last executing test programs: 14.485645774s ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b53810030010203010902470002010080fa090400000102060000052400100105240600010d240f0100000000ea050000000705810310000909040100020a0000000705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 12.061662698s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c41060ea0001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000500)="01020304050607") 11.632692481s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa0904000000030000000904010001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x7, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/i2c-1\x00', 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000600)={&(0x7f0000000700)=[{0x10, 0x0, 0x1, &(0x7f0000000800)='\x00'}], 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/i2c-1\x00', 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000600)={&(0x7f0000000700)=[{0x10, 0x0, 0x1, &(0x7f0000000800)='\x00'}], 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/i2c-1\x00', 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000600)={&(0x7f0000000700)=[{0x10, 0x0, 0x1, &(0x7f0000000800)='\x00'}], 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/i2c-1\x00', 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000600)={&(0x7f0000000700)=[{0x10, 0x0, 0x1, &(0x7f0000000800)='\x00'}], 0x1}) 8.931401851s ago: executing program 4 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:./export\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 8.931041825s ago: executing program 0 (id=10): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040da0b56810001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303100008"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x4, "53003010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 8.930838985s ago: executing program 2 (id=3): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x13, 0x98, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e20, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x20, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, r3}}, 0x28) 7.945939371s ago: executing program 3 (id=11): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100", 0xc, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 7.197377061s ago: executing program 4 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f703120313238203000", 0x46) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01000038010000010000000000000000000000000000000000000000000000000000007468696e706f6f6c00") ioctl(r4, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") 7.025753972s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\n', 0x4) 6.589433728s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 6.34451031s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock,soft,timeo=10,retrans=1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 5.341053723s ago: executing program 1 (id=16): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000)="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000200000030010000000000000000000000000000000000000000000098000000980000009800000098000000980000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000700098000000000000000000000000000000000000000000280045434e00000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000", 0x190) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10) 4.915700312s ago: executing program 0 (id=17): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c41060ea0001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)="01020304050607") 4.760657777s ago: executing program 1 (id=18): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x100000], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 4.540211714s ago: executing program 4 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='* / 2147483647 0 65534 65534 0 secinfo 1 1 0\n', 0x2d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/4096, 0x1000) 4.439265539s ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze\n', 0x7) 3.480523043s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='1\n', 0x2) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='* / 2147483647 0 0 0 0 secinfo 1 1 0\n', 0x25) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r4, &(0x7f0000000300)=""/4096, 0x1000) 2.393473853s ago: executing program 1 (id=22): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.021849271s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00', 0x4) 1.888083085s ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000500)="000000a0", 0x4, 0x10) pwrite64(r2, &(0x7f0000000600)='\nBTO', 0x4, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='dwc2-pci\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='0000:00:02.0\x00', 0xc) 1.422553718s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') 1.387969565s ago: executing program 1 (id=26): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008109720770001000000010902350001010080fa0904000005ff00000007058102400000070501024000000705820240000007050202400000070583030200ff"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./ttyUSB0\x00', 0x81b6, 0xbc00000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000200)="01020304050607") 1.311309771s ago: executing program 2 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x7, "0050f202010100"}]}, 0x3f) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f0000000390)) syz_80211_inject_frame(&(0x7f0000000310)=@device_b, &(0x7f0000000500)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000003a0)={0x0, 0x2faf080}, &(0x7f00000003b0)) syz_80211_inject_frame(&(0x7f0000000320)=@device_b, &(0x7f0000000600)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 341.789637ms ago: executing program 3 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='rdma 2049\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 0s ago: executing program 2 (id=29): unshare(0x2020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cg/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='4096', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cg/test/tasks\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x10000)=nil, 0x10000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 76.045037][ T5584] cgroup: Unknown subsys name 'net' [ 76.285553][ T5584] cgroup: Unknown subsys name 'cpuset' [ 76.358875][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.972853][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.815479][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.845125][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.873730][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.876891][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.887496][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.888661][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.891112][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.892508][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.892774][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.894251][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.894450][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.919721][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.951452][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.951926][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.953021][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.955697][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.971008][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.971685][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.972036][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.973444][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.976058][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.985691][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.986097][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.988167][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.988946][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.966914][ T5608] Bluetooth: hci4: command tx timeout [ 84.038161][ T5608] Bluetooth: hci2: command tx timeout [ 84.118194][ T4914] Bluetooth: hci0: command tx timeout [ 84.118381][ T59] Bluetooth: hci1: command tx timeout [ 84.118514][ T5608] Bluetooth: hci3: command tx timeout [ 84.461664][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.461776][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.461893][ T5597] bridge_slave_0: entered allmulticast mode [ 84.465099][ T5597] bridge_slave_0: entered promiscuous mode [ 84.541331][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.541438][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.541578][ T5597] bridge_slave_1: entered allmulticast mode [ 84.543249][ T5597] bridge_slave_1: entered promiscuous mode [ 84.563656][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.563792][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.563934][ T5601] bridge_slave_0: entered allmulticast mode [ 84.567546][ T5601] bridge_slave_0: entered promiscuous mode [ 84.600425][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.600526][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.600685][ T5599] bridge_slave_0: entered allmulticast mode [ 84.604845][ T5599] bridge_slave_0: entered promiscuous mode [ 84.634271][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.634368][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.634469][ T5598] bridge_slave_0: entered allmulticast mode [ 84.635810][ T5598] bridge_slave_0: entered promiscuous mode [ 84.639085][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.639188][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.639364][ T5601] bridge_slave_1: entered allmulticast mode [ 84.641786][ T5601] bridge_slave_1: entered promiscuous mode [ 84.645330][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.645446][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.646339][ T5600] bridge_slave_0: entered allmulticast mode [ 84.652327][ T5600] bridge_slave_0: entered promiscuous mode [ 84.655268][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.655374][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.655864][ T5599] bridge_slave_1: entered allmulticast mode [ 84.661449][ T5599] bridge_slave_1: entered promiscuous mode [ 84.702609][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.702964][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.703111][ T5600] bridge_slave_1: entered allmulticast mode [ 84.705406][ T5600] bridge_slave_1: entered promiscuous mode [ 84.737190][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.796372][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.808424][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.808640][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.808808][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.809362][ T5598] bridge_slave_1: entered allmulticast mode [ 84.810777][ T5598] bridge_slave_1: entered promiscuous mode [ 84.828414][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.861719][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.882699][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.885897][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.076184][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.100180][ T5597] team0: Port device team_slave_0 added [ 85.121261][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.149752][ T5597] team0: Port device team_slave_1 added [ 85.151436][ T5601] team0: Port device team_slave_0 added [ 85.154150][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.172836][ T5599] team0: Port device team_slave_0 added [ 85.193633][ T5601] team0: Port device team_slave_1 added [ 85.212960][ T5600] team0: Port device team_slave_0 added [ 