivid-004: unregistering video26 [ 59.434095][ T6058] vivid-004: unregistering v4l-touch4 [ 59.461005][ T6058] vivid-005: unregistering video27 [ 59.463704][ T6058] vivid-005: unregistering video28 [ 59.466367][ T6058] vivid-005: unregistering vbi10 [ 59.471315][ T6058] vivid-005: unregistering vbi11 [ 59.474490][ T6058] vivid-005: unregistering swradio5 [ 59.483841][ T6058] vivid-005: unregistering radio10 [ 59.489153][ T6058] vivid-005: unregistering radio11 [ 59.494258][ T6058] vivid-005: unregistering video29 [ 59.497970][ T6058] vivid-005: unregistering video30 [ 59.500941][ T6058] vivid-005: unregistering v4l-touch5 [ 59.524616][ T6058] vivid-006: unregistering video31 [ 59.527632][ T6058] vivid-006: unregistering video32 [ 59.529489][ T847] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 59.530139][ T6058] vivid-006: unregistering vbi12 [ 59.534276][ T847] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 59.536553][ T6058] vivid-006: unregistering vbi13 [ 59.537136][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.537148][ T847] usb 7-1: Product: syz [ 59.537156][ T847] usb 7-1: Manufacturer: syz [ 59.537164][ T847] usb 7-1: SerialNumber: syz [ 59.550475][ T6058] vivid-006: unregistering swradio6 [ 59.560953][ T6059] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 59.562081][ T6058] vivid-006: unregistering radio12 [ 59.566644][ T6058] vivid-006: unregistering radio13 [ 59.569576][ T847] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 59.569774][ T6058] vivid-006: unregistering video33 [ 59.574207][ T6058] vivid-006: unregistering video34 [ 59.575681][ T847] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 59.578094][ T6058] vivid-006: unregistering v4l-touch6 [ 59.618135][ T6058] vivid-007: unregistering video35 [ 59.621203][ T6058] vivid-007: unregistering video36 [ 59.627441][ T6058] vivid-007: unregistering vbi14 [ 59.633961][ T6058] vivid-007: unregistering vbi15 [ 59.637810][ T6058] vivid-007: unregistering swradio7 [ 59.654100][ T6058] vivid-007: unregistering radio14 [ 59.657511][ T6058] vivid-007: unregistering radio15 [ 59.660261][ T6058] vivid-007: unregistering video37 [ 59.662422][ T6058] vivid-007: unregistering video38 [ 59.667465][ T6058] vivid-007: unregistering v4l-touch7 [ 59.699969][ T6058] vivid-008: unregistering video39 [ 59.704318][ T6058] vivid-008: unregistering video40 [ 59.711015][ T6058] vivid-008: unregistering vbi16 [ 59.715092][ T6058] vivid-008: unregistering vbi17 [ 59.724196][ T6058] vivid-008: unregistering swradio8 [ 59.733497][ T6058] vivid-008: unregistering radio16 [ 59.736425][ T6058] vivid-008: unregistering radio17 [ 59.739684][ T6058] vivid-008: unregistering video41 [ 59.742366][ T6058] vivid-008: unregistering video42 [ 59.747640][ T6058] vivid-008: unregistering v4l-touch8 [ 59.781037][ T6058] vivid-009: unregistering video43 [ 59.784228][ T6058] vivid-009: unregistering video44 [ 59.787816][ T6058] vivid-009: unregistering vbi18 [ 59.792645][ T6058] vivid-009: unregistering vbi19 [ 59.798136][ T6058] vivid-009: unregistering swradio9 [ 59.813581][ T6058] vivid-009: unregistering radio18 [ 59.816814][ T6058] vivid-009: unregistering radio19 [ 59.820217][ T6058] vivid-009: unregistering video45 [ 59.823604][ T6058] vivid-009: unregistering video46 [ 59.827232][ T6058] vivid-009: unregistering v4l-touch9 [ 59.853507][ T6058] vivid-010: unregistering video47 [ 59.855829][ T6058] vivid-010: unregistering video48 [ 59.858431][ T6058] vivid-010: unregistering vbi20 [ 59.863948][ T6058] vivid-010: unregistering vbi21 [ 59.870051][ T6058] vivid-010: unregistering swradio10 [ 59.877447][ T6058] vivid-010: unregistering radio20 [ 59.882618][ T6058] vivid-010: unregistering radio21 [ 59.885714][ T6058] vivid-010: unregistering video49 [ 59.889951][ T6058] vivid-010: unregistering video50 [ 59.893223][ T6058] vivid-010: unregistering v4l-touch10 [ 59.917289][ T6058] vivid-011: unregistering video51 [ 59.919801][ T6058] vivid-011: unregistering video52 [ 59.924820][ T6058] vivid-011: unregistering vbi22 [ 59.933297][ T6058] vivid-011: unregistering vbi23 [ 59.938765][ T6058] vivid-011: unregistering swradio11 [ 59.943549][ T6058] vivid-011: unregistering radio22 [ 59.947411][ T5744] Bluetooth: hci3: command 0x040f tx timeout [ 59.948181][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.950855][ T5756] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.953843][ T6058] vivid-011: unregistering radio23 [ 59.957692][ T6058] vivid-011: unregistering video53 [ 59.964095][ T6058] vivid-011: unregistering video54 [ 59.968220][ T6058] vivid-011: unregistering v4l-touch11 [ 60.000210][ T6058] vivid-012: unregistering video55 [ 60.003192][ T6058] vivid-012: unregistering video56 [ 60.006766][ T6058] vivid-012: unregistering vbi24 [ 60.014271][ T6058] vivid-012: unregistering vbi25 [ 60.019743][ T6058] vivid-012: unregistering swradio12 [ 60.023630][ T6058] vivid-012: unregistering radio24 [ 60.029324][ T6058] vivid-012: unregistering radio25 [ 60.033250][ T6058] vivid-012: unregistering video57 [ 60.035824][ T6058] vivid-012: unregistering video58 [ 60.039164][ T6058] vivid-012: unregistering v4l-touch12 [ 60.069427][ T6058] vivid-013: unregistering video59 [ 60.075865][ T6058] vivid-013: unregistering video60 [ 60.080075][ T6058] vivid-013: unregistering vbi26 [ 60.084730][ T6058] vivid-013: unregistering vbi27 [ 60.088703][ T6058] vivid-013: unregistering swradio13 [ 60.100618][ T6058] vivid-013: unregistering radio26 [ 60.103058][ T6058] vivid-013: unregistering radio27 [ 60.106237][ T6058] vivid-013: unregistering video61 [ 60.110422][ T6058] vivid-013: unregistering video62 [ 60.114425][ T6058] vivid-013: unregistering v4l-touch13 [ 60.143177][ T6058] vivid-014: unregistering video63 [ 60.146178][ T6058] vivid-014: unregistering video64 [ 60.152245][ T6058] vivid-014: unregistering vbi28 [ 60.159174][ T6058] vivid-014: unregistering vbi29 [ 60.162869][ T6058] vivid-014: unregistering swradio14 [ 60.166345][ T6058] vivid-014: unregistering radio28 [ 60.170734][ T6058] vivid-014: unregistering radio29 [ 60.177268][ T6058] vivid-014: unregistering video65 [ 60.179876][ T6058] vivid-014: unregistering video66 [ 60.183463][ T6058] vivid-014: unregistering v4l-touch14 [ 60.219214][ T6058] vivid-015: unregistering video67 [ 60.222307][ T6058] vivid-015: unregistering video68 [ 60.225991][ T6058] vivid-015: unregistering vbi30 [ 60.233768][ T6058] vivid-015: unregistering vbi31 [ 60.236974][ T6058] vivid-015: unregistering swradio15 [ 60.240592][ T6058] vivid-015: unregistering radio30 [ 60.243531][ T6058] vivid-015: unregistering radio31 [ 60.246471][ T6058] vivid-015: unregistering video69 [ 60.249163][ T6058] vivid-015: unregistering video70 [ 60.251664][ T6058] vivid-015: unregistering v4l-touch15 [ 60.278830][ T6058] vivid-016: unregistering video71 [ 60.281981][ T6058] vivid-016: unregistering video72 [ 60.285999][ T6058] vivid-016: unregistering vbi32 [ 60.292680][ T6058] vivid-016: unregistering vbi33 [ 60.295472][ T6058] vivid-016: unregistering swradio16 [ 60.299233][ T6058] vivid-016: unregistering radio32 [ 60.302501][ T6058] vivid-016: unregistering radio33 [ 60.305674][ T6058] vivid-016: unregistering video73 [ 60.308367][ T6058] vivid-016: unregistering video74 [ 60.313476][ T6058] vivid-016: unregistering v4l-touch16 [ 60.333743][ T6058] vivid-017: unregistering video75 [ 60.336186][ T6058] vivid-017: unregistering video76 [ 60.339654][ T6058] vivid-017: unregistering vbi34 [ 60.346406][ T6058] vivid-017: unregistering vbi35 [ 60.350298][ T6058] vivid-017: unregistering swradio17 [ 60.353417][ T6058] vivid-017: unregistering radio34 [ 60.356178][ T6058] vivid-017: unregistering radio35 [ 60.359815][ T6058] vivid-017: unregistering video77 [ 60.362164][ T6058] vivid-017: unregistering video78 [ 60.365082][ T6058] vivid-017: unregistering v4l-touch17 [ 60.385857][ T6058] vivid-018: unregistering video79 [ 60.388290][ T6058] vivid-018: unregistering video80 [ 60.393165][ T6058] vivid-018: unregistering vbi36 [ 60.396559][ T6058] vivid-018: unregistering vbi37 [ 60.399815][ T6058] vivid-018: unregistering swradio18 [ 60.404912][ T6058] vivid-018: unregistering radio36 [ 60.407439][ T6058] vivid-018: unregistering radio37 [ 60.409719][ T6058] vivid-018: unregistering video81 [ 60.411952][ T6058] vivid-018: unregistering video82 [ 60.414205][ T6058] vivid-018: unregistering v4l-touch18 [ 60.433488][ T6058] vivid-019: unregistering video83 [ 60.435771][ T6058] vivid-019: unregistering video84 [ 60.439779][ T6058] vivid-019: unregistering vbi38 [ 60.443230][ T6058] vivid-019: unregistering vbi39 [ 60.446060][ T6058] vivid-019: unregistering swradio19 [ 60.449727][ T6058] vivid-019: unregistering radio38 [ 60.452036][ T6058] vivid-019: unregistering radio39 [ 60.454367][ T6058] vivid-019: unregistering video85 [ 60.456577][ T6058] vivid-019: unregistering video86 [ 60.461537][ T6058] vivid-019: unregistering v4l-touch19 [ 60.484718][ T6058] vivid-020: unregistering video87 [ 60.487733][ T6058] vivid-020: unregistering video88 [ 60.489982][ T6058] vivid-020: unregistering vbi40 [ 60.493667][ T6058] vivid-020: unregistering vbi41 [ 60.496069][ T6058] vivid-020: unregistering swradio20 [ 60.500016][ T6058] vivid-020: unregistering radio40 [ 60.502279][ T6058] vivid-020: unregistering radio41 [ 60.504569][ T6058] vivid-020: unregistering video89 [ 60.506989][ T6058] vivid-020: unregistering video90 [ 60.509348][ T6058] vivid-020: unregistering v4l-touch20 [ 60.530765][ T6058] vivid-021: unregistering video91 [ 60.533115][ T6058] vivid-021: unregistering video92 [ 60.535861][ T6058] vivid-021: unregistering vbi42 [ 60.540792][ T6058] vivid-021: unregistering vbi43 [ 60.543481][ T6058] vivid-021: unregistering swradio21 [ 60.546249][ T6058] vivid-021: unregistering radio42 [ 60.550149][ T6058] vivid-021: unregistering radio43 [ 60.552964][ T6058] vivid-021: unregistering video93 [ 60.555573][ T6058] vivid-021: unregistering video94 [ 60.557957][ T6058] vivid-021: unregistering v4l-touch21 [ 60.577452][ T6058] vivid-022: unregistering video95 [ 60.579885][ T6058] vivid-022: unregistering video96 [ 60.582959][ T6058] vivid-022: unregistering vbi44 [ 60.586277][ T6058] vivid-022: unregistering vbi45 [ 60.590523][ T6058] vivid-022: unregistering swradio22 [ 60.593134][ T6058] vivid-022: unregistering radio44 [ 60.595402][ T6058] vivid-022: unregistering radio45 [ 60.598086][ T6058] vivid-022: unregistering video97 [ 60.600889][ T6058] vivid-022: unregistering video98 [ 60.604219][ T6058] vivid-022: unregistering v4l-touch22 [ 60.624681][ T6058] vivid-023: unregistering video99 [ 60.628941][ T6058] vivid-023: unregistering video100 [ 60.631348][ T6058] vivid-023: unregistering vbi46 [ 60.634621][ T6058] vivid-023: unregistering vbi47 [ 60.636893][ T6058] vivid-023: unregistering swradio23 [ 60.639449][ T6058] vivid-023: unregistering radio46 [ 60.641785][ T6058] vivid-023: unregistering radio47 [ 60.644109][ T6058] vivid-023: unregistering video101 [ 60.646382][ T6058] vivid-023: unregistering video102 [ 60.650957][ T6058] vivid-023: unregistering v4l-touch23 [ 60.775437][ T9] usb 7-1: USB disconnect, device number 4 [ 61.094101][ T6071] PM: suspend entry (s2idle) [ 61.095740][ T6071] PM: suspend exit [ 61.309523][ T5756] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.576849][ T5847] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 61.728246][ T5847] usb 7-1: not running at top speed; connect to a high speed hub [ 61.733060][ T5847] usb 7-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00 [ 61.735981][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.739138][ T5847] usb 7-1: Product: syz [ 61.740573][ T5847] usb 7-1: Manufacturer: syz [ 61.742055][ T5847] usb 7-1: SerialNumber: syz [ 61.747587][ T5847] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 62.026921][ T5756] Bluetooth: hci3: command 0x040f tx timeout [ 62.026941][ T5101] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.028545][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.907262][ T5847] gspca_zc3xx: reg_r err -110 [ 64.107145][ T5101] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.107216][ T5756] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.116814][ T5756] Bluetooth: hci3: command 0x040f tx timeout [ 64.216497][ T6086] nvme_fabrics: unknown parameter or missing value 'reconnect_delay=' in ctrl creation request [ 64.496771][ T5847] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 64.499277][ T5847] gspca_zc3xx 7-1:1.0: probe with driver gspca_zc3xx failed with error -110 [ 64.590264][ T29] usb 7-1: USB disconnect, device number 5 [ 64.874797][ T6099] infiniband syz0: set active [ 64.877348][ T6099] infiniband syz0: added syz_tun [ 64.885199][ T6099] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 64.889985][ T6099] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 64.895267][ T6099] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 64.920474][ T6099] RDS/IB: syz0: added [ 64.922968][ T6099] smc: adding ib device syz0 with port count 1 [ 64.924992][ T6099] smc: ib device syz0 port 1 has no pnetid [ 65.216828][ T6082] NFSD: Unable to initialize client recovery tracking! (-110) [ 65.219527][ T6082] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 65.222756][ T6082] NFSD: starting 90-second grace period (net f000047d) [ 66.186893][ T5756] Bluetooth: hci3: command 0x040f tx timeout [ 66.916912][ T6092] NFSD: Unable to initialize client recovery tracking! (-110) [ 66.920086][ T6092] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 66.923791][ T6092] NFSD: starting 90-second grace period (net f0000503) [ 67.248344][ T42] audit: type=1800 audit(1785863605.314:8): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="enable" dev="configfs" ino=8016 res=0 errno=0 [ 67.254620][ T42] audit: type=1800 audit(1785863605.314:9): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="idVendor" dev="configfs" ino=8017 res=0 errno=0 [ 67.261244][ T42] audit: type=1800 audit(1785863605.314:10): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="idProduct" dev="configfs" ino=8018 res=0 errno=0 [ 67.266664][ T6118] se_device not configured yet, cannot port link [ 67.280313][ T42] audit: type=1800 audit(1785863605.344:11): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="nexus" dev="configfs" ino=10581 res=0 errno=0 [ 67.288579][ T42] audit: type=1800 audit(1785863605.344:12): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="enable" dev="configfs" ino=9964 res=0 errno=0 [ 67.296508][ T42] audit: type=1800 audit(1785863605.344:13): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="UDC" dev="configfs" ino=9965 res=0 errno=0 [ 68.326832][ T6116] NFSD: Unable to initialize client recovery tracking! (-110) [ 68.329302][ T6116] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 68.332372][ T6116] NFSD: starting 10-second grace period (net f00003f7) [ 69.727009][ T6130] NFSD: Unable to initialize client recovery tracking! (-110) [ 69.729503][ T6130] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 69.732444][ T6130] NFSD: starting 10-second grace period (net f0000503) [ 70.050241][ T6134] rdma_rxe: rxe_newlink: failed to add veth0 [ 70.079198][ T6137] nvme_fabrics: unknown parameter or missing value 'reconnect_delay=' in ctrl creation request [ 70.111701][ T42] audit: type=1800 audit(1785863608.174:14): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="attr_allow_any_host" dev="configfs" ino=9201 res=0 errno=0 [ 70.112070][ T6138] nvmet: adding nsid 1 to subsystem testnqn [ 70.132644][ T42] audit: type=1800 audit(1785863608.194:15): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="device_path" dev="configfs" ino=8051 res=0 errno=0 [ 70.136583][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.139478][ T42] audit: type=1800 