last executing test programs: 4m9.420533258s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='my_ep\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) 4m8.95463236s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080), &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) 4m8.541213043s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 4m8.167716343s ago: executing program 3 (id=4): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000600)='hello', 0x5, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000900)=""/5, 0x5, 0x0, 0x0, 0x0) 4m7.575981068s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 4m5.946568373s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, '', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 4m5.571414087s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 4m5.440791643s ago: executing program 4 (id=18): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 4m3.000425033s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) ioctl(r0, 0xc138fd09, &(0x7f00000003c0)="0400000000000000000000006e010000380100000100000000000000000000000000000000000000000000006d79706f6f6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000") 4m1.496845681s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 4m1.095702745s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 3m0.142443876s ago: executing program 32 (id=26): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 2m59.770399123s ago: executing program 33 (id=15): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/nfsd/parameters/nfsd4_disable_client_tracking\x00', 0x2, 0x0) write(r1, &(0x7f0000000840)='Y\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='tcp 2049\n', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)='1\n', 0x2) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00']) 2m59.497660832s ago: executing program 34 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 2m59.245506759s ago: executing program 35 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 2m58.942781212s ago: executing program 36 (id=18): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r2, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 2m29.04349213s ago: executing program 6 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 2m28.576285443s ago: executing program 6 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 2m27.181761934s ago: executing program 6 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) 2m26.968323112s ago: executing program 6 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-2\x00', 0x0, 0x0) 2m11.683653351s ago: executing program 37 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-2\x00', 0x0, 0x0) 2m1.567694777s ago: executing program 5 (id=77): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000100)="0b0000004c6f676974656368204849442b2b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c000"/4380, 0x111c) 2m1.293489053s ago: executing program 5 (id=78): r0 = syz_usb_connect(0x3, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040da0b56810001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303100008"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x4, "00003010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m57.760058398s ago: executing program 5 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080), &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x0, 0x2, 0x0, @fd=r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="0600000000000000020000000400000000000000000000006c733100"/119, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/dlm/ls1/id\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='123', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/kernel/dlm/ls1/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='1', 0x1) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000740)={0x2, 0x5248, @local}, 0x10) 1m57.565526852s ago: executing program 5 (id=87): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000002000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000003000)="00000080fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100020200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000004000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001400)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000005000)="00000078fe534d4240000000160000c001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000009000000480028004e544c4d53535000020000000000000028000000158208e2000000000000000000000000000000000000000028000000", 0x7c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000006000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000007000)="00000048fe534d4240000000000000000100010001000000000000000200000000000000000000000000000001000000000000000000000000000000000000000900010048000000", 0x4c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000008000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001800)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000009000)="00000050fe534d424000000000000000030001000100000000000000030000000000000000000000010000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000a000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001a00)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, &(0x7f000000b000)="00000050fe534d424000000000000000030001000100000000000000040000000000000000000000020000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='./cifs\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,unc=\\\\127.0.0.1\\share,nodfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir/test\x00', 0x1ff) 1m57.404369557s ago: executing program 5 (id=88): syz_usb_connect(0x2, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101403713371300000102030109023e0002010080fa0904000003e00101000705810240000107050202400000070583034000010904010002e00101000705840140000107050401400001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x3}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)="01000000") bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x1, 0x1}, 0x6) write(r0, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000240)="02000000") bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x2, 0x1}, 0x6) write(r0, &(0x7f00000002c0)="f100040000", 0x5) 1m54.651863618s ago: executing program 7 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0\x00', 0x200000, 0x0) 1m54.630056469s ago: executing program 7 (id=93): r0 = syz_usb_connect(0x0, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001010203010902270001010080fa0904000003ff000000070581034000010705020200020007058602000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000300)={0xc0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/mmc0/err_stats\x00', 0x0, 0x0) 1m54.225511162s ago: executing program 5 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x5) 1m51.349690102s ago: executing program 7 (id=103): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x8180, 0x900) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000100)) 1m51.25899187s ago: executing program 