last executing test programs: 2m24.396428555s ago: executing program 32 (id=54): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000005000)={0x84, &(0x7f0000005100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x84, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x84, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) 2m21.274730081s ago: executing program 4 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/dlm/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/dlm/mycluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/dlm/mycluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/dlm/mycluster/comms/1/addr_list\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="0600000000000000020000000401000000000000000000006d796c7300"/124, 0x7c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/dlm/myls/nodir\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/myls/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1\x00', 0x2) 2m13.614114054s ago: executing program 4 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freezer', 0x6) 2m13.252426148s ago: executing program 5 (id=78): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='devices\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='mem\n', 0x4) 2m13.187149349s ago: executing program 3 (id=79): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 1m59.360674157s ago: executing program 4 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@usrquota}]}, 0x0, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0/quota\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000800)="118fc0d900"/32, 0x20) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x2, &(0x7f0000000700)='./file0/quota\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000a00)='A', 0x1) 1m59.352479168s ago: executing program 5 (id=82): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47}}) 1m59.285324729s ago: executing program 3 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/dummy_hcd/parameters/is_super_speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/16, 0x10) 1m58.990392126s ago: executing program 5 (id=85): syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403030506000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000002000000000000000000000049454339353820506c61796261636b2053776974636800"/74) ioctl(r0, 0xc4c85512, &(0x7f0000000400)="0000000003000000000000000000000049454339353820506c61796261636b2044656661756c7400"/74) 1m58.927989875s ago: executing program 2 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vga16fb/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vga16fb\x00', 0x8) 1m58.867164284s ago: executing program 3 (id=87): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x7, "10ff001102005a"}}, 0xd) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) 1m58.676758793s ago: executing program 4 (id=88): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000180)={0x15, 0x118, 0xfa00, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 1m58.676553635s ago: executing program 2 (id=89): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r0, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 1m58.138783875s ago: executing program 2 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 1m57.722942624s ago: executing program 3 (id=91): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x100, {0x102, 0x0, '\x00'/256}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x100, "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1m57.319347787s ago: executing program 2 (id=93): syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) 1m57.135086574s ago: executing program 2 (id=94): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x1f, "0000000000000100"}, 0x9) listen(r0, 0x1) 1m56.928788681s ago: executing program 4 (id=95): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0) 1m56.82408586s ago: executing program 2 (id=96): r0 = syz_usb_connect(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1660, 0x932, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x1, 0x3, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x82, 0x1, 0x200, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x6, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) 1m56.337380139s ago: executing program 5 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='active\x00', 0x7) 1m55.98456215s ago: executing program 5 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_hugepages\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1000\x00', 0x4) (async) 1m54.916534786s ago: executing program 5 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n', 0x4) 1m54.280736194s ago: executing program 3 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4\x00', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') write(0xffffffffffffffff, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 1m53.930212956s ago: executing program 3 (id=102): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m53.555328735s ago: executing program 4 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7964657600") ioctl(r0, 0xc180fd09, &(0x7f0000002000)="0400000000000000000000008001000038010000010000000000000000000000000000000000000000000000000000006d79646576000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000077726974656361636865000000000073202f6465762f72616d30202f6465762f72616d31203430393600") ioctl(r0, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7964657600") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/mydev\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000004000)=0x1000) 55.431847328s ago: executing program 33 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 55.194737476s ago: executing program 34 (id=96): r0 = syz_usb_connect(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1660, 0x932, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x1, 0x3, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x82, 0x1, 0x200, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}, {{0x9, 0x4, 0x0, 0x6, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) 34.717149554s ago: executing program 35 (id=102): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x1}, 0x0) 34.439297702s ago: executing program 36 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7964657600") ioctl(r0, 0xc180fd09, &(0x7f0000002000)="0400000000000000000000008001000038010000010000000000000000000000000000000000000000000000000000006d79646576000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000077726974656361636865000000000073202f6465762f72616d30202f6465762f72616d31203430393600") ioctl(r0, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7964657600") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/mydev\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000004000)=0x1000) 34.153633172s ago: executing program 37 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk\n', 0x4) 12.117629021s ago: executing program 0 (id=108): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 10.06971645s ago: executing program 1 (id=107): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x21, 0x100, 0x4}}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x4, 0x100, &(0x7f0000000200)=""/256) syz_usb_ep_write(r0, 0x83, 0x18, &(0x7f0000000100)="1200004e0000000a00000000000201000001000000000000") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x8923, &(0x7f0000000300)='wlan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan99\x00'/32) ioctl(r1, 0x8923, &(0x7f0000000400)='wlan2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan0\x00'/32) syz_80211_join_ibss(&(0x7f0000000500)='wlan0\x00', &(0x7f0000000600)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000800)={0x11, 0x300, r2}, 0x14) sendto$packet(r1, &(0x7f0000000900)="00000000000000000000000008004500001c00004000401100007f0000017f0000010035003500080000", 0x2a, 0x0, 0x0, 0x0) 9.192455847s ago: executing program 0 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f0000006300)='1\x00', 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000006400), 0x2, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000006500), 0x2) write(r1, &(0x7f0000000000)="02fa02000200", 0x6) write(r1, &(0x7f0000000000)="02fa", 0x2) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa02fa", 0x4) write(r1, &(0x7f0000000000)="02fa020502470207", 0x8) write(r1, &(0x7f0000000000)="02fa02aa0200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020502470207", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002400200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002400200", 0x6) write(r1, &(0x7f0000000000)="02fa02fa02fa02fa02fa02fa02fa02fa02fa02fa", 0x14) write(r1, &(0x7f0000000000)="020002000200", 0x6) nanosleep(&(0x7f0000006600)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000006800)='bare\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000006710)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000006800)='bare\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000006720)='./sys/bus/serio/devices/serio2/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000006800)='bare\x00', 0x4) 8.917757812s ago: executing program 9 (id=121): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x1, &(0x7f0000000040), 0x0, 0x50ec, &(0x7f00000051c0)="$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") r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) pwrite64(r1, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4, 0x10000) r2 = openat(r0, &(0x7f0000000200)='file\x00', 0x42, 0x1ff) r3 = memfd_create(&(0x7f0000000300)='memfd\x00', 0x0) ftruncate(r3, 0x2000) sendfile(r2, r3, 0x0, 0x2000) fsync(r2) 8.128711272s ago: executing program 6 (id=56): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810c70b0001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000140)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000208)="3001") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000180)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000001c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000210)='\x00') nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x2) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 7.980174667s ago: executing program 7 (id=122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000005000), 0x90, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0xb2, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="04ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) 7.733929606s ago: executing program 8 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='id_ext=0,ioc_guid=0,src=127.0.0.1,dest=127.0.0.1:3260\x00', 0x35) 7.416787551s ago: executing program 0 (id=124): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x0, 0x17d78400}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") (async) read$hidraw(r1, &(0x7f0000000800), 0x9) 6.6413799s ago: executing program 8 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='2\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000680)='active\x00', 0x7) 6.492955886s ago: executing program 7 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4\x00', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') write(0xffffffffffffffff, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 5.948687675s ago: executing program 7 (id=127): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="112233445566", 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, &(0x7f0000000240)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b, @from_mac=@device_b, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c) 5.798832153s ago: executing program 8 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e040c400001000000010902120001010080fa0904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.780257992s ago: executing program 0 (id=129): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) 5.476736104s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem', 0x2) 5.476479727s ago: executing program 9 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 5.228232018s ago: executing program 1 (id=132): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) read(r3, &(0x7f0000000210)=""/4096, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) read(r4, &(0x7f0000000210)=""/4096, 0x1000) r5 = syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0) read(r5, &(0x7f0000000210)=""/4096, 0x1000) 4.879986486s ago: executing program 7 (id=133): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000400000000000000000000109022d0001010080320904000002030000000921110100012217000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0900a10185020901150026ff00750895088102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x17}}}}, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x8, "0200000000000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 3.716710257s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/snd_aloop\x00', 0x0, 0x0) 3.614612732s ago: executing program 6 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='pcie_mp2_amd\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers_probe\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0000:00:04.0\x00', 0xd) 3.352832972s ago: executing program 1 (id=136): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000000100)="900100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880100"/256) syz_usb_ep_read(r0, 0x1, 0x100, &(0x7f0000000300)=""/256) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000900)=""/256, 0x100) 3.158666639s ago: executing program 9 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x61) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r4, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(r4) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) 3.15685015s ago: executing program 6 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/fs/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add syz0 127.0.0.1\n', 0x13) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x1c) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2.672174019s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 2.618827859s ago: executing program 6 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='2\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000680)='active\x00', 0x7) 2.359446932s ago: executing program 8 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) close(r0) 2.164882238s ago: executing program 7 (id=142): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47}}) 2.03523527s ago: executing program 9 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/thunderbolt/devices\x00', 0x0, 0x0) 1.724382636s ago: executing program 7 (id=144): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810c70b0001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000140)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000208)="3001") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000180)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000001c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000210)='\x00') nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x2) 1.633509049s ago: executing program 8 (id=145): r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x8946, &(0x7f0000000100)='*\x00'/256) ioctl(r0, 0x8946, &(0x7f0000000000)="65746830000000000000000000000000000100000000007f00"/40) 1.631016686s ago: executing program 0 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='snd_hda_intel\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0000:00:03.0\x00', 0xd) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 1.43667245s ago: executing program 9 (id=147): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x111111111', 0x5a) 1.414429787s ago: executing program 6 (id=148): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 963.38568ms ago: executing program 1 (id=149): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c41060ea0001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000001000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)={0x84, &(0x7f0000003000)={0xc1, 