audit(1785863608.194:16): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="enable" dev="configfs" ino=9204 res=0 errno=0 [ 70.141088][ T6140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.144726][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.148021][ T42] audit: type=1800 audit(1785863608.214:17): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="addr_trtype" dev="configfs" ino=10024 res=0 errno=0 [ 70.150927][ T6138] nvmet_rdma: binding CM ID to 172.20.20.24:4421 failed (-99) [ 70.152587][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.168343][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.170988][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.180071][ T5819] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 70.187070][ T5819] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 70.200968][ T6138] nvme nvme0: rdma connection establishment failed (-104) [ 70.297837][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 70.306848][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 70.407485][ T61] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 70.516851][ T1163] wlan1: authentication with 08:02:11:00:00:00 timed out [ 70.640654][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.642945][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.645290][ T6141] bridge_slave_0: entered allmulticast mode [ 70.648213][ T6141] bridge_slave_0: entered promiscuous mode [ 70.651572][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.653827][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.656344][ T6141] bridge_slave_1: entered allmulticast mode [ 70.660059][ T6141] bridge_slave_1: entered promiscuous mode [ 70.677574][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.681971][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.698713][ T6141] team0: Port device team_slave_0 added [ 70.701817][ T6141] team0: Port device team_slave_1 added [ 70.717973][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.720192][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.728129][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.732881][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.735083][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.744110][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.771626][ T6141] hsr_slave_0: entered promiscuous mode [ 70.774084][ T6141] hsr_slave_1: entered promiscuous mode [ 70.776176][ T6141] debugfs: 'hsr0' already exists in 'hsr' [ 70.778088][ T6141] Cannot create hsr debugfs directory [ 70.874623][ T6141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.879011][ T6141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.881843][ T6141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.888472][ T6141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.891317][ T6141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.910202][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.913097][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.922566][ T6141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.926149][ T6141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.931402][ T6141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.956213][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.959341][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.962544][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.965224][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.005885][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.018209][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.021729][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.032448][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.040794][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.043676][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.050543][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.053211][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.325997][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.484900][ T6141] veth0_vlan: entered promiscuous mode [ 71.490616][ T6141] veth1_vlan: entered promiscuous mode [ 71.515723][ T6141] veth0_macvtap: entered promiscuous mode [ 71.522047][ T6141] veth1_macvtap: entered promiscuous mode [ 71.532034][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.538490][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.559018][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.561995][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.576800][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.579766][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.595384][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.598274][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.619809][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.626177][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.682577][ T6196] loop0: detected capacity change from 0 to 4 [ 71.690933][ T6196] affs: No valid root block on device loop4 [ 71.968676][ T847] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.107112][ T6173] NFSD: Unable to initialize client recovery tracking! (-110) [ 72.109489][ T6173] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 72.112161][ T6173] NFSD: starting 10-second grace period (net f00003f7) [ 72.118530][ T847] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 72.121491][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.131258][ T847] snd-ua101 9-1:1.0: sample format descriptor not found [ 72.188256][ T5756] Bluetooth: hci4: command tx timeout [ 73.686809][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 73.966492][ T847] usb 9-1: USB disconnect, device number 2 [ 76.395289][ T6121] Kernel panic - not syncing: kernel: panic_on_warn set ... SYZFAIL: failed to recv rpc [ 76.397585][ T6121] CPU: 3 UID: 0 PID: 6121 Comm: kworker/3:4 Not tainted syzkaller #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.400544][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.403612][ T6121] Workqueue: usb_hub_wq hub_event [ 76.405154][ T6121] Call Trace: [ 76.406187][ T6121] [ 76.407104][ T6121] dump_stack_lvl+0x100/0x190 [ 76.408526][ T6121] vpanic+0x552/0x970 [ 76.409745][ T6121] ? __pfx_vpanic+0x10/0x10 [ 76.411220][ T6121] panic+0xd1/0xe0 [ 76.412468][ T6121] ? __pfx_panic+0x10/0x10 [ 76.413835][ T6121] ? check_panic_on_warn+0x1f/0x90 [ 76.415379][ T6121] check_panic_on_warn.cold+0x19/0x34 [ 76.417046][ T6121] ? usb_submit_urb+0x1689/0x19b0 [ 76.418579][ T6121] __warn.cold+0x191/0x318 [ 76.419945][ T6121] __report_bug+0x30f/0x440 [ 76.421313][ T6121] ? usb_submit_urb+0x1689/0x19b0 [ 76.422834][ T6121] ? __pfx___report_bug+0x10/0x10 [ 76.424386][ T6121] report_bug_entry+0xe1/0x290 [ 76.425839][ T6121] ? usb_submit_urb+0x168c/0x19b0 [ 76.427423][ T6121] handle_bug+0x1cd/0x2a0 [ 76.428699][ T6121] exc_invalid_op+0x17/0x50 [ 76.430117][ T6121] asm_exc_invalid_op+0x1a/0x20 [ 76.431605][ T6121] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 76.433281][ T6121] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 9e ac 8b fa 48 8d 3d 27 2b b2 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 76.438983][ T6121] RSP: 0018:ffffc90002b9ee38 EFLAGS: 00010293 [ 76.440803][ T6121] RAX: 0000000000000000 RBX: ffff888028c25a00 RCX: 1ffff11005184a31 [ 76.443113][ T6121] RDX: ffff888028dd4a80 RSI: ffff888028c25a00 RDI: ffffffff91302f90 [ 76.445470][ T6121] RBP: ffff88806056fc68 R08: 0000000000000001 R09: 0000000000000000 [ 76.447897][ T6121] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806056fc38 [ 76.450232][ T6121] R13: ffff888028df1100 R14: ffff88806bb5fcc0 R15: ffff88806056fc60 [ 76.452580][ T6121] ? usb_submit_urb+0x1682/0x19b0 [ 76.454157][ T6121] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 76.455913][ T6121] ? port100_send_cmd_async+0xba/0xc60 [ 76.457664][ T6121] port100_send_cmd_async+0x7f7/0xc60 [ 76.459300][ T6121] port100_probe+0xb4c/0x1190 [ 