last executing test programs: 10.197449037s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write(r0, &(0x7f0000000100)="1500000065ffff0020000008003950323030302e4c1400000069010080000000000100000000000000a0000000190200ff3f00000000000080000000000100000000000000ff41000000000000000000000200000000000000000000000000000000100000000000000010000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000006f0300010080000000000200000000000000a0000000190400ff3f00000000000080000000000200000000000000ff41000000000000000000000200000000000000000000000000000000100000000000000010000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000004b050007000000790600", 0x18d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/dir\x00', 0x200) 10.15484158s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="01b3") nanosleep(&(0x7f0000000200)={0x1}, 0x0) 9.381218498s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="9000"/64) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 9.190697663s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000420001000000010902190001010080320904000001ff00000007058202000200"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) (async) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054565a, &(0x7f0000000500)={0x0, '\x00', 0x1}) 6.563886008s ago: executing program 1 (id=2): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.336650391s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040da0b56810001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303100008"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x4, "00003010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.299692492s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 5.408109495s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000240)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000280)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1b) 5.2503275s ago: executing program 2 (id=10): r0 = syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c759300010102030109024b0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840200020007050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xc0, 0x2, 0xc, "0c0000002306003005000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000400)='00000a00000001000100010000000000') nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1103}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'wlan1\x00', 0x1103}) 5.250062365s ago: executing program 1 (id=11): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x81b6, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/md0/md/array_size\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1024\x00', 0x4) 4.937269633s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/e1000/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0000:00:04.0\x00', 0xd) 4.777651891s ago: executing program 1 (id=12): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000002000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000003000)="00000080fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100020200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000004000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001400)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000005000)="00000078fe534d4240000000160000c001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000009000000480028004e544c4d53535000020000000000000028000000158208e2000000000000000000000000000000000000000028000000", 0x7c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000006000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000007000)="00000048fe534d4240000000000000000100010001000000000000000200000000000000000000000000000001000000000000000000000000000000000000000900010048000000", 0x4c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000008000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001800)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000009000)="00000050fe534d424000000000000000030001000100000000000000030000000000000000000000010000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000a000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001a00)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f000000b000)="00000098fe534d42400000000000000005000100010000000000000004000000000000000000000001000000010000000000000000000000000000000000000000000000590000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000100"/156, 0x9c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001b00)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000c000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001c00)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f000000d000)="00000048fe534d424000000000000000100001000100000000000000050000000000000000000000010000000100000000000000000000000000000000000000000000000900480000000000", 0x4c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001d00)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000e000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001e00)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, &(0x7f000000f000)="0000007cfe534d424000000000000000060001000100000000000000060000000000000000000000010000000100000000000000000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000", 0x80}) io_uring_enter(r1, 0xf, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,port=20002,ip=127.0.0.1,unc=\\\\127.0.0.1\\share,nodfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir/test\x00', 0x1ff) 3.996619549s ago: executing program 4 (id=13): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x2a}}}}, 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="022a000a0006000500150102000000"], 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.996253965s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='0\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze', 0x6) 3.442226738s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./rec\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./rec\n\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00']) 2.798216035s ago: executing program 4 (id=16): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 2.184501536s ago: executing program 4 (id=17): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x40) ioctl(r0, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r1, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 1.843878259s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0xe, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", &(0x7f0000000400)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.049901658s ago: executing program 0 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x13, 0x98, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e20, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x20, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, r3}}, 0x28) 445.412192ms ago: executing program 2 (id=20): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 294.755248ms ago: executing program 4 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @local}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./127.0.0.1/share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') 0s ago: executing program 4 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r7, 0x0, 0x0, 0x100000) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='999999\x00', 0x7) close(r9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 84.921715][ T5581] cgroup: Unknown subsys name 'net' [ 85.143111][ T5581] cgroup: Unknown subsys name 'cpuset' [ 85.215655][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.222430][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.806504][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.835442][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.857005][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.890148][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.904179][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.924108][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.932322][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.935421][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.936454][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.952169][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.965240][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.966709][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.980461][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.988225][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.019179][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.019655][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.020147][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.022404][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.022425][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.022770][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.023324][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.024522][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.040603][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.065345][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.087534][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.938576][ T821] cfg80211: failed to load regulatory.db [ 92.168005][ T4911] Bluetooth: hci1: command tx timeout [ 92.168014][ T5607] Bluetooth: hci0: command tx timeout [ 92.245384][ T5607] Bluetooth: hci4: command tx timeout [ 92.245407][ T4911] Bluetooth: hci2: command tx timeout [ 92.245578][ T5607] Bluetooth: hci3: command tx timeout [ 92.518298][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.519484][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.519598][ T5595] bridge_slave_0: entered allmulticast mode [ 92.521352][ T5595] bridge_slave_0: entered promiscuous mode [ 92.589901][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.589986][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.590111][ T5595] bridge_slave_1: entered allmulticast mode [ 92.593366][ T5595] bridge_slave_1: entered promiscuous mode [ 92.726155][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.726249][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.726356][ T5597] bridge_slave_0: entered allmulticast mode [ 92.728304][ T5597] bridge_slave_0: entered promiscuous mode [ 92.779025][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.797627][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.797710][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.798133][ T5597] bridge_slave_1: entered allmulticast mode [ 92.799974][ T5597] bridge_slave_1: entered promiscuous mode [ 92.850779][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.945800][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.945908][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.946050][ T5594] bridge_slave_0: entered allmulticast mode [ 92.947916][ T5594] bridge_slave_0: entered promiscuous mode [ 93.028653][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.028806][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.028964][ T5594] bridge_slave_1: entered allmulticast mode [ 93.033485][ T5594] bridge_slave_1: entered promiscuous mode [ 93.054151][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.054467][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.054892][ T5598] bridge_slave_0: entered allmulticast mode [ 93.068761][ T5598] bridge_slave_0: entered promiscuous mode [ 93.100504][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.100620][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.100758][ T5596] bridge_slave_0: entered allmulticast mode [ 93.102632][ T5596] bridge_slave_0: entered promiscuous mode [ 93.132581][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.152660][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.152769][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.152895][ T5598] bridge_slave_1: entered allmulticast mode [ 93.154745][ T5598] bridge_slave_1: entered promiscuous mode [ 93.178669][ T5595] team0: Port device team_slave_0 added [ 93.179219][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.179481][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.179936][ T5596] bridge_slave_1: entered allmulticast mode [ 93.208449][ T5596] bridge_slave_1: entered promiscuous mode [ 93.214801][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.263087][ T5595] team0: Port device team_slave_1 added [ 93.299800][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.370495][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.382862][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.418109][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.421535][ T5597] team0: Port device team_slave_0 added [ 93.452436][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.453738][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.453748][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.453766][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.496277][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.503158][ T5597] team0: Port device team_slave_1 added [ 93.545767][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.545779][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.545799][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.611995][ T5594] team0: Port device team_slave_0 added [ 93.674312][ T5594] team0: Port device team_slave_1 added [ 93.680786][ T5598] team0: Port device team_slave_0 added [ 93.689484][ T5596] team0: Port device team_slave_0 added [ 93.694436][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.694463][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.694533][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.748228][ T5598] team0: Port device team_slave_1 added [ 93.751028][ T5596] team0: Port device team_slave_1 added [ 93.751752][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.751763][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.751783][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.860961][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.860977][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.861002][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.943432][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.943444][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943463][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.944384][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.944393][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.944410][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.976918][ T5595] hsr_slave_0: entered promiscuous mode [ 93.980855][ T5595] hsr_slave_1: entered promiscuous mode [ 94.245358][ T5607] Bluetooth: hci0: command tx timeout [ 94.245456][ T5601] Bluetooth: hci1: command tx timeout [ 94.325101][ T5607] Bluetooth: hci3: command tx timeout [ 94.325135][ T5607] Bluetooth: hci4: command tx timeout [ 94.325318][ T5601] Bluetooth: hci2: command tx timeout [ 94.466645][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.466668][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.466686][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.524849][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.524865][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.524888][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.588531][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.588543][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.588561][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.684744][ T5597] hsr_slave_0: entered promiscuous mode [ 94.691293][ T5597] hsr_slave_1: entered promiscuous mode [ 94.691950][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 94.692034][ T5597] Cannot create hsr debugfs directory [ 94.796143][ T5594] hsr_slave_0: entered promiscuous mode [ 94.797097][ T5594] hsr_slave_1: entered promiscuous mode [ 94.797702][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 94.797718][ T5594] Cannot create hsr debugfs directory [ 94.882106][ T5598] hsr_slave_0: entered promiscuous mode [ 94.883002][ T5598] hsr_slave_1: entered promiscuous mode [ 94.883686][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 94.883703][ T5598] Cannot create hsr debugfs directory [ 94.927026][ T5596] hsr_slave_0: entered promiscuous mode [ 94.927868][ T5596] hsr_slave_1: entered promiscuous mode [ 94.928512][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 94.928528][ T5596] Cannot create hsr debugfs directory [ 95.953148][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.000321][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.016742][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.053299][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.065756][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.089064][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.115170][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.149605][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.258175][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.289746][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.302521][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.325108][ T5607] Bluetooth: hci1: command tx timeout [ 96.325142][ T5607] Bluetooth: hci0: command tx timeout [ 96.349028][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.351557][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.379396][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.405628][ T5607] Bluetooth: hci2: command tx timeout [ 96.405658][ T5607] Bluetooth: hci4: command tx timeout [ 96.412157][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.415327][ T5601] Bluetooth: hci3: command tx timeout [ 