0xff, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000500)="01020304050607") 820.579724ms ago: executing program 9 (id=150): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020200020007058602000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="ffffffff") syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 578.712245ms ago: executing program 8 (id=151): r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='101:1\x00', 0x5) kernel console output (not intermixed with test programs): 68][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.965654][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.007183][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.110926][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130779][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.174187][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.180168][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.186757][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201620][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.237192][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.279799][ T5871] svc: failed to register lockdv1 RPC service (errno 111). [ 100.312980][ T5871] lockd_up: makesock failed, error=-111 [ 100.368030][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.395720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.428503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.596063][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.685717][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.695090][ T5871] svc: failed to register nfsdv3 RPC service (errno 512). [ 100.725708][ T5871] svc: failed to register nfsaclv3 RPC service (errno 512). [ 100.733345][ T1177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.758628][ T5871] failed to unregister tcp with rpcbind [ 100.788308][ T5871] svc: failed to register nfsdv3 RPC service (errno 97). [ 100.823442][ T5871] svc: failed to register nfsaclv3 RPC service (errno 97). [ 100.852179][ T5871] failed to unregister tcp with rpcbind [ 100.858819][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.869051][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.879225][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.920496][ T5755] libceph: mon0 (1)127.0.0.1:12345 socket error on write [ 100.972017][ T5755] libceph: mon0 (1)127.0.0.1:12345 socket error on write [ 101.005445][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.029585][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.072761][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.089682][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.126209][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.144957][ T5778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.247271][ T5764] libceph: mon0 (1)127.0.0.1:12345 socket error on write [ 101.311446][ T5778] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 101.332464][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.683535][ T5895] loop4: detected capacity change from 0 to 32768 [ 101.700761][ T5887] ceph: No mds server is up or the cluster is laggy [ 101.767476][ T5895] (syz.4.5,5895,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 101.826512][ T5895] (syz.4.5,5895,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 101.920551][ T5899] lo speed is unknown, defaulting to 1000 [ 101.940111][ T5899] lo speed is unknown, defaulting to 1000 [ 101.955896][ T5899] lo speed is unknown, defaulting to 1000 [ 101.970813][ T5899] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 102.028889][ T5899] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 102.060940][ T5899] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 102.077594][ T5899] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.107317][ T5899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.137807][ T5778] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 102.164220][ T5778] usb 1-1: 2:0: failed to get current value for ch 0 (-22) [ 102.175329][ T5885] NFSD: Unable to initialize client recovery tracking! (-110) [ 102.202016][ T5885] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 102.239695][ T5885] NFSD: starting 90-second grace period (net f00003cb) [ 102.264211][ T5778] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 102.288389][ T5899] lo speed is unknown, defaulting to 1000 [ 102.306037][ T5778] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 102.312911][ T5899] lo speed is unknown, defaulting to 1000 [ 102.339461][ T5899] lo speed is unknown, defaulting to 1000 [ 102.356736][ T5899] lo speed is unknown, defaulting to 1000 [ 102.359254][ T5778] usb 1-1: [2] FU [PCM Playback Volume] ch = 2, val = 0/1/1 [ 102.382185][ T5899] lo speed is unknown, defaulting to 1000 [ 102.401817][ T5899] lo speed is unknown, defaulting to 1000 [ 102.417677][ T5763] usb 3-1: USB disconnect, device number 2 [ 102.540832][ T5910] digital: digital_start_poll: Unknown protocol [ 102.781958][ T5778] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 102.957555][ T5778] usb 1-1: USB disconnect, device number 2 [ 103.035947][ T5763] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.077162][ T31] audit: type=1800 audit(1785882604.998:2): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="attr_allow_any_host" dev="configfs" ino=8079 res=0 errno=0 [ 103.137309][ T31] audit: type=1800 audit(1785882605.058:3): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="addr_trtype" dev="configfs" ino=8085 res=0 errno=0 [ 103.210784][ T5924] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 103.220072][ T31] audit: type=1800 audit(1785882605.068:4): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="addr_traddr" dev="configfs" ino=8086 res=0 errno=0 [ 103.299698][ T31] audit: type=1800 audit(1785882605.068:5): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="addr_trsvcid" dev="configfs" ino=8087 res=0 errno=0 [ 103.354391][ T31] audit: type=1800 audit(1785882605.118:6): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15" name="addr_adrfam" dev="configfs" ino=8088 res=0 errno=0 [ 103.629002][ T1950] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:690d9071-f6c0-48e8-a424-0956422b5669. [ 103.643790][ T5778] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 103.703751][ T5924] nvme nvme0: creating 2 I/O queues. [ 103.723442][ T5924] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 103.747044][ T5924] nvme nvme0: new ctrl: NQN "testnqn", addr 127.0.0.1:8009, hostnqn: nqn.2014-08.org.nvmexpress:uuid:690d9071-f6c0-48e8-a424-0956422b5669 [ 103.781028][ T5763] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 103.804631][ T5763] usb 3-1: can't read configurations, error -71 [ 103.827610][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.838280][ T5919] loop1: detected capacity change from 0 to 32768 [ 103.845889][ T5778] usb 1-1: not running at top speed; connect to a high speed hub [ 103.868855][ T5778] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 103.880478][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.891027][ T5778] usb 1-1: Product: syz [ 103.893473][ T5919] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10 (5919) [ 103.900455][ T5778] usb 1-1: Manufacturer: syz [ 103.913177][ T5778] usb 1-1: SerialNumber: syz [ 104.033618][ T5919] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 104.053939][ T5919] BTRFS info (device loop1): using crc32c checksum algorithm [ 104.227151][ T5919] BTRFS info (device loop1): enabling ssd optimizations [ 104.236008][ T5919] BTRFS info (device loop1): turning on async discard [ 104.242994][ T5919] BTRFS info (device loop1): enabling free space tree [ 104.646990][ T5930] NFSD: Unable to initialize client recovery tracking! (-110) [ 104.665042][ T5930] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 104.690126][ T5629] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 104.713685][ T5930] NFSD: starting 10-second grace period (net f00003cb) [ 105.174614][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.336664][ T5934] svc: failed to register nfsdv3 RPC service (errno 111). [ 105.349296][ T24] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 105.359933][ T5934] svc: failed to register nfsaclv3 RPC service (errno 111). [ 105.371363][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.386362][ T5934] failed to unregister tcp with rpcbind [ 105.393946][ T5934] svc: failed to register nfsdv3 RPC service (errno 97). [ 105.416778][ T24] usb 6-1: NFC: intf ffff88807b130000 id ffffffff8fc6b9e0 [ 105.424145][ T5934] svc: failed to register nfsaclv3 RPC service (errno 97). [ 105.434132][ T5934] failed to unregister tcp with rpcbind [ 105.534240][ T5965] loop1: detected capacity change from 0 to 32768 [ 105.534416][ T24] nfcmrvl 6-1:1.0: NFC: registered with nci successfully [ 105.586885][ T5960] NFSD: Failed to start, no listeners configured. [ 105.628115][ T5965] JBD2: Ignoring recovery information on journal [ 105.729015][ T5965] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.770421][ T5778] usb 1-1: 2:0: failed to get current value for ch 0 (-22) [ 105.985538][ T5778] usb 1-1: USB disconnect, device number 3 [ 106.173449][ T5650] udevd[5650]: setting mode of /dev/bus/usb/001/003 to 020664 failed: No such file or directory [ 106.216670][ T5650] udevd[5650]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 106.309596][ T5629] ocfs2: Unmounting device (7,1) on (node local) [ 106.358396][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.369100][ T5982] configfs-gadget.g1 gadget.0: HOST MAC a2:e2:84:2d:ca:25 [ 106.406821][ T5982] configfs-gadget.g1 gadget.0: MAC c6:0f:5f:3c:fb:8b [ 106.657557][ T5788] usb 6-1: USB disconnect, device number 2 [ 106.684854][ T5778] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.740721][ T5788] usb 6-1: NFC: intf ffff88807b130000 [ 106.877761][ T5778] usb 1-1: Dual-Role OTG device on HNP port [ 106.902035][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 106.942146][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.044011][ T5778] cdc_ncm 1-1:1.0: MAC-Address: a2:e2:84:2d:ca:25 [ 107.159686][ T5778] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a2:e2:84:2d:ca:25 [ 107.175497][ T6006] lo: entered allmulticast mode [ 107.193566][ T5998] lo: left allmulticast mode [ 107.355493][ T5788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.537099][ T5788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.572256][ T5788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.601192][ T5788] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 107.621978][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.674108][ T6004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.701018][ T6004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.788204][ T4938] Bluetooth: hci6: Can't claim NULL iso interface [ 107.834716][ T5763] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.894571][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.033218][ T5763] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 108.054659][ T5763] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 108.079542][ T5860] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.086035][ T5763] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 108.115312][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.126425][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.145734][ T5860] usb 3-1: Product: syz [ 108.164107][ T5860] usb 3-1: Manufacturer: syz [ 108.175308][ T6013] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 108.180374][ T5860] usb 3-1: SerialNumber: syz [ 108.187452][ T6013] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 108.463045][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.549871][ T5636] Bluetooth: hci7: Unsupported Intel hardware variant (0) [ 108.557411][ T5636] Bluetooth: hci7: Unsupported Intel hw variant (0) [ 108.802759][ T6028] Bluetooth: MGMT ver 1.23 [ 108.844010][ T6028] Bluetooth: MGMT ver 1.23 [ 108.923264][ T31] audit: type=1800 audit(1785882610.848:7): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.33" name="UDC" dev="configfs" ino=9569 res=0 errno=0 [ 109.281132][ T6011] loop5: detected capacity change from 0 to 32768 [ 109.327637][ T4938] Bluetooth: hci6: Failed to get device id (-71) [ 109.334220][ T4938] Bluetooth: hci6: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 109.337378][ T5771] usb 2-1: USB disconnect, device number 2 [ 109.476698][ T6011] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.505687][ T5860] usb 5-1: USB disconnect, device number 2 [ 109.700910][ T6011] XFS (loop5): Ending clean mount [ 109.925381][ T24] usb 3-1: Service connection timeout for: 256 [ 109.947081][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 109.999219][ T24] ath9k_htc: Failed to initialize the device [ 110.044242][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 110.315800][ T5622] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.616049][ T6062] svc: failed to register lockdv1 RPC service (errno 111). [ 110.654210][ T6060] lo speed is unknown, defaulting to 1000 [ 110.781128][ T5763] usb 3-1: USB disconnect, device number 5 [ 110.943919][ T6062] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.981631][ T6062] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.009106][ T6062] failed to unregister tcp with rpcbind [ 111.039821][ T6062] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.085529][ T6062] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.108439][ T6062] failed to unregister tcp with rpcbind [ 111.226408][ T6051] loop0: detected capacity change from 0 to 32768 [ 111.245517][ T6051] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.35 (6051) [ 111.299151][ T6051] BTRFS info (device loop0): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 111.321695][ T6051] BTRFS info (device loop0): using blake2b checksum algorithm [ 111.475846][ T5764] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.491616][ T6051] BTRFS info (device loop0): enabling ssd optimizations [ 111.504587][ T6051] BTRFS info (device loop0): turning on async discard [ 111.535322][ T6051] BTRFS info (device loop0): enabling free space tree [ 111.686480][ T5764] usb 6-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 111.702248][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.730611][ T5764] usb 6-1: Product: syz [ 111.746156][ T5764] usb 6-1: Manufacturer: syz [ 111.760119][ T5764] usb 6-1: SerialNumber: syz [ 112.008911][ T6093] loop1: detected capacity change from 0 to 2304 [ 112.089318][ T6071] loop2: detected capacity change from 0 to 32768 [ 112.210541][ T6071] JBD2: Ignoring recovery information on journal [ 112.291271][ T6093] BTRFS info: device ./proc/self/fd/100 (7:1) using temp-fsid 4b92218e-378f-4e57-b89d-de1adc10a756 [ 112.329980][ T6067] NFSD: Unable to initialize client recovery tracking! (-110) [ 112.391860][ T6067] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 112.412637][ T6067] NFSD: starting 90-second grace period (net f0000438) [ 112.438038][ T6071] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 112.458803][ T6051] BTRFS info (device loop0): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 112.578193][ T6093] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 ./proc/self/fd/100 (7:1) scanned by syz.0.35 (6093) [ 112.759922][ T6093] BTRFS error: failed to open device for path ./proc/self/fd/100 with flags 0x23: -13 [ 112.921571][ T5632] ocfs2: Unmounting device (7,2) on (node local) [ 113.758407][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.766308][ T5771] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.948349][ T5771] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 113.995181][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 0.00 [ 114.014005][ T5771] usb 4-1: config 1 interface 2 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 114.034120][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.045185][ T5771] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 114.065534][ T24] usb 5-1: Product: syz [ 