7 (id=104): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x64, 0xa}], '\x00'}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x64, 0xa}], '\x00'}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/4096, 0x4f, 0x1000, 0x1}, 0x28) 1m50.915957401s ago: executing program 7 (id=105): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000600)={0x2, 0x1dcd6500}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x1, 0x0, 0x0, 0x0}) 1m47.639702822s ago: executing program 7 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) 1m38.810597709s ago: executing program 38 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x5) 1m38.80009431s ago: executing program 9 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) write(0xffffffffffffffff, &(0x7f0000c24018)="48c7c0aaaa000048c7c200010400488902f4", 0x11) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000], 0x50018, 0x202}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) 1m37.840805468s ago: executing program 9 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1m37.58305143s ago: executing program 9 (id=124): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140878025000000000000010902270001010080000904000003e0010100070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) write(r0, &(0x7f0000000240)="4a00010011007f0314066f9a70932d490675bc59083301", 0x17) 1m37.092298487s ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "00000000000000000000000000000001"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "00000001"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x148}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1m36.880745597s ago: executing program 0 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='mem', 0x3) 1m36.737797469s ago: executing program 0 (id=126): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820200020007050602000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000200)={0x0, 0x5000000}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3f, &(0x7f0000000100)="010000000001010101010101010100"/63) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 1m34.423338498s ago: executing program 9 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/i915/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) 1m34.297979133s ago: executing program 9 (id=128): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0389") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr1_input\x00', 0x0, 0x0) 1m33.562312712s ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080), &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x0, 0x2, 0x0, @fd=r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="0600000000000000020000000400000000000000000000006c733100"/119, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/dlm/ls1/id\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='123', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/kernel/dlm/ls1/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='1', 0x1) r9 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r9, &(0x7f0000000800)="020003007b00000001000000580001000400"/88, 0x58, 0x0, 0x0, 0x0) 1m33.135351973s ago: executing program 0 (id=130): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 1m31.887843018s ago: executing program 39 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) 1m31.148544037s ago: executing program 9 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='core', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1 1 1 1', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='disk\x00', 0x5) 1m28.861399856s ago: executing program 8 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1024\n', 0x5) symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='net2280', 0x7) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) 1m27.453532193s ago: executing program 8 (id=135): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406411220600000000000109022e0001010080000904000004ffffff0007050102000200070581020002000705840200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000001000)="a0080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808") (async) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000400)={0x80000000}) 1m24.159357724s ago: executing program 8 (id=136): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) nanosleep(&(0x7f0000000200)={0x2}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) 1m20.784498062s ago: executing program 8 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='bare\x00', 0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000001080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000002000), 0x2) nanosleep(&(0x7f0000003000)={0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001000)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001001), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001002), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001003)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100d)={0x2, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100e)={0x2, 0x47}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100f)={0x2, 0x7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001011)={0x2, 0xaa}, 0x2) nanosleep(&(0x7f0000003000)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) nanosleep(&(0x7f0000003000)={0x1}, 0x0) write(r2, &(0x7f0000005100)='bare\x00', 0x4) 1m17.865043678s ago: executing program 40 (id=130): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 1m17.837340093s ago: executing program 8 (id=139): read(0x0, &(0x7f0000000100)=""/4096, 0x1000) 1m17.613395305s ago: executing program 8 (id=140): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102000200070501020002000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000140)="0400"/15) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 54.546764998s ago: executing program 41 (id=140): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902450001010080320904000002ffffff0007058102000200070501020002000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000140)="0400"/15) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 54.336027029s ago: executing program 42 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='core', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1 1 1 1', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='disk\x00', 0x5) 39.585442966s ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@loopback, 0x80, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 39.214673846s ago: executing program 1 (id=146): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) close(r0) syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 36.763990074s ago: executing program 1 (id=147): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) 36.589373182s ago: executing program 1 (id=148): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz0/node_desc\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='new_node_desc\x00', 0xe) 31.360972239s ago: executing program 1 