96.448239][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.631438][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.662436][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.673424][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.698315][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.723520][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.760969][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.768213][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.802753][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.933467][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.959348][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.964411][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.003012][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.020809][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.059719][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.076393][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.109628][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.143975][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.283764][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.317041][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.350387][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.377921][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.410061][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.427287][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.471753][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.500501][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.543387][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.561044][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.562795][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.635437][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.644380][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.644496][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.793270][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.849659][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.849793][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.906423][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.906589][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.967599][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.113073][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.150331][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.202601][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.204115][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.264025][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.264159][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.342726][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.406744][ T5601] Bluetooth: hci0: command tx timeout [ 98.414423][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.414654][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.415895][ T5601] Bluetooth: hci1: command tx timeout [ 98.480293][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.486495][ T5601] Bluetooth: hci3: command tx timeout [ 98.486581][ T5601] Bluetooth: hci4: command tx timeout [ 98.486612][ T5601] Bluetooth: hci2: command tx timeout [ 98.530918][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.531066][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.718823][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.760294][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.760508][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.848568][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.848849][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.278739][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.612707][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.757333][ T5595] veth0_vlan: entered promiscuous mode [ 99.875919][ T5595] veth1_vlan: entered promiscuous mode [ 100.088596][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.111447][ T5598] veth0_vlan: entered promiscuous mode [ 100.157359][ T5598] veth1_vlan: entered promiscuous mode [ 100.220024][ T5595] veth0_macvtap: entered promiscuous mode [ 100.304037][ T5595] veth1_macvtap: entered promiscuous mode [ 100.430527][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.444274][ T5598] veth0_macvtap: entered promiscuous mode [ 100.503024][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.517672][ T5598] veth1_macvtap: entered promiscuous mode [ 100.523058][ T5594] veth0_vlan: entered promiscuous mode [ 100.552376][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.598174][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.633562][ T5594] veth1_vlan: entered promiscuous mode [ 100.765478][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.857936][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.267661][ T5594] veth0_macvtap: entered promiscuous mode [ 101.324184][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.324210][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.481820][ T5594] veth1_macvtap: entered promiscuous mode [ 101.502067][ T5597] veth0_vlan: entered promiscuous mode [ 101.602356][ T5597] veth1_vlan: entered promiscuous mode [ 101.650175][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.650196][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.674152][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.742450][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.759910][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.759949][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.820909][ T5596] veth0_vlan: entered promiscuous mode [ 101.907602][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.907623][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.938499][ T5596] veth1_vlan: entered promiscuous mode [ 102.049136][ T5597] veth0_macvtap: entered promiscuous mode [ 102.158230][ T5597] veth1_macvtap: entered promiscuous mode [ 102.574333][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.601269][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.601287][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.603435][ T5596] veth0_macvtap: entered promiscuous mode [ 102.657149][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.686121][ T5596] veth1_macvtap: entered promiscuous mode [ 102.744095][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.744115][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.929253][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.100901][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.863659][ T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.906432][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.906451][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.012732][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.013104][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.107892][ T5604] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.168288][ T3335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.209463][ T48] usb 4-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice= 1.00 [ 104.209496][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.209518][ T48] usb 4-1: Product: syz [ 104.209533][ T48] usb 4-1: Manufacturer: syz [ 104.209549][ T48] usb 4-1: SerialNumber: syz [ 104.318550][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.575700][ T5703] usb 3-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00 [ 104.575791][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.923571][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.923589][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.969674][ T48] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 104.993005][ T5703] em28xx 3-1:1.0: New device @ 480 Mbps (2040:4200, interface 0, class 0) [ 104.993049][ T5703] em28xx 3-1:1.0: Video interface 0 found: bulk [ 105.435855][ T5703] em28xx 3-1:1.0: unknown em28xx chip ID (64) [ 105.503805][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.523024][ T48] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 105.523112][ T48] usb 4-1: media controller created [ 105.617582][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.763160][ T5703] em28xx 3-1:1.0: read from i2c device at 0xa0 failed with unknown error (status=64) [ 105.763238][ T5703] em28xx 3-1:1.0: board has no eeprom [ 105.896757][ T5604] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 105.896792][ T5604] usb 1-1: can't read configurations, error -71 [ 105.955100][ T5703] em28xx 3-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4) [ 105.955126][ T5703] em28xx 3-1:1.0: analog set to bulk mode. [ 105.985247][ T5724] em28xx 3-1:1.0: Registering V4L2 extension [ 106.290394][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.290418][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.617820][ T3381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.719535][ T5724] em28xx 3-1:1.0: failed to get i2c transfer status from bridge register (error=-5) [ 106.721545][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.721564][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.721902][ T5724] em28xx 3-1:1.0: reading from i2c device at 0x88 failed (error=-5) [ 106.767966][ T5802] usb 3-1: USB disconnect, device number 2 [ 106.796023][ T5802] em28xx 3-1:1.0: Disconnecting em28xx [ 106.926312][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.001704][ T3098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.023950][ T3291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.060739][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.061139][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.061362][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.061789][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164793][ T48] dvb-usb: bulk message failed: -71 (6/0) [ 107.174854][ T48] dvb-usb: bulk message failed: -71 (6/0) [ 107.188194][ T48] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 107.229109][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 107.259932][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 107.259954][ T48] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 107.306534][ T48] usb 4-1: USB disconnect, device number 2 [ 107.361635][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.362038][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.382273][ T3381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.399234][ T3291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400238][ T3335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.427914][ T127] dvb-usb: bulk message failed: -19 (1/0) [ 107.427964][ T127] dvb-usb: error while querying for an remote control event. [ 107.699762][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.881632][ T5724] em28xx 3-1:1.0: Config register raw data: 0xffffffed [ 107.881653][ T5724] em28xx 3-1:1.0: AC97 chip type couldn't be determined [ 107.881665][ T5724] em28xx 3-1:1.0: No AC97 audio processor [ 107.881874][ T5724] em28xx 3-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 107.882086][ T5724] em28xx 3-1:1.0: Registering input extension [ 107.995199][ T5604] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.077034][ T48] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 108.097151][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.097498][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.098027][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.175132][ T5724] rc_core: IR keymap rc-hauppauge not found [ 108.175151][ T5724] Registered IR keymap rc-empty [ 108.200537][ T5724] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 108.223955][ T5724] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input6 [ 108.246208][ T5604] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.264218][ T5604] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice= 1.00 [ 108.264245][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.264262][ T5604] usb 1-1: Product: syz [ 108.264276][ T5604] usb 1-1: Manufacturer: syz [ 108.264289][ T5604] usb 1-1: SerialNumber: syz [ 108.352950][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.381273][ T5724] em28xx 3-1:1.0: Input extension successfully initialized [ 108.393503][ T5802] em28xx 3-1:1.0: Closing input extension [ 108.503816][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.550330][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.580314][ T5844] CIFS: Attempting to mount //127.0.0.1/share [ 108.633269][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.767654][ T5604] r8152-cfgselector 1-1: Unknown version 0x0000 [ 108.821625][ T5844] CIFS: VFS: Error connecting to socket. Aborting operation. [ 108.821783][ T5844] CIFS: VFS: cifs_mount failed w/return code = -4 [ 108.919254][ T5844] syz.1.12 (5844) used greatest stack depth: 18848 bytes left [ 109.099641][ T5851] PM: suspend entry (s2idle) [ 109.493823][ T5802] em28xx 3-1:1.0: Freeing device [ 109.638443][ T5604] r8152-cfgselector 1-1: reset high-speed USB device number 4 using dummy_hcd [ 109.915591][ T5802] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.089597][ T5802] usb 3-1: config index 0 descriptor too short (expected 75, got 74) [ 110.118665][ T5802] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 110.118694][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.118712][ T5802] usb 3-1: Product: syz [ 110.118726][ T5802] usb 3-1: Manufacturer: syz [ 110.118741][ T5802] usb 3-1: SerialNumber: syz [ 110.939292][ T12] Filesystems sync: 1.780 seconds [ 110.966935][ T5802] ath6kl: Unsupported hardware version: 0x0 [ 111.018272][ T5802] ath6kl: Failed to init ath6kl core: -22 [ 111.040346][ T5802] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -22 [ 111.287580][ T5601] Bluetooth: hci2: command 0x2016 tx timeout [ 111.340408][ T5604] r8152 1-1:1.0: USB reset failed, errno=-19 [ 111.394609][ T5604] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 111.476390][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.476514][ T5851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.844061][ T5851] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.234073][ T821] usb 3-1: USB disconnect, device number 3 [ 112.285389][ T5851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.285479][ T5851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.344265][ T5876] lo speed is unknown, defaulting to 1000 [ 112.405660][ T5876] lo speed is unknown, defaulting to 1000 [ 112.573680][ T5851] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.810180][ T5881] CIFS: VFS: UNC: path must begin with // or \\ [ 112.810196][ T5881] Malformed UNC in devname [ 112.810196][ T5881] [ 112.810294][ T5881] CIFS: VFS: Malformed UNC in devname [ 112.877118][ T5851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.877216][ T5851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.907039][ T5876] lo speed is unknown, defaulting to 1000 [ 112.965925][ T5851] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.975135][ T821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.077588][ T5876] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 113.077628][ T5876] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 113.077671][ T5876] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 113.129056][ T5851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.129142][ T5851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.172510][ T821] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 113.172539][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.172558][ T821] usb 3-1: Product: syz [ 113.172572][ T821] usb 3-1: Manufacturer: syz [ 113.172587][ T821] usb 3-1: SerialNumber: syz [ 113.338713][ T5876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.394088][ T5876] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 113.525147][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.589279][ T5851] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.884874][ T5851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.901070][ T5851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.181566][ T5851] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.328616][ T5607] Bluetooth: hci2: command 0x2016 tx timeout [ 114.664442][ T5851] Freezing user space processes [ 114.863489][ T5876] lo speed is unknown, defaulting to 1000 [ 114.886383][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.993179][ T5876] lo speed is unknown, defaulting to 1000 [ 115.059624][ T5876] lo speed is unknown, defaulting to 1000 [ 115.061472][ T821] usb 3-1: USB disconnect, device number 4 [ 115.121896][ T5876] lo speed is unknown, defaulting to 1000 [ 115.205216][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.213942][ T5876] lo speed is unknown, defaulting to 1000 [ 115.607887][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.925473][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.409235][ T5607] Bluetooth: hci2: command 0x2016 tx timeout [ 116.465143][ T5859] NFSD: Unable to initialize client recovery tracking! (-110) [ 116.465159][ T5859] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 116.465168][ T5859] NFSD: starting 90-second grace period (net f00003bf) [ 116.547546][ T5851] ------------[ cut here ]------------ [ 116.547559][ T5851] debug_locks && p->lockdep_depth [ 116.547579][ T5851] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#1: syz.1.14/5851 [ 116.547642][ T5851] Modules linked in: [ 116.547683][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.547734][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.547751][ T5851] RIP: 0010:__set_task_frozen+0x260/0x340 [ 116.547807][ T5851] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 116.547825][ T5851] RSP: 0018:ffffc900061c79f0 EFLAGS: 00010046 [ 116.547844][ T5851] RAX: ffffffff81b0b75f RBX: ffff88801e399f00 RCX: 0000000000080000 [ 116.547860][ T5851] RDX: ffffc90004d51000 RSI: 000000000007ffff RDI: 0000000000080000 [ 116.547875][ T5851] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 116.547887][ T5851] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88801e399f18 [ 116.547904][ T5851] R13: 1ffff11003c733e3 R14: 0000000000000000 R15: ffff88801e39ab00 [ 116.547920][ T5851] FS: 00007fd18c6866c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 116.547939][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.547955][ T5851] CR2: 00007f2a37847e1f CR3: 000000005c71e000 CR4: 00000000003526f0 [ 116.547974][ T5851] Call Trace: [ 116.547983][ T5851] [ 116.548004][ T5851] ? __pfx___set_task_frozen+0x10/0x10 [ 116.548040][ T5851] task_call_func+0x1aa/0x260 [ 116.548084][ T5851] freeze_task+0x216/0x390 [ 116.548118][ T5851] ? __pfx_rt_read_lock+0x10/0x10 [ 116.548145][ T5851] ? __pfx_freeze_task+0x10/0x10 [ 116.548179][ T5851] ? usleep_range_state+0x95/0x180 [ 116.548210][ T5851] ? usleep_range_state+0x13a/0x180 [ 116.548246][ T5851] try_to_freeze_tasks+0x190/0x620 [ 116.548286][ T5851] freeze_processes+0xce/0x1e0 [ 116.548317][ T5851] pm_suspend+0x2f1/0x760 [ 116.548351][ T5851] state_store+0x206/0x290 [ 116.548379][ T5851] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.548400][ T5851] kernfs_fop_write_iter+0x3a5/0x540 [ 116.548440][ T5851] vfs_write+0x61e/0xbb0 [ 116.548481][ T5851] ? __pfx_vfs_write+0x10/0x10 [ 116.548514][ T5851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.548546][ T5851] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.548580][ T5851] ? mutex_lock_nested+0x152/0x1d0 [ 116.548602][ T5851] ? fdget_pos+0x252/0x320 [ 116.548639][ T5851] ksys_write+0x156/0x270 [ 116.548674][ T5851] ? __pfx_ksys_write+0x10/0x10 [ 116.548716][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.548741][ T5851] do_syscall_64+0x174/0x580 [ 116.548772][ T5851] ? trace_irq_disable+0x3b/0x140 [ 116.548796][ T5851] ? clear_bhb_loop+0x40/0x90 [ 116.548825][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.548847][ T5851] RIP: 0033:0x7fd18e42e019 [ 116.548877][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.548894][ T5851] RSP: 002b:00007fd18c686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.548916][ T5851] RAX: ffffffffffffffda RBX: 00007fd18e6b5fa0 RCX: 00007fd18e42e019 [ 116.548933][ T5851] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.548960][ T5851] RBP: 00007fd18e4c500c R08: 0000000000000000 R09: 0000000000000000 [ 116.548973][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.548986][ T5851] R13: 00007fd18e6b6038 R14: 00007fd18e6b5fa0 R15: 00007ffd8b701cb8 [ 116.549031][ T5851] [ 116.549046][ T5851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.549061][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.549085][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.549097][ T5851] Call Trace: [ 116.549105][ T5851] [ 116.549114][ T5851] vpanic+0x56c/0xa60 [ 116.549136][ T5851] ? __pfx__printk+0x10/0x10 [ 116.549163][ T5851] ? __pfx_vpanic+0x10/0x10 [ 116.549183][ T5851] ? is_bpf_text_address+0x292/0x2b0 [ 116.549208][ T5851] ? is_bpf_text_address+0x26/0x2b0 [ 116.549244][ T5851] panic+0xc5/0xd0 [ 116.549265][ T5851] ? __pfx_panic+0x10/0x10 [ 116.549305][ T5851] __warn+0x315/0x4c0 [ 116.549325][ T5851] ? __set_task_frozen+0x260/0x340 [ 116.549363][ T5851] ? __set_task_frozen+0x260/0x340 [ 116.549398][ T5851] __report_bug+0x276/0x570 [ 116.549435][ T5851] ? __set_task_frozen+0x260/0x340 [ 116.549472][ T5851] ? __pfx___report_bug+0x10/0x10 [ 116.549505][ T5851] ? __lock_acquire+0x683/0x2ce0 [ 116.549535][ T5851] ? __lock_acquire+0x683/0x2ce0 [ 116.549567][ T5851] ? __set_task_frozen+0x260/0x340 [ 116.549601][ T5851] report_bug+0x16a/0x220 [ 116.549646][ T5851] ? __set_task_frozen+0x260/0x340 [ 116.549677][ T5851] ? __set_task_frozen+0x262/0x340 [ 116.549708][ T5851] handle_bug+0x9c/0x200 [ 116.549740][ T5851] exc_invalid_op+0x1a/0x50 [ 116.549772][ T5851] asm_exc_invalid_op+0x1a/0x20 [ 116.549792][ T5851] RIP: 0010:__set_task_frozen+0x260/0x340 [ 116.549825][ T5851] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 116.549842][ T5851] RSP: 0018:ffffc900061c79f0 EFLAGS: 00010046 [ 116.549859][ T5851] RAX: ffffffff81b0b75f RBX: ffff88801e399f00 RCX: 0000000000080000 [ 116.549874][ T5851] RDX: ffffc90004d51000 RSI: 000000000007ffff RDI: 0000000000080000 [ 116.549889][ T5851] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 116.549901][ T5851] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88801e399f18 [ 116.549916][ T5851] R13: 1ffff11003c733e3 R14: 0000000000000000 R15: ffff88801e39ab00 [ 116.549937][ T5851] ? __pfx___set_task_frozen+0x10/0x10 [ 116.549970][ T5851] ? __set_task_frozen+0x25f/0x340 [ 116.550020][ T5851] ? __pfx___set_task_frozen+0x10/0x10 [ 116.550051][ T5851] task_call_func+0x1aa/0x260 [ 116.550092][ T5851] freeze_task+0x216/0x390 [ 116.550143][ T5851] ? __pfx_rt_read_lock+0x10/0x10 [ 116.550168][ T5851] ? __pfx_freeze_task+0x10/0x10 [ 116.550211][ T5851] ? usleep_range_state+0x95/0x180 [ 116.550240][ T5851] ? usleep_range_state+0x13a/0x180 [ 116.550272][ T5851] try_to_freeze_tasks+0x190/0x620 [ 116.550309][ T5851] freeze_processes+0xce/0x1e0 [ 116.550337][ T5851] pm_suspend+0x2f1/0x760 [ 116.550374][ T5851] state_store+0x206/0x290 [ 116.550399][ T5851] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.550418][ T5851] kernfs_fop_write_iter+0x3a5/0x540 [ 116.550455][ T5851] vfs_write+0x61e/0xbb0 [ 116.550509][ T5851] ? __pfx_vfs_write+0x10/0x10 [ 116.550543][ T5851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.550573][ T5851] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.550605][ T5851] ? mutex_lock_nested+0x152/0x1d0 [ 116.550627][ T5851] ? fdget_pos+0x252/0x320 [ 116.550662][ T5851] ksys_write+0x156/0x270 [ 116.550695][ T5851] ? __pfx_ksys_write+0x10/0x10 [ 116.550735][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.550760][ T5851] do_syscall_64+0x174/0x580 [ 116.550788][ T5851] ? trace_irq_disable+0x3b/0x140 [ 116.550810][ T5851] ? clear_bhb_loop+0x40/0x90 [ 116.550836][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.550858][ T5851] RIP: 0033:0x7fd18e42e019 [ 116.550877][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.550894][ T5851] RSP: 002b:00007fd18c686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.550915][ T5851] RAX: ffffffffffffffda RBX: 00007fd18e6b5fa0 RCX: 00007fd18e42e019 [ 116.550929][ T5851] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.550939][ T5851] RBP: 00007fd18e4c500c R08: 0000000000000000 R09: 0000000000000000 [ 116.550949][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.550959][ T5851] R13: 00007fd18e6b6038 R14: 00007fd18e6b5fa0 R15: 00007ffd8b701cb8 [ 116.550987][ T5851] [ 116.553806][ T5851] Kernel Offset: disabled