114.069748][ T24] usb 5-1: Manufacturer: syz [ 114.075549][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.083649][ T24] usb 5-1: SerialNumber: syz [ 114.262921][ T6131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.792755][ T31] audit: type=1800 audit(1785882616.718:8): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="attr_allow_any_host" dev="configfs" ino=9686 res=0 errno=0 [ 114.819823][ T6140] nvmet: adding nsid 1 to subsystem testnqn [ 114.855046][ T31] audit: type=1800 audit(1785882616.778:9): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="device_path" dev="configfs" ino=10421 res=0 errno=0 [ 114.900617][ T6124] loop1: detected capacity change from 0 to 32768 [ 114.907462][ T31] audit: type=1800 audit(1785882616.788:10): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="buffered_io" dev="configfs" ino=10422 res=0 errno=0 [ 114.933588][ T6124] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.45 (6124) [ 114.953409][ T12] nvme nvme0: rescanning namespaces. [ 114.961132][ T31] audit: type=1800 audit(1785882616.788:11): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="enable" dev="configfs" ino=10423 res=0 errno=0 [ 114.992267][ T6140] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 115.052154][ T31] audit: type=1800 audit(1785882616.888:12): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="addr_trtype" dev="configfs" ino=10424 res=0 errno=0 [ 115.075192][ T6124] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 115.104926][ T6124] BTRFS info (device loop1): using sha256 checksum algorithm [ 115.168253][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.198141][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.316654][ T1100] nvmet: connect request for invalid subsystem testnqn! [ 115.370366][ T6124] BTRFS info (device loop1): enabling ssd optimizations [ 115.383812][ T6140] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 115.428344][ T6124] BTRFS info (device loop1): turning on async discard [ 115.458262][ T6124] BTRFS info (device loop1): enabling free space tree [ 115.501805][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 115.556262][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 115.606398][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 115.663784][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 115.692591][ T5764] usbhid 6-1:1.0: can't add hid device: -71 [ 115.707208][ T5764] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 115.733502][ T5764] usb 6-1: USB disconnect, device number 3 [ 115.758359][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 115.808961][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 115.871186][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 115.906676][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 115.978741][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 116.034024][ T6168] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 116.058139][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 116.096152][ T6175] svc: failed to register lockdv1 RPC service (errno 111). [ 116.128197][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 116.201820][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 116.259555][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 116.297783][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 116.342253][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 116.399040][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 116.445881][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 116.460929][ T6181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.484122][ T6175] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.493843][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 116.533900][ T6175] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.545517][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 116.564813][ T5771] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 116.572537][ T6175] failed to unregister tcp with rpcbind [ 116.603700][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 116.615337][ T6175] svc: failed to register nfsdv3 RPC service (errno 97). [ 116.626070][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 116.638578][ T6175] svc: failed to register nfsaclv3 RPC service (errno 97). [ 116.667864][ T6175] failed to unregister tcp with rpcbind [ 116.677880][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 116.700196][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 116.719721][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 116.734331][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 116.753564][ T5771] usb 3-1: not running at top speed; connect to a high speed hub [ 116.786878][ T5771] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 116.799942][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 116.817349][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.842921][ T24] ax88179_178a 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 116.900827][ T5771] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 006 [ 117.091163][ T6181] md: personality for level 1 is not loaded! [ 117.238282][ T24] ax88179_178a 5-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 06:ac:54:89:b6:91 [ 117.260059][ T5623] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 117.365161][ T24] usb 5-1: USB disconnect, device number 3 [ 117.417981][ T24] ax88179_178a 5-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 117.558571][ T5764] usb 4-1: USB disconnect, device number 2 [ 117.666300][ T6191] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 117.731756][ T5771] (null): failure reading functionality [ 117.809443][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.879498][ T5771] i2c i2c-1: failure reading functionality [ 117.949793][ T5771] i2c i2c-1: connected i2c-tiny-usb device [ 117.988018][ T5771] usb 3-1: USB disconnect, device number 6 [ 118.373947][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.778548][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.865886][ T5764] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.920876][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.967583][ T6209] svc: failed to register lockdv1 RPC service (errno 111). [ 118.969215][ T6216] siw: device registration error -23 [ 118.983141][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.997797][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.008150][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.019905][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.029438][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.083669][ T5764] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 119.096899][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.103566][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.107412][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.158174][ T5764] usb 4-1: NFC: intf ffff888026a72000 id ffffffff8fc6b9e0 [ 119.158942][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.235018][ T5764] nfcmrvl 4-1:1.0: NFC: registered with nci successfully [ 119.249467][ T6196] loop4: detected capacity change from 0 to 32768 [ 119.262136][ T24] usb 3-1: SerialNumber: syz [ 119.362800][ T6209] svc: failed to register nfsdv3 RPC service (errno 111). [ 119.396702][ T5764] usb 4-1: USB disconnect, device number 3 [ 119.408787][ T5764] usb 4-1: NFC: intf ffff888026a72000 [ 119.411725][ T6196] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.434872][ T6209] svc: failed to register nfsaclv3 RPC service (errno 111). [ 119.442807][ T6209] failed to unregister tcp with rpcbind [ 119.450890][ T6209] svc: failed to register nfsdv3 RPC service (errno 97). [ 119.461710][ T6209] svc: failed to register nfsaclv3 RPC service (errno 97). [ 119.471049][ T6209] failed to unregister tcp with rpcbind [ 119.589841][ T6196] XFS (loop4): Ending clean mount [ 119.838048][ T5637] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.900321][ T58] bridge_slave_1: left allmulticast mode [ 119.928849][ T58] bridge_slave_1: left promiscuous mode [ 120.008487][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.139614][ T58] bridge_slave_0: left allmulticast mode [ 120.188723][ T58] bridge_slave_0: left promiscuous mode [ 120.215389][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.367197][ T6248] PM: suspend entry (deep) [ 120.487150][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.508227][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.554357][ T5771] usb 3-1: USB disconnect, device number 7 [ 120.654719][ T5860] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 120.717845][ T1100] Filesystems sync: 0.318 seconds [ 120.816683][ T5860] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 120.833648][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 120.846084][ T5860] usb 6-1: can't read configurations, error -61 [ 120.894346][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.918187][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.949716][ T58] bond0 (unregistering): Released all slaves [ 120.984634][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.135846][ T5636] Bluetooth: hci2: command tx timeout [ 121.144134][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.161912][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.171902][ T5860] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 121.241520][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 121.273440][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.306373][ T5860] usb 6-1: can't read configurations, error -61 [ 121.338087][ T5860] usb usb6-port1: attempt power cycle [ 121.355902][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.403160][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.441507][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.491838][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.505224][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.567762][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.627108][ T6248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.633395][ T6274] dlm: no local IP address has been set [ 121.647707][ T6274] dlm: cannot start dlm midcomms -107 [ 121.653612][ T6248] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.689748][ T6248] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.728174][ T5860] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 121.750605][ T6248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 121.768163][ T6213] lo speed is unknown, defaulting to 1000 [ 121.788690][ T6248] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 121.806311][ T5860] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 121.839673][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 121.865912][ T6248] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 121.873610][ T5860] usb 6-1: can't read configurations, error -61 [ 121.896558][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.907173][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.939969][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.972026][ T6248] Freezing user space processes [ 122.014594][ T5860] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 122.055618][ T6248] Freezing user space processes completed (elapsed 0.076 seconds) [ 122.063975][ T6248] OOM killer disabled. [ 122.068767][ T6248] Freezing remaining freezable tasks [ 122.068796][ T58] hsr_slave_0: left promiscuous mode [ 122.081360][ T58] hsr_slave_1: left promiscuous mode [ 122.096211][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.103674][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.114148][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.121651][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.145060][ T58] veth1_macvtap: left promiscuous mode [ 122.151437][ T58] veth0_macvtap: left promiscuous mode [ 122.157113][ T58] veth1_vlan: left promiscuous mode [ 122.162434][ T58] veth0_vlan: left promiscuous mode [ 122.514650][ T58] team0 (unregistering): Port device team_slave_1 removed [ 122.548354][ T58] team0 (unregistering): Port device team_slave_0 removed [ 123.124841][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.364574][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.524667][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.684590][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.764617][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.934682][ T5636] Bluetooth: hci2: command 0x040f tx timeout [ 125.205731][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.445031][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.604755][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.765792][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.854543][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 126.005156][ T5636] Bluetooth: hci2: command 0x040f tx timeout [ 127.125015][ T5860] usb 6-1: device descriptor read/8, error -110 [ 127.241720][ T5860] usb usb6-port1: unable to enumerate USB device [ 127.255125][ T6248] Freezing remaining freezable tasks completed (elapsed 5.181 seconds) [ 127.263953][ T6248] printk: Suspending console(s) (use no_console_suspend to debug) [ 127.284768][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.486328][ T6248] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 127.486417][ T6248] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 127.486496][ T6248] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 127.486578][ T6248] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 127.486656][ T6248] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 127.486736][ T6248] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 127.486816][ T6248] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 127.486895][ T6248] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 127.486973][ T6248] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 127.487052][ T6248] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 127.487130][ T6248] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 127.487214][ T6248] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 127.487293][ T6248] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 127.487385][ T6248] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 127.487464][ T6248] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 127.525603][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.538944][ T6284] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 127.687596][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.844564][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.924600][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 128.084598][ T5636] Bluetooth: hci2: command 0x040f tx timeout [ 128.122538][ T6248] PM: suspend debug: Waiting for 0 second(s). [ 128.143498][ T58] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 128.597139][ T6284] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 128.817172][ T6248] OOM killer enabled. [ 128.817775][ T6248] Restarting tasks: Starting [ 128.839080][ T6248] Restarting tasks: Done [ 128.852976][ T6248] random: crng reseeded on system resumption [ 128.936453][ T6248] PM: suspend exit [ 129.233184][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.238089][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.433465][ T6378] PM: suspend entry (s2idle) [ 129.583985][ T6340] Filesystems sync: 0.144 seconds [ 129.623393][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.671355][ T6385] PM: suspend entry (deep) [ 129.672063][ T6385] PM: suspend exit [ 129.713138][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 129.784383][ T29] usb 3-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice= 1.00 [ 129.789052][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.792664][ T29] usb 3-1: Product: syz [ 129.795750][ T29] usb 3-1: Manufacturer: syz [ 129.797291][ T29] usb 3-1: SerialNumber: syz [ 129.859546][ T29] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 