85.214885][ T5599] team0: Port device team_slave_1 added [ 85.261883][ T5600] team0: Port device team_slave_1 added [ 85.276393][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.276405][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.276418][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.312380][ T5598] team0: Port device team_slave_0 added [ 85.358632][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.358647][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.358667][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.360243][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.360257][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.360272][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.362795][ T5598] team0: Port device team_slave_1 added [ 85.481531][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.481549][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.481562][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.482820][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.482833][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.482856][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.503569][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.503586][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.503610][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.519473][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.519489][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.519512][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.553947][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.553963][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.553987][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.575259][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.575273][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.575297][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.611277][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.611292][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.611314][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.692435][ T5597] hsr_slave_0: entered promiscuous mode [ 85.694395][ T5597] hsr_slave_1: entered promiscuous mode [ 85.769082][ T5601] hsr_slave_0: entered promiscuous mode [ 85.770519][ T5601] hsr_slave_1: entered promiscuous mode [ 85.771670][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 85.771784][ T5601] Cannot create hsr debugfs directory [ 85.854368][ T5600] hsr_slave_0: entered promiscuous mode [ 85.855297][ T5600] hsr_slave_1: entered promiscuous mode [ 85.855791][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 85.855805][ T5600] Cannot create hsr debugfs directory [ 85.869414][ T5599] hsr_slave_0: entered promiscuous mode [ 85.870689][ T5599] hsr_slave_1: entered promiscuous mode [ 85.871515][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 85.871535][ T5599] Cannot create hsr debugfs directory [ 85.933671][ T5598] hsr_slave_0: entered promiscuous mode [ 85.934431][ T5598] hsr_slave_1: entered promiscuous mode [ 85.934917][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 85.934934][ T5598] Cannot create hsr debugfs directory [ 86.038288][ T5608] Bluetooth: hci4: command tx timeout [ 86.118287][ T5608] Bluetooth: hci2: command tx timeout [ 86.199383][ T5608] Bluetooth: hci3: command tx timeout [ 86.199385][ T4914] Bluetooth: hci0: command tx timeout [ 86.199477][ T59] Bluetooth: hci1: command tx timeout [ 86.797346][ T9] cfg80211: failed to load regulatory.db [ 87.104706][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.165244][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.184323][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.213284][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.221920][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.254623][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.285704][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.314439][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.499082][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.523137][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.527231][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.563723][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.566140][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.612776][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.642912][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.683365][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.817410][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.843104][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.846244][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.872284][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.877233][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.912140][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.945499][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.972643][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.122892][ T59] Bluetooth: hci4: command tx timeout [ 88.125267][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.161169][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.181051][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.198290][ T59] Bluetooth: hci2: command tx timeout [ 88.222717][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.235905][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.275078][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.278387][ T59] Bluetooth: hci1: command tx timeout [ 88.278417][ T59] Bluetooth: hci0: command tx timeout [ 88.279134][ T59] Bluetooth: hci3: command tx timeout [ 