76.460782][ T6121] ? __pfx_port100_probe+0x10/0x10 [ 76.462345][ T6121] ? _raw_spin_lock_irqsave+0x52/0x60 [ 76.463937][ T6121] ? find_held_lock+0x2b/0x80 [ 76.465402][ T6121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.467313][ T6121] ? __pm_runtime_set_status+0x13c/0x970 [ 76.469091][ T6121] usb_probe_interface+0x303/0x8f0 [ 76.470712][ T6121] ? __pfx_usb_probe_interface+0x10/0x10 [ 76.472491][ T6121] really_probe+0x241/0xa60 [ 76.473867][ T6121] __driver_probe_device+0x20e/0x450 [ 76.475449][ T6121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.477216][ T6121] driver_probe_device+0x4a/0x140 [ 76.478831][ T6121] __device_attach_driver+0x1df/0x320 [ 76.480529][ T6121] ? __pfx___device_attach_driver+0x10/0x10 [ 76.482380][ T6121] bus_for_each_drv+0x159/0x1e0 [ 76.483849][ T6121] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.485450][ T6121] ? lockdep_hardirqs_on+0x78/0x100 [ 76.487092][ T6121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.488870][ T6121] __device_attach+0x1e4/0x4d0 [ 76.490343][ T6121] ? __pfx___device_attach+0x10/0x10 [ 76.492011][ T6121] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.493589][ T6121] device_initial_probe+0xaf/0xd0 [ 76.495125][ T6121] bus_probe_device+0x64/0x160 [ 76.496586][ T6121] device_add+0x121d/0x1970 [ 76.498055][ T6121] ? __pfx_device_add+0x10/0x10 [ 76.499503][ T6121] ? mark_held_locks+0x40/0x70 [ 76.500971][ T6121] usb_set_configuration+0xd97/0x1c60 [ 76.502656][ T6121] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 76.504552][ T6121] usb_generic_driver_probe+0xa1/0xe0 [ 76.506148][ T6121] usb_probe_device+0xef/0x400 [ 76.507633][ T6121] ? __pfx_usb_probe_device+0x10/0x10 [ 76.509200][ T6121] really_probe+0x241/0xa60 [ 76.510575][ T6121] __driver_probe_device+0x20e/0x450 [ 76.512124][ T6121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.513997][ T6121] driver_probe_device+0x4a/0x140 [ 76.515543][ T6121] __device_attach_driver+0x1df/0x320 [ 76.517249][ T6121] ? __pfx___device_attach_driver+0x10/0x10 [ 76.519027][ T6121] bus_for_each_drv+0x159/0x1e0 [ 76.520486][ T6121] ? __pfx_bus_for_each_drv+0x10/0x10 [ 76.522114][ T6121] ? lockdep_hardirqs_on+0x78/0x100 [ 76.523674][ T6121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.525479][ T6121] __device_attach+0x1e4/0x4d0 [ 76.526909][ T6121] ? __pfx___device_attach+0x10/0x10 [ 76.528540][ T6121] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.530150][ T6121] device_initial_probe+0xaf/0xd0 [ 76.531665][ T6121] bus_probe_device+0x64/0x160 [ 76.533089][ T6121] device_add+0x121d/0x1970 [ 76.534474][ T6121] ? __pfx_device_add+0x10/0x10 [ 76.535961][ T6121] ? add_device_randomness+0xc9/0x110 [ 76.537568][ T6121] usb_new_device.cold+0x685/0x115c [ 76.539122][ T6121] ? _mutex_trylock_nest_lock+0x241/0x310 [ 76.540810][ T6121] ? do_raw_spin_lock+0x128/0x260 [ 76.542310][ T6121] ? __pfx_usb_new_device+0x10/0x10 [ 76.543847][ T6121] ? mark_held_locks+0x40/0x70 [ 76.545289][ T6121] hub_event+0x30a3/0x4a60 [ 76.546633][ T6121] ? __pfx_hub_event+0x10/0x10 [ 76.548121][ T6121] ? debug_object_deactivate+0x2e4/0x3b0 [ 76.549852][ T6121] ? rcu_is_watching+0x12/0xc0 [ 76.551263][ T6121] process_one_work+0xa23/0x1940 [ 76.552724][ T6121] ? __pfx_process_one_work+0x10/0x10 [ 76.554372][ T6121] ? __pfx_hub_event+0x10/0x10 [ 76.555784][ T6121] worker_thread+0x5ef/0xe50 [ 76.557206][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 76.558706][ T6121] ? kthread+0x13a/0x450 [ 76.559974][ T6121] ? __pfx_worker_thread+0x10/0x10 [ 76.561478][ T6121] kthread+0x370/0x450 [ 76.562683][ T6121] ? __pfx_kthread+0x10/0x10 [ 76.564089][ T6121] ret_from_fork+0x72b/0xd50 [ 76.565489][ T6121] ? __pfx_ret_from_fork+0x10/0x10 [ 76.567017][ T6121] ? __switch_to+0x800/0x10f0 [ 76.568423][ T6121] ? __pfx_kthread+0x10/0x10 [ 76.569799][ T6121] ret_from_fork_asm+0x1a/0x30 [ 76.571202][ T6121] [ 76.572687][ T6121] Kernel Offset: disabled [ 76.573978][ T6121] Rebooting in 86400 seconds..