129.885039][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.905960][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.909475][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.910705][ T6213] bridge_slave_0: entered allmulticast mode [ 129.927737][ T6213] bridge_slave_0: entered promiscuous mode [ 129.939134][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.942995][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.957221][ T6213] bridge_slave_1: entered allmulticast mode [ 129.969812][ T6213] bridge_slave_1: entered promiscuous mode [ 130.058561][ T10] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 130.059838][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.061156][ T29] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 130.063026][ T29] usb 3-1: media controller created [ 130.063701][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.067025][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.068140][ T10] usb 4-1: Product: syz [ 130.069892][ T10] usb 4-1: Manufacturer: syz [ 130.070561][ T10] usb 4-1: SerialNumber: syz [ 130.076318][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.107620][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.152601][ T6213] team0: Port device team_slave_0 added [ 130.160190][ T6213] team0: Port device team_slave_1 added [ 130.166584][ T5636] Bluetooth: hci2: command 0x040f tx timeout [ 130.210751][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.211863][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.216332][ T6378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.217624][ T6378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.219192][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.220917][ T6378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.222011][ T6378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.226262][ T6378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.227322][ T6378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.228720][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.229799][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.238812][ T6378] Freezing user space processes [ 130.242414][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.254785][ T6378] Freezing user space processes completed (elapsed 0.015 seconds) [ 130.255943][ T6378] OOM killer disabled. [ 130.256547][ T6378] Freezing remaining freezable tasks [ 131.684880][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.169821][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.171039][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.254672][ T5636] Bluetooth: hci2: command 0x040f tx timeout [ 132.255643][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.255864][ T4938] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.257323][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.257410][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.298536][ T29] dvb-usb: bulk message failed: -110 (6/0) [ 135.366287][ T29] dvb-usb: bulk message failed: -110 (6/0) [ 135.367301][ T29] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 135.373225][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 135.378545][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 135.379534][ T29] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 135.386799][ T6378] Freezing remaining freezable tasks completed (elapsed 5.129 seconds) [ 135.387966][ T6378] printk: Suspending console(s) (use no_console_suspend to debug) [ 135.556197][ T6295] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 135.567304][ T6378] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 135.567422][ T6378] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 135.567503][ T6378] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 135.567581][ T6378] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 135.567659][ T6378] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 135.567743][ T6378] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 135.567821][ T6378] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 135.567899][ T6378] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 135.567978][ T6378] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 135.568069][ T6378] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 135.568148][ T6378] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 135.568226][ T6378] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 135.568304][ T6378] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 135.568383][ T6378] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 135.568461][ T6378] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 135.600624][ T6352] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 136.130883][ T6378] PM: suspend debug: Waiting for 0 second(s). [ 136.149610][ T6344] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 136.575730][ T6312] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 136.584605][ T6328] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 136.604928][ T6332] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 136.704634][ T6312] usb 4-1: device descriptor read/64, error -32 [ 136.954556][ T6312] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 137.084643][ T6312] usb 4-1: device descriptor read/64, error -32 [ 137.324620][ T6312] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 137.345566][ T6312] usb 4-1: device descriptor read/8, error -32 [ 137.524728][ T6312] raw-gadget.2 gadget.3: failed to queue resume event [ 137.584695][ T6312] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 137.605633][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 137.606898][ T6312] usb 4-1: device descriptor read/8, error -32 [ 137.714738][ T6312] raw-gadget.2 gadget.3: failed to queue suspend event [ 141.824585][ T6332] usb 3-1: device descriptor read/64, error -110 [ 142.064595][ T6332] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 142.194658][ T6332] usb 3-1: device descriptor read/64, error -32 [ 142.435215][ T6332] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 142.454999][ T6332] usb 3-1: device descriptor read/8, error -32 [ 142.635502][ T6332] raw-gadget.1 gadget.2: failed to queue resume event [ 142.694600][ T6332] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 142.714809][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 142.714955][ T6332] usb 3-1: device descriptor read/8, error -32 [ 142.827279][ T6332] raw-gadget.1 gadget.2: failed to queue suspend event [ 142.998946][ T6378] OOM killer enabled. [ 143.002931][ T6378] Restarting tasks: Starting [ 143.010602][ T24] usb 3-1: USB disconnect, device number 8 [ 143.017027][ T10] usb 4-1: USB disconnect, device number 4 [ 143.056563][ T6378] Restarting tasks: Done [ 143.108619][ T6378] random: crng reseeded on system resumption [ 143.150346][ T6378] PM: suspend exit [ 143.208710][ T24] raw-gadget.1 gadget.2: failed to queue reset event [ 143.258598][ T6384] raw-gadget.2 gadget.3: failed to queue disconnect event [ 143.294762][ T6377] raw-gadget.1 gadget.2: failed to queue disconnect event [ 143.439658][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.483633][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.545026][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.603675][ T6434] loop4: detected capacity change from 0 to 512 [ 143.615522][ T6213] hsr_slave_0: entered promiscuous mode [ 143.630424][ T6213] hsr_slave_1: entered promiscuous mode [ 143.648287][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 143.665052][ T6213] Cannot create hsr debugfs directory [ 143.688555][ T6434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.021131][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.037863][ T5756] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 144.105457][ T5764] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 144.281880][ T5764] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 144.343225][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.538514][ T6463] siw: device registration error -23 [ 144.643490][ T6462] lo speed is unknown, defaulting to 1000 [ 144.875045][ T6476] svc: failed to register lockdv1 RPC service (errno 111). [ 145.156237][ T6476] svc: failed to register nfsdv3 RPC service (errno 111). [ 145.171253][ T6476] svc: failed to register nfsaclv3 RPC service (errno 111). [ 145.207302][ T6476] failed to unregister tcp with rpcbind [ 145.222264][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.232770][ T6476] svc: failed to register nfsdv3 RPC service (errno 97). [ 145.242243][ T6476] svc: failed to register nfsaclv3 RPC service (errno 97). [ 145.250105][ T6476] failed to unregister tcp with rpcbind [ 145.261345][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.281929][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.335731][ T5756] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.421167][ T6213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.448539][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.461457][ T6213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.479979][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.497444][ T6213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 145.522104][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.524024][ T5756] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 145.544204][ T6213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.563678][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.594180][ T5756] usb 4-1: Product: syz [ 145.597578][ T6213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.615510][ T5756] usb 4-1: Manufacturer: syz [ 145.631421][ T5756] usb 4-1: SerialNumber: syz [ 145.679017][ T5764] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 145.997097][ T5764] usb 6-1: USB disconnect, device number 8 [ 146.048181][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.124930][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.126234][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.153960][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.161168][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.192487][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.199656][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.295157][ T5861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.301417][ T10] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 146.334184][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.351132][ T10] usb 5-1: Product: syz [ 146.355659][ T10] usb 5-1: Manufacturer: syz [ 146.360368][ T10] usb 5-1: SerialNumber: syz [ 146.470035][ T5861] usb 3-1: config 1 interface 0 has no altsetting 3 [ 146.484354][ T5861] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 146.513797][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.526666][ T10] ushc 5-1:1.0: probe with driver ushc failed with error -110 [ 146.551837][ T5861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 146.596245][ T5861] usb 3-1: setting power ON [ 147.542374][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 147.733220][ T5756] usb 4-1: probing VID:PID(0424:012C) [ 147.762700][ T5756] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 147.771485][ T5756] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 147.780056][ T5756] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 147.788288][ T5756] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 147.800370][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.810927][ T5756] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 147.854882][ T5756] vub300 4-1:1.0: probe with driver vub300 failed with error -71 [ 147.940916][ T5756] usb 4-1: USB disconnect, device number 6 [ 148.049287][ T6540] PM: hibernation: hibernation entry [ 148.577673][ T31] audit: type=1800 audit(1785882650.508:13): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="attr_allow_any_host" dev="configfs" ino=11789 res=0 errno=0 [ 148.599828][ T6550] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.619806][ T6550] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 148.639120][ T6550] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 148.655630][ T5861] dvb-usb: bulk message failed: -110 (2/0) [ 148.659138][ T6550] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 148.663731][ T31] audit: type=1800 audit(1785882650.538:14): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="addr_trtype" dev="configfs" ino=11063 res=0 errno=0 [ 148.708579][ T31] audit: type=1800 audit(1785882650.548:15): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="addr_traddr" dev="configfs" ino=11065 res=0 errno=0 [ 148.733135][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.771720][ T31] audit: type=1800 audit(1785882650.558:16): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="addr_trsvcid" dev="configfs" ino=11066 res=0 errno=0 [ 148.788042][ T5861] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 148.794088][ T31] audit: type=1800 audit(1785882650.588:17): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="addr_adrfam" dev="configfs" ino=11067 res=0 errno=0 [ 148.827213][ T6540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.844872][ T5861] usb 3-1: media controller created [ 148.874736][ T6540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.902302][ T6540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.930437][ T6540] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.938790][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.955578][ T6540] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 148.987404][ T6540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.119272][ T5764] usb 5-1: USB disconnect, device number 4 [ 149.146486][ T6330] Filesystems sync: 0.142 seconds [ 149.154736][ T6540] Freezing user space processes [ 149.167886][ T5756] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.178329][ T6540] Freezing user space processes completed (elapsed 0.010 seconds) [ 149.186810][ T6540] OOM killer disabled. [ 149.198098][ T6540] Freezing remaining freezable tasks [ 150.404750][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.895134][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.964818][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 150.965652][ T4938] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.974320][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.054943][ T5631] Bluetooth: hci2: command 0x040f tx timeout [ 154.085002][ T5861] usb 3-1: digital interface selection failed (-110) [ 154.093332][ T5861] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 154.114781][ T5861] usb 3-1: setting power OFF [ 154.124034][ T5861] dvb-usb: bulk message failed: -2 (2/0) [ 154.129875][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 154.139245][ T5861] usb 3-1: setting power ON [ 154.143870][ T5861] dvb-usb: bulk message failed: -2 (2/0) [ 154.150914][ T5861] usb 3-1: analog interface selection failed (-32) [ 154.194970][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 154.205264][ T5861] dvb_usb_cxusb 3-1:1.0: probe with driver dvb_usb_cxusb failed with error -32 [ 154.374568][ T5756] usb 4-1: device descriptor read/64, error -110 [ 154.624565][ T5756] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.764554][ T5756] usb 4-1: device descriptor read/64, error -32 [ 154.874753][ T5756] usb usb4-port1: attempt power cycle [ 155.234581][ T5756] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.255577][ T5756] usb 4-1: device descriptor read/8, error -32 [ 155.457178][ T5756] raw-gadget.0 gadget.3: failed to queue resume event [ 155.524553][ T5756] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.544738][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 155.551918][ T5756] usb 4-1: device descriptor read/8, error -32 [ 155.675555][ T5756] raw-gadget.0 gadget.3: failed to queue suspend event [ 155.682677][ T5756] usb usb4-port1: unable to enumerate USB device [ 155.691143][ T6540] Freezing remaining freezable tasks completed (elapsed 6.487 seconds) [ 155.716907][ T6540] PM: hibernation: Preallocating image memory [ 190.953175][ T6540] PM: hibernation: Image allocation is 182075 pages short [ 193.608879][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.617444][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.643638][ T6540] Restarting kernel threads ... [ 206.663278][ T6540] Done restarting kernel threads. [ 206.742178][ T6540] OOM killer enabled. [ 206.746383][ T6540] Restarting tasks: Starting [ 206.772709][ T6540] Restarting tasks: Done [ 206.910227][ T6543] PM: hibernation: hibernation entry [ 206.910275][ T6540] PM: hibernation: hibernation exit [ 206.946411][ T10] usb 3-1: USB disconnect, device number 10 [ 206.998232][ T6556] raw-gadget.0 gadget.3: failed to queue disconnect event [ 207.069992][ T6213] veth0_vlan: entered promiscuous mode [ 207.112389][ T6213] veth1_vlan: entered promiscuous mode [ 207.191756][ T6543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.223158][ T6543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.225097][ T6213] veth0_macvtap: entered promiscuous mode [ 207.244036][ T6543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.266048][ T6560] device-mapper: table: 248:0: zero-length target [ 207.273810][ T6213] veth1_macvtap: entered promiscuous mode [ 207.300324][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.309648][ T6543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.316666][ T6560] device-mapper: ioctl: error adding target to table [ 207.319677][ T6543] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 207.342312][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.354873][ T6543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.478669][ T6312] Filesystems sync: 0.019 seconds [ 207.565736][ T6543] Freezing user space processes [ 208.446594][ T6358] bridge_slave_1: left allmulticast mode [ 208.452321][ T6358] bridge_slave_1: left promiscuous mode [ 208.460722][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.472215][ T6358] bridge_slave_0: left allmulticast mode [ 208.478165][ T6358] bridge_slave_0: left promiscuous mode [ 208.484074][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.687920][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.699656][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.711336][ T6358] bond0 (unregistering): Released all slaves [ 208.819689][ T6358] hsr_slave_0: left promiscuous mode [ 208.829476][ T6358] hsr_slave_1: left promiscuous mode [ 208.835915][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.843324][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.856356][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.863880][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.882819][ T6358] veth1_macvtap: left promiscuous mode [ 208.889026][ T6358] veth0_macvtap: left promiscuous mode [ 208.894713][ T6358] veth1_vlan: left promiscuous mode [ 208.900006][ T6358] veth0_vlan: left promiscuous mode [ 209.204859][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.284767][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.319520][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 209.351681][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 209.374605][ T5631] Bluetooth: hci5: command 0x0c1a tx timeout [ 209.380695][ T4938] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.955294][ T6358] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.055800][ T6358] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.137938][ T6358] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.210677][ T6358] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.338653][ T6358] bridge_slave_1: left allmulticast mode [ 210.344338][ T6358] bridge_slave_1: left promiscuous mode [ 210.350316][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.360907][ T6358] bridge_slave_0: left allmulticast mode [ 210.367036][ T6358] bridge_slave_0: left promiscuous mode [ 210.372872][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.575208][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.586813][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.597602][ T6358] bond0 (unregistering): Released all slaves [ 210.815749][ T6358] hsr_slave_0: left promiscuous mode [ 210.822750][ T6358] hsr_slave_1: left promiscuous mode [ 210.831764][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.839651][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.849402][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.857018][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.872302][ T6358] veth1_macvtap: left promiscuous mode [ 210.878015][ T6358] veth0_macvtap: left promiscuous mode [ 210.883574][ T6358] veth1_vlan: left promiscuous mode [ 210.890852][ T6358] veth0_vlan: left promiscuous mode [ 211.193322][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 211.224278][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 227.650815][ T6543] Freezing user space processes failed after 20.009 seconds (1 tasks refusing to freeze, wq_busy=0): [ 227.661839][ T6543] task:syz-executor state:S stack:23336 pid:5623 tgid:5623 ppid:1 task_flags:0x40054c flags:0x00080001 [ 227.674214][ T6543] Call Trace: [ 227.678588][ T6543] [ 227.681539][ T6543] __schedule+0x125c/0x6730 [ 227.686485][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.692332][ T6543] ? __pfx___schedule+0x10/0x10 [ 227.697316][ T6543] ? find_held_lock+0x2b/0x80 [ 227.702097][ T6543] ? schedule+0x225/0x2c0 [ 227.706507][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.712181][ T6543] schedule+0xdd/0x2c0 [ 227.716343][ T6543] do_wait+0x1a7/0x570 [ 227.720486][ T6543] kernel_wait4+0x16d/0x280 [ 227.725174][ T6543] ? __pfx_kernel_wait4+0x10/0x10 [ 227.730270][ T6543] ? __pfx_child_wait_callback+0x10/0x10 [ 227.736019][ T6543] ? zap_pid_ns_processes+0x2d9/0x6a0 [ 227.741453][ T6543] zap_pid_ns_processes+0x2ca/0x6a0 [ 227.746890][ T6543] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 227.752686][ T6543] do_exit+0x2377/0x2ae0 [ 227.757007][ T6543] ? __pfx_do_exit+0x10/0x10 [ 227.761631][ T6543] ? do_raw_spin_lock+0x128/0x260 [ 227.766720][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.772453][ T6543] ? find_held_lock+0x2b/0x80 [ 227.777198][ T6543] ? get_signal+0x7e0/0x21e0 [ 227.781829][ T6543] do_group_exit+0xd5/0x2a0 [ 227.786415][ T6543] get_signal+0x1ec7/0x21e0 [ 227.790952][ T6543] ? kernel_wait4+0x1d6/0x280 [ 227.795752][ T6543] ? __pfx_kernel_wait4+0x10/0x10 [ 227.800857][ T6543] ? __pfx_child_wait_callback+0x10/0x10 [ 227.806584][ T6543] ? __pfx_get_signal+0x10/0x10 [ 227.811473][ T6543] arch_do_signal_or_restart+0x91/0x7e0 [ 227.817098][ T6543] ? __pfx___do_sys_wait4+0x10/0x10 [ 227.822369][ T6543] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 227.828588][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.834370][ T6543] exit_to_user_mode_loop+0x139/0x6f0 [ 227.839998][ T6543] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.846078][ T6543] ? rcu_is_watching+0x12/0xc0 [ 227.851030][ T6543] do_syscall_64+0x666/0x870 [ 227.855720][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.861650][ T6543] RIP: 0033:0x7f6653f5e84e [ 227.866111][ T6543] RSP: 002b:00007ffedc160bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 227.874614][ T6543] RAX: fffffffffffffe00 RBX: 00005555701a9500 RCX: 00007f6653f5e84e [ 227.882689][ T6543] RDX: 0000000040000000 RSI: 00007ffedc160c6c RDI: ffffffffffffffff [ 227.890730][ T6543] RBP: 00007ffedc160c6c R08: 0000000000000000 R09: 0000000000000000 [ 227.898768][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 227.906811][ T6543] R13: 00005555701bca00 R14: 00000000000245ba R15: 00007ffedc160cc0 [ 227.914852][ T6543] [ 227.919419][ T6543] OOM killer enabled. [ 227.923407][ T6543] Restarting tasks: Starting [ 227.962873][ T6543] Restarting tasks: Done [ 227.990454][ T6543] PM: hibernation: hibernation exit [ 228.913019][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.935690][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.945278][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.962700][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.970221][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.971440][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.994831][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.006086][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.015798][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.016016][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.025616][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.037795][ T4938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.039080][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.061828][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.069340][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.075215][ T4938] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.087013][ T4938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.098905][ T4938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.133507][ T4938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.142657][ T4938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.567695][ T4938] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 229.587335][ T4938] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 229.597274][ T4938] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 229.616537][ T4938] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 229.624675][ T4938] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 229.770708][ T4938] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.781206][ T4938] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.799548][ T4938] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.811720][ T4938] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 229.820718][ T4938] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 231.101852][ T6332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.125937][ T5624] Bluetooth: hci6: command tx timeout [ 231.125975][ T4938] Bluetooth: hci2: command tx timeout [ 231.131947][ T5624] Bluetooth: hci3: command tx timeout [ 231.206936][ T5624] Bluetooth: hci7: command tx timeout [ 231.381279][ T6332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.665331][ T6332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.685489][ T5624] Bluetooth: hci8: command tx timeout [ 231.741295][ T6575] lo speed is unknown, defaulting to 1000 [ 231.804188][ T6332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.894204][ T6573] lo speed is unknown, defaulting to 1000 [ 231.925368][ T5624] Bluetooth: hci9: command tx timeout [ 231.962530][ T6578] lo speed is unknown, defaulting to 1000 [ 232.043623][ T6574] lo speed is unknown, defaulting to 1000 [ 232.275329][ T6586] lo speed is unknown, defaulting to 1000 [ 232.416452][ T6591] lo speed is unknown, defaulting to 1000 [ 232.621743][ T6332] bridge_slave_1: left allmulticast mode [ 232.627574][ T6332] bridge_slave_1: left promiscuous mode [ 232.633416][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.650543][ T6332] bridge_slave_0: left allmulticast mode [ 232.659130][ T6332] bridge_slave_0: left promiscuous mode [ 232.664993][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.919402][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.937871][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.949926][ T6332] bond0 (unregistering): Released all slaves [ 233.204760][ T5624] Bluetooth: hci3: command tx timeout [ 233.204792][ T5631] Bluetooth: hci6: command tx timeout [ 233.217222][ T4938] Bluetooth: hci2: command tx timeout [ 233.287993][ T4938] Bluetooth: hci7: command tx timeout [ 233.766416][ T4938] Bluetooth: hci8: command tx timeout [ 233.837665][ T6332] hsr_slave_0: left promiscuous mode [ 233.844090][ T6332] hsr_slave_1: left promiscuous mode [ 233.858251][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.869082][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.878921][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.888038][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.909532][ T6332] veth1_macvtap: left promiscuous mode [ 233.915280][ T6332] veth0_macvtap: left promiscuous mode [ 233.920896][ T6332] veth1_vlan: left promiscuous mode [ 233.927059][ T6332] veth0_vlan: left promiscuous mode [ 234.007381][ T4938] Bluetooth: hci9: command tx timeout [ 234.371048][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 234.390750][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 234.701041][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.708724][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.730590][ T6575] bridge_slave_0: entered allmulticast mode [ 234.742970][ T6575] bridge_slave_0: entered promiscuous mode [ 234.820693][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.828498][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.837503][ T6575] bridge_slave_1: entered allmulticast mode [ 234.845787][ T6575] bridge_slave_1: entered promiscuous mode [ 235.092303][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.166712][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.209240][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.216701][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.224007][ T6573] bridge_slave_0: entered allmulticast mode [ 235.232703][ T6573] bridge_slave_0: entered promiscuous mode [ 235.284499][ T4938] Bluetooth: hci3: command tx timeout [ 235.297463][ T5631] Bluetooth: hci6: command tx timeout [ 235.304565][ T4938] Bluetooth: hci2: command tx timeout [ 235.320815][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.328177][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.335530][ T6573] bridge_slave_1: entered allmulticast mode [ 235.343548][ T6573] bridge_slave_1: entered promiscuous mode [ 235.366312][ T4938] Bluetooth: hci7: command tx timeout [ 235.440207][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.447928][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.455273][ T6574] bridge_slave_0: entered allmulticast mode [ 235.463131][ T6574] bridge_slave_0: entered promiscuous mode [ 235.487702][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.496290][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.503515][ T6578] bridge_slave_0: entered allmulticast mode [ 235.512026][ T6578] bridge_slave_0: entered promiscuous mode [ 235.538664][ T6575] team0: Port device team_slave_0 added [ 235.553557][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.561172][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.568990][ T6574] bridge_slave_1: entered allmulticast mode [ 235.577092][ T6574] bridge_slave_1: entered promiscuous mode [ 235.602552][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.612217][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.619548][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.627061][ T6578] bridge_slave_1: entered allmulticast mode [ 235.634942][ T6578] bridge_slave_1: entered promiscuous mode [ 235.659753][ T6575] team0: Port device team_slave_1 added [ 235.713279][ T6332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.751502][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.841711][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.844730][ T4938] Bluetooth: hci8: command tx timeout [ 235.861412][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.958617][ T6332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.994173][ T6573] team0: Port device team_slave_0 added [ 236.006587][ T6573] team0: Port device team_slave_1 added [ 236.023422][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.049818][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.057887][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.084837][ T4938] Bluetooth: hci9: command tx timeout [ 236.085766][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.102675][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.110448][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.118034][ T6586] bridge_slave_0: entered allmulticast mode [ 236.126742][ T6586] bridge_slave_0: entered promiscuous mode [ 