88.327690][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.356586][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.416573][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.507487][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.542702][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.564078][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.597171][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.620081][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.661449][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.665817][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.710837][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.721335][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.776299][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.776795][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.885478][ T2002] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885699][ T2002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.903044][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.003541][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.033608][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.033753][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.055449][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.082944][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.083041][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.194478][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.315888][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.344777][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.344950][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.385122][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.385318][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.495891][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.521515][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.539873][ T843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.539994][ T843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.607325][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.607441][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.732930][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.820921][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.824786][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.885545][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.885730][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.198251][ T5608] Bluetooth: hci4: command tx timeout [ 90.278203][ T5608] Bluetooth: hci2: command tx timeout [ 90.358320][ T5608] Bluetooth: hci3: command tx timeout [ 90.358350][ T5608] Bluetooth: hci0: command tx timeout [ 90.358369][ T5608] Bluetooth: hci1: command tx timeout [ 90.461187][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.466817][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.986690][ T5601] veth0_vlan: entered promiscuous mode [ 91.064491][ T5601] veth1_vlan: entered promiscuous mode [ 91.335451][ T5597] veth0_vlan: entered promiscuous mode [ 91.360997][ T5601] veth0_macvtap: entered promiscuous mode [ 91.422911][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.423866][ T5601] veth1_macvtap: entered promiscuous mode [ 91.477294][ T5597] veth1_vlan: entered promiscuous mode [ 91.491823][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.524962][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.550360][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.584587][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.713526][ T5597] veth0_macvtap: entered promiscuous mode [ 91.793302][ T5600] veth0_vlan: entered promiscuous mode [ 91.816194][ T5597] veth1_macvtap: entered promiscuous mode [ 91.942680][ T5599] veth0_vlan: entered promiscuous mode [ 92.017891][ T5600] veth1_vlan: entered promiscuous mode [ 92.160083][ T5598] veth0_vlan: entered promiscuous mode [ 92.165301][ T5599] veth1_vlan: entered promiscuous mode [ 92.172235][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.234942][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.280599][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.281682][ T5598] veth1_vlan: entered promiscuous mode [ 92.286946][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473771][ T3303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.473803][ T3303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.481314][ T5600] veth0_macvtap: entered promiscuous mode [ 92.589946][ T5599] veth0_macvtap: entered promiscuous mode [ 92.607706][ T5600] veth1_macvtap: entered promiscuous mode [ 92.779677][ T5599] veth1_macvtap: entered promiscuous mode [ 92.866761][ T5598] veth0_macvtap: entered promiscuous mode [ 92.901921][ T5598] veth1_macvtap: entered promiscuous mode [ 92.965983][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.000568][ T3303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.000586][ T3303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.027863][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.050787][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.111915][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.155947][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.162885][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.162906][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.203366][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.464836][ T36] audit: type=1800 audit(1785856184.650:2): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2" name="ipv4_port" dev="configfs" ino=7111 res=0 errno=0 [ 93.984962][ T5800] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 93.985613][ T5800] CIFS: Attempting to mount //127.0.0.1/share [ 94.676895][ T5800] CIFS: VFS: cifs_mount failed w/return code = -512 [ 94.780603][ T5800] syz.1.6 (5800) used greatest stack depth: 19184 bytes left [ 95.103791][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.103812][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.180586][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.267960][ T2002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.267981][ T2002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.351819][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.351839][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.380999][ T1183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383034][ T1504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.418844][ T1183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561993][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 95.562035][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.562052][ T9] usb 5-1: Product: syz [ 95.562065][ T9] usb 5-1: Manufacturer: syz [ 95.562078][ T9] usb 5-1: SerialNumber: syz [ 95.703601][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.703620][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.712394][ T1147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712453][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712484][ T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712515][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712553][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712583][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712614][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712645][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712674][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712705][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.712735][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.833467][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 95.965985][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.002369][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.002389][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280388][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.280408][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280623][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281903][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281956][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281982][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282006][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282031][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.448562][ T5721] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.663042][ T5721] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 96.663072][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.930100][ T5721] cp210x 1-1:1.0: cp210x converter detected [ 97.143515][ T5721] cp210x 1-1:1.0: failed to get vendor val 0x370b size 1: -32 [ 97.143554][ T5721] cp210x 1-1:1.0: querying part number failed [ 97.330211][ T819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.446324][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 97.495535][ T819] usb 4-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 97.495564][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.495582][ T819] usb 4-1: Product: syz [ 97.495596][ T819] usb 4-1: Manufacturer: syz [ 97.495610][ T819] usb 4-1: SerialNumber: syz [ 97.591722][ T5721] usb 1-1: cp210x converter now attached to ttyUSB0 [ 97.739648][ T819] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 97.762513][ T5721] usb 1-1: USB disconnect, device number 2 [ 97.776560][ T9] r8153_ecm 5-1:1.0: probe with driver r8153_ecm failed with error -71 [ 97.877643][ T819] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 98.031787][ T5586] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.219108][ T5586] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 98.219139][ T5586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.423485][ T5721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.428742][ T819] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.443940][ T9] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 98.472726][ T819] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 98.472930][ T819] usb 4-1: media controller created [ 98.712341][ T819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.751008][ T5721] cp210x 1-1:1.0: device disconnected [ 98.891018][ T5586] usb-storage 2-1:1.0: USB Mass Storage device detected [ 99.336133][ T5586] scsi host1: usb-storage 2-1:1.0 [ 99.591191][ T819] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 99.836568][ T5838] lo speed is unknown, defaulting to 1000 [ 99.837216][ T5838] lo speed is unknown, defaulting to 1000 [ 100.078867][ T5721] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.139982][ T5838] lo speed is unknown, defaulting to 1000 [ 100.190320][ T5838] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 100.209853][ T5838] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 100.209900][ T5838] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 100.301069][ T819] usb 4-1: USB disconnect, device number 2 [ 100.326616][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.362966][ T5721] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice= 1.00 [ 100.362995][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.363013][ T5721] usb 1-1: Product: syz [ 100.363026][ T5721] usb 1-1: Manufacturer: syz [ 100.363038][ T5721] usb 1-1: SerialNumber: syz [ 100.647538][ T5721] r8152-cfgselector 1-1: Unknown version 0x0000 [ 100.796480][ T5838] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.929932][ T9] usb 2-1: USB disconnect, device number 2 [ 101.249047][ T5838] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.380163][ T5843] loop0: detected capacity change from 0 to 24 [ 101.711455][ T5721] r8152-cfgselector 1-1: reset high-speed USB device number 3 using dummy_hcd [ 102.747508][ T5862] device-mapper: transaction manager: couldn't create metadata space map [ 102.747836][ T5862] device-mapper: thin metadata: tm_create_with_sm failed [ 103.432023][ T5858] NFSD: Failed to start, no listeners configured. [ 103.483046][ T5862] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-ENOSPC) [ 103.483065][ T5862] device-mapper: ioctl: error adding target to table [ 103.618229][ T819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.618367][ T5721] r8152-cfgselector 1-1: device descriptor read/64, error -71 [ 103.693172][ T5877] PM: suspend entry (s2idle) [ 103.802694][ T819] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 103.802718][ T819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.802737][ T819] usb 2-1: Product: syz [ 103.802744][ T819] usb 2-1: Manufacturer: syz [ 103.802752][ T819] usb 2-1: SerialNumber: syz [ 103.938935][ T5721] r8152-cfgselector 1-1: reset high-speed USB device number 3 using dummy_hcd [ 104.412837][ T3303] Filesystems sync: 0.717 seconds [ 105.296963][ T5721] r8152-cfgselector 1-1: unable to get BOS descriptor or descriptor too short [ 105.297091][ T5721] r8152-cfgselector 1-1: device firmware changed [ 105.386180][ T5721] r8152 1-1:1.0: USB reset failed, errno=-19 [ 105.391872][ T5838] lo speed is unknown, defaulting to 1000 [ 105.508604][ T5838] lo speed is unknown, defaulting to 1000 [ 105.586110][ T5721] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 105.586396][ T5838] lo speed is unknown, defaulting to 1000 [ 105.619459][ T5877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.629909][ T5877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.796724][ T5838] lo speed is unknown, defaulting to 1000 [ 105.820937][ T5838] lo speed is unknown, defaulting to 1000 [ 105.840418][ T819] usb 2-1: USB disconnect, device number 3 [ 105.911210][ T5882] NFSD: Unable to initialize client recovery tracking! (-110) [ 105.911229][ T5882] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 105.911240][ T5882] NFSD: starting 90-second grace period (net f00003f7) [ 106.783859][ T5877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.960581][ T5877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.960739][ T5877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.113425][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.114537][ T5877] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.194479][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.239942][ T5877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.240011][ T5877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.277984][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.388633][ T5877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.531965][ T5877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.532053][ T5877] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.610865][ T5877] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.638426][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.709095][ T819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.756801][ T5877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.756882][ T5877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.858141][ T819] usb 2-1: Using ep0 maxpacket: 8 [ 107.875865][ T819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.875884][ T819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 107.875897][ T819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.875908][ T819] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.875920][ T819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 107.875944][ T819] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 1.00 [ 107.875955][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.899124][ T5896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.899319][ T5896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.910700][ T5896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.911655][ T5896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.944603][ T5877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.008884][ T819] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 108.181327][ T5877] Freezing user space processes [ 108.968316][ T5903] NFSD: Unable to initialize client recovery tracking! (-110) [ 108.968333][ T5903] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 108.968342][ T5903] NFSD: starting 90-second grace period (net f00003c0) [ 108.998196][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.075338][ T5877] ------------[ cut here ]------------ [ 109.075352][ T5877] debug_locks && p->lockdep_depth [ 109.075368][ T5877] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.4.20/5877 [ 109.075413][ T5877] Modules linked in: [ 109.075439][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.4.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.075459][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.075471][ T5877] RIP: 0010:__set_task_frozen+0x260/0x340 [ 109.075495][ T5877] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 109.075508][ T5877] RSP: 0018:ffffc900059df9f0 EFLAGS: 00010046 [ 109.075520][ T5877] RAX: ffffffff81b0b75f RBX: ffff888040c83e00 RCX: 0000000000080000 [ 109.075532][ T5877] RDX: ffffc9000eea9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 109.075551][ T5877] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 109.075560][ T5877] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888040c83e18 [ 109.075571][ T5877] R13: 1ffff110081907c3 R14: 0000000000000000 R15: ffff888040c84a00 [ 109.075581][ T5877] FS: 00007f85b36766c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 109.075592][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.075602][ T5877] CR2: 0000557c11d24ab0 CR3: 000000005beba000 CR4: 00000000003526f0 [ 109.075614][ T5877] Call Trace: [ 109.075620][ T5877] [ 109.075629][ T5877] ? __pfx___set_task_frozen+0x10/0x10 [ 109.075653][ T5877] task_call_func+0x1aa/0x260 [ 109.075682][ T5877] freeze_task+0x216/0x390 [ 109.075704][ T5877] ? __pfx_rt_read_lock+0x10/0x10 [ 109.075722][ T5877] ? __pfx_freeze_task+0x10/0x10 [ 109.075743][ T5877] ? usleep_range_state+0x95/0x180 [ 109.075762][ T5877] ? usleep_range_state+0x13a/0x180 [ 109.075785][ T5877] try_to_freeze_tasks+0x190/0x620 [ 109.075813][ T5877] freeze_processes+0xce/0x1e0 [ 109.075836][ T5877] pm_suspend+0x2f1/0x760 [ 109.075858][ T5877] state_store+0x206/0x290 [ 109.075876][ T5877] ? __pfx_sysfs_kf_write+0x10/0x10 [ 109.075891][ T5877] kernfs_fop_write_iter+0x3a5/0x540 [ 109.075916][ T5877] vfs_write+0x61e/0xbb0 [ 109.075947][ T5877] ? __pfx_vfs_write+0x10/0x10 [ 109.075987][ T5877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 109.076012][ T5877] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.076039][ T5877] ? mutex_lock_nested+0x152/0x1d0 [ 109.076056][ T5877] ? fdget_pos+0x252/0x320 [ 109.076087][ T5877] ksys_write+0x156/0x270 [ 109.076113][ T5877] ? __pfx_ksys_write+0x10/0x10 [ 109.076140][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.076156][ T5877] do_syscall_64+0x174/0x580 [ 109.076181][ T5877] ? trace_irq_disable+0x3b/0x140 [ 109.076201][ T5877] ? clear_bhb_loop+0x40/0x90 [ 109.076225][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.076245][ T5877] RIP: 0033:0x7f85b541e019 [ 109.076271][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.076286][ T5877] RSP: 002b:00007f85b3676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.076303][ T5877] RAX: ffffffffffffffda RBX: 00007f85b56a5fa0 RCX: 00007f85b541e019 [ 109.076317][ T5877] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 109.076330][ T5877] RBP: 00007f85b54b500c R08: 0000000000000000 R09: 0000000000000000 [ 109.076340][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.076351][ T5877] R13: 00007f85b56a6038 R14: 00007f85b56a5fa0 R15: 00007fffcc734378 [ 109.076385][ T5877] [ 109.076393][ T5877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.076407][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.4.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.076423][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.076431][ T5877] Call Trace: [ 109.076437][ T5877] [ 109.076442][ T5877] vpanic+0x56c/0xa60 [ 109.076458][ T5877] ? __pfx__printk+0x10/0x10 [ 109.076475][ T5877] ? __pfx_vpanic+0x10/0x10 [ 109.076488][ T5877] ? is_bpf_text_address+0x292/0x2b0 [ 109.076505][ T5877] ? is_bpf_text_address+0x26/0x2b0 [ 109.076540][ T5877] panic+0xc5/0xd0 [ 109.076560][ T5877] ? __pfx_panic+0x10/0x10 [ 109.076592][ T5877] __warn+0x315/0x4c0 [ 109.076607][ T5877] ? __set_task_frozen+0x260/0x340 [ 109.076633][ T5877] ? __set_task_frozen+0x260/0x340 [ 109.076658][ T5877] __report_bug+0x276/0x570 [ 109.076687][ T5877] ? __set_task_frozen+0x260/0x340 [ 109.076714][ T5877] ? __pfx___report_bug+0x10/0x10 [ 109.076735][ T5877] ? __lock_acquire+0x683/0x2ce0 [ 109.076761][ T5877] ? __lock_acquire+0x683/0x2ce0 [ 109.076781][ T5877] ? __set_task_frozen+0x260/0x340 [ 109.076803][ T5877] report_bug+0x16a/0x220 [ 109.076824][ T5877] ? __set_task_frozen+0x260/0x340 [ 109.076846][ T5877] ? __set_task_frozen+0x262/0x340 [ 109.076867][ T5877] handle_bug+0x9c/0x200 [ 109.076894][ T5877] exc_invalid_op+0x1a/0x50 [ 109.076922][ T5877] asm_exc_invalid_op+0x1a/0x20 [ 109.076938][ T5877] RIP: 0010:__set_task_frozen+0x260/0x340 [ 109.076963][ T5877] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 109.076974][ T5877] RSP: 0018:ffffc900059df9f0 EFLAGS: 00010046 [ 109.076987][ T5877] RAX: ffffffff81b0b75f RBX: ffff888040c83e00 RCX: 0000000000080000 [ 109.076998][ T5877] RDX: ffffc9000eea9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 109.077008][ T5877] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 109.077016][ T5877] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff888040c83e18 [ 109.077027][ T5877] R13: 1ffff110081907c3 R14: 0000000000000000 R15: ffff888040c84a00 [ 109.077042][ T5877] ? __pfx___set_task_frozen+0x10/0x10 [ 109.077067][ T5877] ? __set_task_frozen+0x25f/0x340 [ 109.077099][ T5877] ? __pfx___set_task_frozen+0x10/0x10 [ 109.077123][ T5877] task_call_func+0x1aa/0x260 [ 109.077152][ T5877] freeze_task+0x216/0x390 [ 109.077173][ T5877] ? __pfx_rt_read_lock+0x10/0x10 [ 109.077190][ T5877] ? __pfx_freeze_task+0x10/0x10 [ 109.077210][ T5877] ? usleep_range_state+0x95/0x180 [ 109.077231][ T5877] ? usleep_range_state+0x13a/0x180 [ 109.077254][ T5877] try_to_freeze_tasks+0x190/0x620 [ 109.077282][ T5877] freeze_processes+0xce/0x1e0 [ 109.077302][ T5877] pm_suspend+0x2f1/0x760 [ 109.077324][ T5877] state_store+0x206/0x290 [ 109.077343][ T5877] ? __pfx_sysfs_kf_write+0x10/0x10 [ 109.077358][ T5877] kernfs_fop_write_iter+0x3a5/0x540 [ 109.077384][ T5877] vfs_write+0x61e/0xbb0 [ 109.077412][ T5877] ? __pfx_vfs_write+0x10/0x10 [ 109.077435][ T5877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 109.077454][ T5877] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.077479][ T5877] ? mutex_lock_nested+0x152/0x1d0 [ 109.077498][ T5877] ? fdget_pos+0x252/0x320 [ 109.077527][ T5877] ksys_write+0x156/0x270 [ 109.077560][ T5877] ? __pfx_ksys_write+0x10/0x10 [ 109.077590][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.077611][ T5877] do_syscall_64+0x174/0x580 [ 109.077635][ T5877] ? trace_irq_disable+0x3b/0x140 [ 109.077655][ T5877] ? clear_bhb_loop+0x40/0x90 [ 109.077679][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.077697][ T5877] RIP: 0033:0x7f85b541e019 [ 109.077713][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.077725][ T5877] RSP: 002b:00007f85b3676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.077743][ T5877] RAX: ffffffffffffffda RBX: 00007f85b56a5fa0 RCX: 00007f85b541e019 [ 109.077756][ T5877] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 109.077768][ T5877] RBP: 00007f85b54b500c R08: 0000000000000000 R09: 0000000000000000 [ 109.077779][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.077790][ T5877] R13: 00007f85b56a6038 R14: 00007f85b56a5fa0 R15: 00007fffcc734378 [ 109.077823][ T5877] [ 109.078081][ T5877] Kernel Offset: disabled