236.176259][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.207801][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.214970][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.242004][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.253654][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.262361][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.271024][ T6586] bridge_slave_1: entered allmulticast mode [ 236.280651][ T6586] bridge_slave_1: entered promiscuous mode [ 236.309040][ T6574] team0: Port device team_slave_0 added [ 236.340837][ T6332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.462014][ T6574] team0: Port device team_slave_1 added [ 236.470299][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.478421][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.504929][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.532687][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.543033][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.550639][ T6591] bridge_slave_0: entered allmulticast mode [ 236.558998][ T6591] bridge_slave_0: entered promiscuous mode [ 236.569884][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.577461][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.584880][ T6591] bridge_slave_1: entered allmulticast mode [ 236.593005][ T6591] bridge_slave_1: entered promiscuous mode [ 236.603872][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.632413][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.639804][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.665999][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.680139][ T6578] team0: Port device team_slave_0 added [ 236.709328][ T6332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.789872][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.820519][ T6578] team0: Port device team_slave_1 added [ 236.861532][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.892628][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.899808][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.926247][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.978158][ T6575] hsr_slave_0: entered promiscuous mode [ 236.985301][ T6575] hsr_slave_1: entered promiscuous mode [ 236.993626][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 237.004794][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.037577][ T6586] team0: Port device team_slave_0 added [ 237.044230][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.051355][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.078965][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.101254][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.108269][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.135277][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.184292][ T6586] team0: Port device team_slave_1 added [ 237.222719][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.229862][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.255925][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.328798][ T6573] hsr_slave_0: entered promiscuous mode [ 237.335600][ T6573] hsr_slave_1: entered promiscuous mode [ 237.341913][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 237.347882][ T6573] Cannot create hsr debugfs directory [ 237.364544][ T4938] Bluetooth: hci3: command tx timeout [ 237.364747][ T5631] Bluetooth: hci2: command tx timeout [ 237.370311][ T5624] Bluetooth: hci6: command tx timeout [ 237.444709][ T5631] Bluetooth: hci7: command tx timeout [ 237.459263][ T6591] team0: Port device team_slave_0 added [ 237.482879][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.489902][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.516095][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.567916][ T6578] hsr_slave_0: entered promiscuous mode [ 237.574721][ T6578] hsr_slave_1: entered promiscuous mode [ 237.581048][ T6578] debugfs: 'hsr0' already exists in 'hsr' [ 237.586845][ T6578] Cannot create hsr debugfs directory [ 237.604154][ T6591] team0: Port device team_slave_1 added [ 237.641526][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.648636][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.675318][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.712065][ T6574] hsr_slave_0: entered promiscuous mode [ 237.718856][ T6574] hsr_slave_1: entered promiscuous mode [ 237.726373][ T6574] debugfs: 'hsr0' already exists in 'hsr' [ 237.732103][ T6574] Cannot create hsr debugfs directory [ 237.763465][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.770963][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.797507][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.879341][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.886841][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.913192][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.924693][ T5631] Bluetooth: hci8: command tx timeout [ 238.071135][ T6332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.165361][ T5631] Bluetooth: hci9: command tx timeout [ 238.269309][ T6586] hsr_slave_0: entered promiscuous mode [ 238.276423][ T6586] hsr_slave_1: entered promiscuous mode [ 238.282745][ T6586] debugfs: 'hsr0' already exists in 'hsr' [ 238.288788][ T6586] Cannot create hsr debugfs directory [ 238.301884][ T6591] hsr_slave_0: entered promiscuous mode [ 238.308593][ T6591] hsr_slave_1: entered promiscuous mode [ 238.315034][ T6591] debugfs: 'hsr0' already exists in 'hsr' [ 238.320796][ T6591] Cannot create hsr debugfs directory [ 238.352099][ T6332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.556100][ T6332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.718482][ T6332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.266445][ T6575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 239.289140][ T6575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.346166][ T6575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 239.366710][ T6575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.376279][ T6575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 239.390961][ T6575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.436874][ T6332] bridge_slave_1: left allmulticast mode [ 239.442645][ T6332] bridge_slave_1: left promiscuous mode [ 239.449377][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.462995][ T6332] bridge_slave_0: left allmulticast mode [ 239.474710][ T6332] bridge_slave_0: left promiscuous mode [ 239.484430][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.527023][ T6332] bridge_slave_1: left allmulticast mode [ 239.532788][ T6332] bridge_slave_1: left promiscuous mode [ 239.539186][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.551682][ T6332] bridge_slave_0: left allmulticast mode [ 239.558016][ T6332] bridge_slave_0: left promiscuous mode [ 239.563847][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.821261][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.836254][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.847627][ T6332] bond0 (unregistering): Released all slaves [ 239.980725][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.993253][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.012903][ T6332] bond0 (unregistering): Released all slaves [ 240.026484][ T6575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 240.037630][ T6575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.049644][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 240.541756][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.661515][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.686883][ T6332] hsr_slave_0: left promiscuous mode [ 240.696508][ T6332] hsr_slave_1: left promiscuous mode [ 240.702813][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.710837][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.727849][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.735566][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.751814][ T6332] hsr_slave_0: left promiscuous mode [ 240.758500][ T6332] hsr_slave_1: left promiscuous mode [ 240.765765][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.773194][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.781822][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.793207][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.828832][ T6332] veth1_macvtap: left promiscuous mode [ 240.837590][ T6332] veth0_macvtap: left promiscuous mode [ 240.843219][ T6332] veth1_vlan: left promiscuous mode [ 240.849810][ T6332] veth0_vlan: left promiscuous mode [ 240.858395][ T6332] veth1_macvtap: left promiscuous mode [ 240.863934][ T6332] veth0_macvtap: left promiscuous mode [ 240.870371][ T6332] veth1_vlan: left promiscuous mode [ 240.875908][ T6332] veth0_vlan: left promiscuous mode [ 241.317411][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 241.337379][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 241.684927][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 241.712453][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 241.890569][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 241.949411][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.957001][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.991896][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.999121][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.529638][ T6578] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 242.556294][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.570898][ T6578] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 242.605942][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.726950][ T6578] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 242.763243][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.775090][ T6578] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 242.801145][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.260601][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.354129][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.416825][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.423995][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.478571][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.498901][ T6591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.536175][ T6591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.547007][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.554174][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.581374][ T6591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.604771][ T6591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.628671][ T6591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.651540][ T6591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.676820][ T6591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.700712][ T6591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.987452][ T6573] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.030100][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.046348][ T6573] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.083914][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.106779][ T6573] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.145856][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.189666][ T6573] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.212576][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.457855][ T6574] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.476650][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.509320][ T6574] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.530785][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.560656][ T6574] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.573030][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.596537][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 244.618332][ T6574] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.628386][ T6574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.767031][ T6575] veth0_vlan: entered promiscuous mode [ 244.843945][ T6586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.859196][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.869134][ T6586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.880730][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.893208][ T6575] veth1_vlan: entered promiscuous mode [ 244.912561][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.920835][ T6586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.935671][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.953231][ T6586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.970638][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.127017][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.199626][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.206811][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.258309][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.265534][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.281231][ T6575] veth0_macvtap: entered promiscuous mode [ 245.314002][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.351483][ T6575] veth1_macvtap: entered promiscuous mode [ 245.459328][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.503185][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.515263][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.559545][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.570934][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.578178][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.601012][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.640632][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.647835][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.732952][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.849902][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.857107][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.942246][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.973685][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.980885][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.184537][ T6312] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.261569][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.293173][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 246.376048][ T6295] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.430670][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.437885][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.456579][ T6295] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.490994][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.506514][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.524809][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.531984][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.687116][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.707822][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.892247][ T6578] veth0_vlan: entered promiscuous mode [ 246.988556][ T6578] veth1_vlan: entered promiscuous mode [ 247.066541][ T6339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.260545][ T6905] ubi0: attaching mtd0 [ 247.299369][ T6578] veth0_macvtap: entered promiscuous mode [ 247.346673][ T6905] ubi0: scanning is finished [ 247.360295][ T6578] veth1_macvtap: entered promiscuous mode [ 247.373983][ T6905] ubi0: empty MTD device detected [ 247.559758][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.587649][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.692038][ T6330] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.721713][ T6330] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.840077][ T6291] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.841027][ T6905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 247.900997][ T6905] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 247.933957][ T6905] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 247.952003][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.970041][ T6905] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 248.028952][ T6905] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 248.108358][ T6905] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 248.158124][ T6905] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1428940526 [ 248.192607][ T6905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 248.227168][ T6920] ubi0: background thread "ubi_bgt0d" started, PID 6920 [ 248.235025][ T6403] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.281747][ T6312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.332934][ T6312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.578161][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.602156][ T6591] veth0_vlan: entered promiscuous mode [ 248.609261][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.730417][ T6591] veth1_vlan: entered promiscuous mode [ 248.770787][ T6932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.782646][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.887991][ T6932] md: could not open device unknown-block(1,0). [ 248.975798][ T6934] md: could not open device unknown-block(1,1). [ 249.005228][ T6591] veth0_macvtap: entered promiscuous mode [ 249.063198][ T6591] veth1_macvtap: entered promiscuous mode [ 249.075398][ T6932] md: could not open device unknown-block(1,2). [ 249.207557][ T6934] md: could not open device unknown-block(1,3). [ 249.257811][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.352924][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.622391][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.665668][ T6312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.746863][ T6344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.798136][ T6344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.984134][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.083085][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.112741][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.316763][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.345258][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.504004][ T6586] veth0_vlan: entered promiscuous mode [ 250.533894][ T31] audit: type=1800 audit(1785882752.458:18): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.113" name="attr_allow_any_host" dev="configfs" ino=14813 res=0 errno=0 [ 250.575592][ T6973] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 250.628883][ T6586] veth1_vlan: entered promiscuous mode [ 250.631212][ T31] audit: type=1800 audit(1785882752.488:19): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.113" name="addr_trtype" dev="configfs" ino=14816 res=0 errno=0 [ 250.659006][ T6973] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 250.676380][ T6973] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 250.691844][ T31] audit: type=1800 audit(1785882752.568:20): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.113" name="addr_traddr" dev="configfs" ino=16881 res=0 errno=0 [ 250.720335][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.738752][ T31] audit: type=1800 audit(1785882752.608:21): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.113" name="addr_trsvcid" dev="configfs" ino=14820 res=0 errno=0 [ 250.760086][ T6973] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 250.766067][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.771474][ T31] audit: type=1800 audit(1785882752.668:22): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.113" name="addr_adrfam" dev="configfs" ino=16887 res=0 errno=0 [ 250.890204][ T6573] veth0_vlan: entered promiscuous mode [ 250.921341][ T6586] veth0_macvtap: entered promiscuous mode [ 250.992259][ T6573] veth1_vlan: entered promiscuous mode [ 251.001583][ T6586] veth1_macvtap: entered promiscuous mode [ 251.035102][ T6957] NFSD: Unable to initialize client recovery tracking! (-110) [ 251.043342][ T6957] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 251.056050][ T6403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.070380][ T6957] NFSD: starting 90-second grace period (net f00006f7) [ 251.149206][ T5861] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 251.179577][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.241810][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.356844][ T6574] veth0_vlan: entered promiscuous mode [ 251.383159][ T6573] veth0_macvtap: entered promiscuous mode [ 251.415027][ T6344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.485262][ T6358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.522852][ T6573] veth1_macvtap: entered promiscuous mode [ 251.601776][ T6574] veth1_vlan: entered promiscuous mode [ 251.755114][ T6291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.796208][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.942655][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.966714][ T6403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.986435][ T6987] fido_id[6987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 252.046389][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.095252][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.167314][ T6291] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.239510][ T31] audit: type=1800 audit(1785882754.158:23): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.117" name="enable" dev="configfs" ino=17172 res=0 errno=0 [ 252.254889][ T7001] se_device not configured yet, cannot port link [ 252.267733][ T6574] veth0_macvtap: entered promiscuous mode [ 252.288825][ T31] audit: type=1800 audit(1785882754.168:24): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.117" name="idVendor" dev="configfs" ino=17173 res=0 errno=0 [ 252.326166][ T6574] veth1_macvtap: entered promiscuous mode [ 252.337872][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.351753][ T31] audit: type=1800 audit(1785882754.168:25): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.117" name="idProduct" dev="configfs" ino=17174 res=0 errno=0 [ 252.372418][ T6328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.374934][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.395622][ T31] audit: type=1800 audit(1785882754.218:26): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.117" name="nexus" dev="configfs" ino=17218 res=0 errno=0 [ 252.424894][ T31] audit: type=1800 audit(1785882754.218:27): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.117" name="enable" dev="configfs" ino=17219 res=0 errno=0 [ 252.459541][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 252.527001][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.569991][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.656934][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 252.695992][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 252.735943][ T10] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 252.757136][ T6403] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.760625][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.793664][ T10] usb 9-1: Product: syz [ 252.794047][ T6403] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.800563][ T10] usb 9-1: Manufacturer: syz [ 252.812830][ T10] usb 9-1: SerialNumber: syz [ 252.829122][ T7005] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 252.842701][ T7005] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 252.871451][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.879621][ T10] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input6 [ 252.924431][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.078927][ T6312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.115703][ T6312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.220143][ T6312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.243554][ T6312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.266994][ T6328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.319458][ T6328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.336857][ T7016] loop0: detected capacity change from 0 to 111 [ 253.375028][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 253.489552][ T7016] MTDSB: Device #1 doesn't appear to exist [ 253.489552][ T7016] [ 253.490978][ T7014] block2mtd: erasesize must be a divisor of device size [ 253.557773][ T6312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.573979][ T6312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.617562][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.673309][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.723971][ T10] usb 2-1: Product: syz [ 253.735283][ T7019] misc userio: No port type given on /dev/userio [ 253.748843][ T10] usb 2-1: Manufacturer: syz [ 253.782168][ T10] usb 2-1: SerialNumber: syz [ 253.791826][ T7019] misc userio: Invalid payload size [ 253.811474][ T7019] misc userio: The device must be registered before sending interrupts [ 253.841624][ T7019] misc userio: Invalid payload size [ 253.872651][ T7019] misc userio: Invalid payload size [ 253.886691][ T7019] misc userio: Invalid payload size [ 253.943890][ T7019] misc userio: Invalid payload size [ 253.970936][ T7019] misc userio: Invalid payload size [ 254.041082][ T5788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.045222][ T7019] misc userio: Invalid payload size [ 254.087010][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.130585][ T7021] rdma_rxe: rxe_newlink: failed to add veth0 [ 254.132898][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.164224][ T7019] misc userio: Invalid payload size [ 254.217329][ T7019] misc userio: Invalid payload size [ 254.243508][ T30] usb 9-1: USB disconnect, device number 2 [ 254.267539][ T7019] misc userio: Invalid payload size [ 254.305157][ T7019] misc userio: Invalid payload size [ 254.336463][ T7019] misc userio: Invalid payload size [ 254.368987][ T7019] misc userio: Invalid payload size [ 254.383277][ T7019] misc userio: Invalid payload size [ 254.420827][ T7019] misc userio: Invalid payload size [ 254.452360][ T7019] misc userio: Invalid payload size [ 254.472380][ T7019] misc userio: Invalid payload size [ 254.506406][ T7019] misc userio: Invalid payload size [ 254.543419][ T7019] misc userio: Invalid payload size [ 254.797736][ T7031] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 255.050831][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.057338][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.079153][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 255.090798][ T7012] mac80211_hwsim hwsim20 wlan99: renamed from wlan0 (while UP) [ 255.237631][ T7045] siw: device registration error -23 [ 255.315595][ T10] usb 7-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice= 1.00 [ 255.340601][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.364900][ T5788] usb 2-1: Service connection timeout for: 256 [ 255.371541][ T10] usb 7-1: Product: syz [ 255.377342][ T10] usb 7-1: Manufacturer: syz [ 255.393120][ T5788] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 255.421080][ T10] usb 7-1: SerialNumber: syz [ 255.492663][ T5788] ath9k_htc: Failed to initialize the device [ 255.606869][ T7052] ib_srp: No route available from 127.0.0.1:0 to 127.0.0.1:3260 (-19) [ 255.662443][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.670717][ T10] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state. [ 255.752922][ T5771] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER) [ 255.763697][ T5788] usb 2-1: ath9k_htc: USB layer deinitialized [ 255.766905][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.833368][ T7037] ceph: No mds server is up or the cluster is laggy [ 255.889137][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.942606][ T10] dvbdev: DVB: registering new adapter (DiBcom USB2.0 DVB-T reference design (MOD3000P)) [ 255.981474][ T10] usb 7-1: media controller created [ 256.095212][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.262768][ T7027] loop9: detected capacity change from 0 to 32768 [ 256.276372][ T7068] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.302834][ T7027] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.121 (7027) [ 256.393038][ T5764] usb 2-1: USB disconnect, device number 3 [ 256.422546][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 256.422572][ T31] audit: type=1800 audit(1785882758.348:29): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.126" name="attr_allow_any_host" dev="configfs" ino=17654 res=0 errno=0 [ 256.462974][ T7072] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 256.490196][ T7027] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 256.496526][ T7072] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 256.518709][ T7027] BTRFS info (device loop9): using crc32c checksum algorithm [ 256.526703][ T31] audit: type=1800 audit(1785882758.388:30): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.126" name="addr_trtype" dev="configfs" ino=17655 res=0 errno=0 [ 256.526784][ T31] audit: type=1800 audit(1785882758.418:31): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.126" name="addr_traddr" dev="configfs" ino=17656 res=0 errno=0 [ 256.574672][ T7072] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 256.586706][ T31] audit: type=1800 audit(1785882758.508:32): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.126" name="addr_trsvcid" dev="configfs" ino=15110 res=0 errno=0 [ 256.595410][ T7068] md: could not open device unknown-block(1,0). [ 256.619908][ T7072] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 256.653495][ T31] audit: type=1800 audit(1785882758.548:33): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.126" name="addr_adrfam" dev="configfs" ino=17659 res=0 errno=0 [ 256.675242][ T7073] md: could not open device unknown-block(1,1). [ 256.707406][ T7077] md: could not open device unknown-block(1,2). [ 256.755592][ T7068] md: could not open device unknown-block(1,3). [ 256.797855][ T7027] BTRFS info (device loop9): enabling ssd optimizations [ 256.856881][ T7027] BTRFS info (device loop9): turning on async discard [ 256.902145][ T7027] BTRFS info (device loop9): enabling free space tree [ 256.988697][ T7092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.104309][ T7092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.179823][ T6578] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 257.193136][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.223280][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.404539][ T5764] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 257.475710][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 257.578264][ T5764] usb 9-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice= 1.00 [ 257.632520][ T5764] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.725349][ T5764] pwc: Creative Labs Webcam 5 detected. [ 257.955297][ T5861] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 258.145420][ T5861] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 258.164076][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.187093][ T5861] usb 2-1: Product: syz [ 258.191387][ T5861] usb 2-1: Manufacturer: syz [ 258.196459][ T5771] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 258.204051][ T5861] usb 2-1: SerialNumber: syz [ 258.229709][ T5861] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 258.336708][ T5764] pwc: recv_control_msg error -32 req 02 val 2b00 [ 258.355971][ T5764] pwc: recv_control_msg error -32 req 02 val 2700 [ 258.364045][ T5764] pwc: recv_control_msg error -32 req 04 val 1600 [ 258.373708][ T5764] pwc: recv_control_msg error -32 req 02 val 2c00 [ 258.385724][ T5771] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 258.393136][ T5764] pwc: recv_control_msg error -32 req 04 val 1000 [ 258.403419][ T5764] pwc: recv_control_msg error -32 req 04 val 1300 [ 258.408804][ T5771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.412128][ T5764] pwc: recv_control_msg error -32 req 04 val 1400 [ 258.430465][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 258.441731][ T10] usb 7-1: DVB: registering adapter 1 frontend 0 (DiBcom 3000MC/P)... [ 258.459242][ T5764] pwc: recv_control_msg error -32 req 02 val 2000 [ 258.472778][ T5771] gspca_main: spca501-2.14.0 probing 0000:0000 [ 258.492626][ T10] dvbdev: dvb_create_media_entity: media entity 'DiBcom 3000MC/P' registered. [ 258.525991][ T10] dvb-usb: bulk message failed: -71 (5/0) [ 258.626356][ T10] DVB: Unable to find symbol mt2060_attach() [ 258.754876][ T5861] gspca_mr97310a: reg write [21] error -110 [ 258.768187][ T5861] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 258.819549][ T10] DVB: Unable to find symbol dvb_pll_attach() [ 258.836506][ T7108] NFSD: Unable to initialize client recovery tracking! (-110) [ 258.853700][ T5354] usb 2-1: USB disconnect, device number 4 [ 258.861674][ T7108] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 258.877609][ T7108] NFSD: starting 10-second grace period (net f00006f7) [ 259.183096][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 259.196411][ T5771] gspca_spca501: reg write: error -110 [ 259.212840][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 259.226317][ T5771] spca501 8-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 259.227870][ T10] dvb-usb: DiBcom USB2.0 DVB-T reference design (MOD3000P) successfully initialized and connected. [ 259.251080][ T5771] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 259.287557][ T5771] usbhid 8-1:1.0: can't add hid device: -32 [ 259.301004][ T10] usb 7-1: USB disconnect, device number 2 [ 259.315110][ T5771] usbhid 8-1:1.0: probe with driver usbhid failed with error -32 [ 259.349580][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 259.461807][ T5764] pwc: recv_control_msg error -71 req 02 val 2100 [ 259.494356][ T5764] pwc: recv_control_msg error -71 req 06 val 0600 [ 259.546524][ T5764] pwc: recv_control_msg error -71 req 04 val 1500 [ 259.574562][ T5764] pwc: recv_control_msg error -71 req 02 val 2500 [ 259.591151][ T5764] pwc: recv_control_msg error -71 req 02 val 2400 [ 259.600435][ T5764] pwc: recv_control_msg error -71 req 02 val 2600 [ 259.625223][ T5764] pwc: recv_control_msg error -71 req 02 val 2900 [ 259.632582][ T5764] pwc: recv_control_msg error -71 req 02 val 2800 [ 259.640334][ T5764] pwc: recv_control_msg error -71 req 04 val 1100 [ 259.652597][ T5764] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.660051][ T5764] pwc: Failed to power off camera (-71) [ 259.694905][ T5354] usb 8-1: USB disconnect, device number 2 [ 259.770903][ T5764] pwc: Registered as video103. [ 259.800810][ T5764] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 259.815291][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 259.871353][ T7151] kAFS: unable to lookup cell 'syz0' [ 259.901955][ T7154] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 259.962165][ T5764] usb 9-1: USB disconnect, device number 3 [ 260.259608][ T7154] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 260.280902][ T7161] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 260.282853][ T31] audit: type=1800 audit(1785882762.198:34): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="attr_allow_any_host" dev="configfs" ino=15163 res=0 errno=0 [ 260.356553][ T7163] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 260.396858][ T31] audit: type=1800 audit(1785882762.208:35): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="addr_trtype" dev="configfs" ino=15164 res=0 errno=0 [ 260.415068][ T10] dvb-usb: DiBcom USB2.0 DVB-T reference design (M successfully deinitialized and disconnected. [ 260.443579][ T7166] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.455287][ T7161] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 260.482983][ T7161] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 260.498789][ T31] audit: type=1800 audit(1785882762.278:36): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="addr_traddr" dev="configfs" ino=15165 res=0 errno=0 [ 260.609079][ T31] audit: type=1800 audit(1785882762.378:37): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="addr_trsvcid" dev="configfs" ino=17757 res=0 errno=0 [ 260.659356][ T7166] md: could not open device unknown-block(1,0). [ 260.715597][ T7167] md: could not open device unknown-block(1,1). [ 260.773602][ T7166] md: could not open device unknown-block(1,2). [ 260.791743][ T31] audit: type=1800 audit(1785882762.408:38): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.139" name="addr_adrfam" dev="configfs" ino=17758 res=0 errno=0 [ 260.936507][ T7166] md: could not open device unknown-block(1,3). [ 261.035886][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 261.082716][ T24] usb 2-1: can't read configurations, error -71 [ 261.405470][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 261.496306][ T7193] loop0: detected capacity change from 0 to 32768 [ 261.590038][ T10] usb 8-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice= 1.00 [ 261.620783][ T7188] nvme_fabrics: missing parameter 'nqn=%s' [ 261.622352][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.670848][ T10] usb 8-1: Product: syz [ 261.695312][ T10] usb 8-1: Manufacturer: syz [ 261.728539][ T10] usb 8-1: SerialNumber: syz [ 261.933716][ T10] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state. [ 262.022491][ T25] device offline error, dev sda, sector 852278 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.034694][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2035 starting block 106534) [ 262.035152][ T7196] UBIFS error (ubi0:0 pid 7196): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 262.046704][ T25] Buffer I/O error on device sda1, logical block 106496 [ 262.065140][ T25] device offline error, dev sda, sector 860446 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 262.077554][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2035 starting block 107555) [ 262.092663][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2035 starting block 107557) [ 262.106154][ T25] Buffer I/O error on device sda1, logical block 107519 [ 262.115191][ T25] device offline error, dev sda, sector 863982 op 0x1:(WRITE) flags 0x4000 phys_seg 7 prio class 2 [ 262.118753][ T6291] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2035, error -5) [ 262.126003][ T25] device offline error, dev sda, sector 864488 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.126068][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2035 starting block 108061) [ 262.162389][ T25] Buffer I/O error on device sda1, logical block 107959 [ 262.173321][ T25] Buffer I/O error on device sda1, logical block 107960 [ 262.180608][ T25] Buffer I/O error on device sda1, logical block 107961 [ 262.187629][ T25] Buffer I/O error on device sda1, logical block 107962 [ 262.194820][ T25] Buffer I/O error on device sda1, logical block 107963 [ 262.202389][ T25] Buffer I/O error on device sda1, logical block 107964 [ 262.209997][ T25] Buffer I/O error on device sda1, logical block 107965 [ 262.217023][ T25] Buffer I/O error on device sda1, logical block 107966 [ 262.225039][ T25] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.232042][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.235514][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2027 starting block 96294) [ 262.237161][ T25] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.267726][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2028 starting block 100390) [ 262.283107][ T25] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.293979][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2028 starting block 101413) [ 262.305719][ T25] device offline error, dev sda, sector 815278 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 262.313528][ T4950] device offline error, dev sda, sector 1051326 op 0x1:(WRITE) flags 0x809800 phys_seg 5 prio class 2 [ 262.316232][ T25] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2028 starting block 101909) [ 262.338936][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 262.353317][ T6330] device offline error, dev sda, sector 753998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 262.367175][ T6330] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94249) [ 262.382100][ T6330] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94253) [ 262.384568][ T10] dvbdev: DVB: registering new adapter (DiBcom USB2.0 DVB-T reference design (MOD3000P)) [ 262.403870][ T5354] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 262.410202][ T4950] Aborting journal on device sda1-8. [ 262.418567][ T6330] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 2 with max blocks 4 with error 30 [ 262.435224][ T25] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 262.455506][ T4950] JBD2: I/O error when updating journal superblock for sda1-8. [ 262.463293][ T6330] EXT4-fs (sda1): This should not happen!! Data will be lost [ 262.463293][ T6330] [ 262.485554][ T6330] EXT4-fs error (device sda1) in ext4_do_writepages:2962: Journal has aborted [ 262.492355][ T7206] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm syz.8.151: Detected aborted journal [ 262.498886][ T25] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 262.516825][ T5771] EXT4-fs (sda1): I/O error while writing superblock [ 262.528443][ T6330] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm kworker/u8:57: Detected aborted journal [ 262.544259][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 262.553542][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.564337][ T25] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 262.574513][ T6330] EXT4-fs (sda1): I/O error while writing superblock [ 262.583389][ T6330] EXT4-fs (sda1): Remounting filesystem read-only [ 262.595889][ T24] cp210x 2-1:1.0: cp210x converter detected [ 262.596342][ T10] usb 8-1: media controller created [ 262.602314][ T6330] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2030; err -30 [ 262.639575][ T5354] usb 10-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 0.00 [ 262.653077][ T7182] EXT4-fs (sda1): shut down requested (2) [ 262.666317][ T11] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 262.675183][ T7206] EXT4-fs (sda1): I/O error while writing superblock [ 262.705291][ T5354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.770985][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.889983][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 262.916116][ T5354] ushc 10-1:1.0: probe with driver ushc failed with error -110 [ 262.985926][ T5771] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 263.046968][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 263.213124][ T5771] usb 9-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 263.254335][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.281045][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 263.382430][ T7182] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 263.409763][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 263.417576][ T5771] cx231xx 9-1:1.1: New device @ 480 Mbps (2040:b120) with 2 interfaces [ 263.536290][ T5771] cx231xx 9-1:1.1: bad scenario!!!!! [ 263.536290][ T5771] config_info=0 [ 263.558297][ T5771] cx231xx 9-1:1.1: Failed to read PCB config [ 263.760713][ T5771] usb 9-1: USB disconnect, device number 4 Connection to 10.128.0.130 closed by remote host. [ 264.229965][ T6403] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.375310][ T5283] 8021q: adding VLAN 0 to HW filter on device eth21 [ 264.670564][ T6403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.850223][ T5283] 8021q: adding VLAN 0 to HW filter on device eth22 [ 264.958134][ T6403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.250706][ T6403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.351315][ T5283] 8021q: adding VLAN 0 to HW filter on device eth23 [ 265.373272][ T10] dvb-usb: bulk message failed: -110 (6/0) [ 265.383755][ T10] usb 8-1: DVB: registering adapter 1 frontend 0 (DiBcom 3000MC/P)... [ 265.401080][ T10] dvbdev: dvb_create_media_entity: media entity 'DiBcom 3000MC/P' registered. [ 265.592867][ T5354] BUG: unable to handle page fault for address: 000000000001c000 [ 265.600605][ T5354] #PF: supervisor read access in kernel mode [ 265.606677][ T5354] #PF: error_code(0x0000) - not-present page [ 265.612656][ T5354] PGD 0 P4D 0 [ 265.616052][ T5354] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 265.621609][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 265.630997][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 265.641061][ T5354] Workqueue: events azx_probe_work [ 265.646201][ T5354] RIP: 0010:azx_probe_work+0xa44/0x2640 [ 265.651776][ T5354] Code: 4c 89 f7 e8 9e 3a dd fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 61 1a 00 00 48 8b 85 68 f7 ff ff <66> 44 8b 28 45 89 ef 0f 1f 44 00 00 e8 1b dd 8b f8 48 8b 54 24 40 [ 265.659393][ T5283] 8021q: adding VLAN 0 to HW filter on device eth24 [ 265.671397][ T5354] RSP: 0018:ffffc90003a4fb00 EFLAGS: 00010246 [ 265.671431][ T5354] RAX: 000000000001c000 RBX: ffff88802b0ea058 RCX: 0000000000000000 [ 265.692003][ T5354] RDX: 1ffff1100561d40b RSI: ffffffff855bb032 RDI: 0000000000000001 [ 265.699985][ T5354] RBP: ffff88802b0ea8f0 R08: 0000000000000001 R09: 0000000000000000 [ 265.707958][ T5354] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 265.715927][ T5354] R13: ffff88801eb923c4 R14: ffff8880236aa000 R15: 0000000000000000 [ 265.723898][ T5354] FS: 0000000000000000(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 265.732833][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.739417][ T5354] CR2: 000000000001c000 CR3: 000000007f5ec000 CR4: 0000000000350ef0 [ 265.747388][ T5354] Call Trace: [ 265.750672][ T5354] [ 265.753607][ T5354] ? __pfx_azx_probe_work+0x10/0x10 [ 265.758818][ T5354] ? lock_acquire+0x5e/0x370 [ 265.763421][ T5354] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.769067][ T5354] ? rcu_is_watching+0x12/0xc0 [ 265.773858][ T5354] process_one_work+0xa23/0x1940 [ 265.778808][ T5354] ? __pfx_process_one_work+0x10/0x10 [ 265.784183][ T5354] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.789836][ T5354] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.795484][ T5354] worker_thread+0x5ef/0xe50 [ 265.800084][ T5354] ? __pfx_worker_thread+0x10/0x10 [ 265.805202][ T5354] ? kthread+0x13a/0x450 [ 265.809475][ T5354] ? __pfx_worker_thread+0x10/0x10 [ 265.814587][ T5354] kthread+0x370/0x450 [ 265.818684][ T5354] ? __pfx_kthread+0x10/0x10 [ 265.823300][ T5354] ret_from_fork+0x72b/0xd50 [ 265.827907][ T5354] ? __pfx_ret_from_fork+0x10/0x10 [ 265.833034][ T5354] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.838679][ T5354] ? __switch_to+0x800/0x10f0 [ 265.843383][ T5354] ? __switch_to_asm+0x39/0x70 [ 265.848166][ T5354] ? __pfx_kthread+0x10/0x10 [ 265.852788][ T5354] ret_from_fork_asm+0x1a/0x30 [ 265.857582][ T5354] [ 265.860591][ T5354] Modules linked in: [ 265.864481][ T5354] CR2: 000000000001c000 [ 265.868629][ T5354] ---[ end trace 0000000000000000 ]--- [ 265.874076][ T5354] RIP: 0010:azx_probe_work+0xa44/0x2640 [ 265.879632][ T5354] Code: 4c 89 f7 e8 9e 3a dd fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 61 1a 00 00 48 8b 85 68 f7 ff ff <66> 44 8b 28 45 89 ef 0f 1f 44 00 00 e8 1b dd 8b f8 48 8b 54 24 40 [ 265.899252][ T5354] RSP: 0018:ffffc90003a4fb00 EFLAGS: 00010246 [ 265.905322][ T5354] RAX: 000000000001c000 RBX: ffff88802b0ea058 RCX: 0000000000000000 [ 265.913290][ T5354] RDX: 1ffff1100561d40b RSI: ffffffff855bb032 RDI: 0000000000000001 [ 265.921262][ T5354] RBP: ffff88802b0ea8f0 R08: 0000000000000001 R09: 0000000000000000 [ 265.929233][ T5354] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 265.937205][ T5354] R13: ffff88801eb923c4 R14: ffff8880236aa000 R15: 0000000000000000 [ 265.945182][ T5354] FS: 0000000000000000(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 265.954127][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.960716][ T5354] CR2: 000000000001c000 CR3: 000000007f5ec000 CR4: 0000000000350ef0 [ 265.968693][ T5354] Kernel panic - not syncing: Fatal exception [ 265.974961][ T5354] Kernel Offset: disabled [ 265.979273][ T5354] Rebooting in 86400 seconds..