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000), &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080), &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/ls1/nodes/1\x00', 0x1ff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x0, 0x2, 0x0, @fd=r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="0600000000000000020000000400000000000000000000006c733100"/119, 0x78}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/dlm/ls1/id\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='123', 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/kernel/dlm/ls1/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='1', 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x5248, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="020003007b00000001000000580001000400"/88, 0x58, 0x0, 0x0, 0x0) 31.168796411s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00\\x00\\x00\\x00 2147483647 /\n', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 15.775422182s ago: executing program 43 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00\\x00\\x00\\x00 2147483647 /\n', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 0s ago: executing program 4 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='disk\n', 0x5, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.460033][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.462393][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.617699][ T4912] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.654237][ T4912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.664728][ T4912] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.744066][ T4912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.764403][ T4912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.249492][ T4912] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 162.285462][ T4912] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 162.287022][ T4912] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 162.302481][ T4912] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 162.318800][ T4912] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 162.452731][ T4912] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 162.507821][ T4912] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 162.531218][ T4912] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 162.535914][ T4912] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 162.540594][ T4912] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 163.481014][ T4912] Bluetooth: hci6: command tx timeout [ 163.631089][ T4912] Bluetooth: hci5: command tx timeout [ 163.870925][ T4912] Bluetooth: hci7: command tx timeout [ 164.433917][ T4912] Bluetooth: hci8: command tx timeout [ 164.772230][ T5960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.830867][ T4912] Bluetooth: hci9: command tx timeout [ 165.310179][ T5960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.365037][ T6032] lo speed is unknown, defaulting to 1000 [ 165.453203][ T6035] lo speed is unknown, defaulting to 1000 [ 165.488784][ T6033] lo speed is unknown, defaulting to 1000 [ 165.520712][ T6044] lo speed is unknown, defaulting to 1000 [ 165.553895][ T4912] Bluetooth: hci6: command tx timeout [ 165.655006][ T5960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.712718][ T4912] Bluetooth: hci5: command tx timeout [ 165.715155][ T6047] lo speed is unknown, defaulting to 1000 [ 165.951580][ T4912] Bluetooth: hci7: command tx timeout [ 165.955438][ T5960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.510996][ T4912] Bluetooth: hci8: command tx timeout [ 166.920885][ T4912] Bluetooth: hci9: command tx timeout [ 167.102084][ T5960] bridge_slave_1: left allmulticast mode [ 167.105307][ T5960] bridge_slave_1: left promiscuous mode [ 167.114922][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.242262][ T5960] bridge_slave_0: left allmulticast mode [ 167.242288][ T5960] bridge_slave_0: left promiscuous mode [ 167.242477][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.631252][ T4912] Bluetooth: hci6: command tx timeout [ 167.790912][ T4912] Bluetooth: hci5: command tx timeout [ 168.030925][ T4912] Bluetooth: hci7: command tx timeout [ 168.089877][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.141497][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.182860][ T5960] bond0 (unregistering): Released all slaves [ 168.448025][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.448141][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.448259][ T6032] bridge_slave_0: entered allmulticast mode [ 168.449676][ T6032] bridge_slave_0: entered promiscuous mode [ 168.543428][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.543524][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.543664][ T6032] bridge_slave_1: entered allmulticast mode [ 168.548124][ T6032] bridge_slave_1: entered promiscuous mode [ 168.592171][ T4912] Bluetooth: hci8: command tx timeout [ 168.627785][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.627882][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.627997][ T6035] bridge_slave_0: entered allmulticast mode [ 168.629375][ T6035] bridge_slave_0: entered promiscuous mode [ 168.898213][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.898322][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.898493][ T6035] bridge_slave_1: entered allmulticast mode [ 168.927920][ T6035] bridge_slave_1: entered promiscuous mode [ 168.970334][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.001019][ T4912] Bluetooth: hci9: command tx timeout [ 169.049912][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.050119][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.050364][ T6044] bridge_slave_0: entered allmulticast mode [ 169.054876][ T6044] bridge_slave_0: entered promiscuous mode [ 169.057043][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.057152][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.057323][ T6033] bridge_slave_0: entered allmulticast mode [ 169.063478][ T6033] bridge_slave_0: entered promiscuous mode [ 169.109483][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.150404][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.150515][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.150717][ T6044] bridge_slave_1: entered allmulticast mode [ 169.163984][ T6044] bridge_slave_1: entered promiscuous mode [ 169.169907][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.170043][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.170602][ T6033] bridge_slave_1: entered allmulticast mode [ 169.174823][ T6033] bridge_slave_1: entered promiscuous mode [ 169.224130][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.288862][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.520594][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.521266][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.521461][ T6047] bridge_slave_0: entered allmulticast mode [ 169.523954][ T6047] bridge_slave_0: entered promiscuous mode [ 169.533910][ T6032] team0: Port device team_slave_0 added [ 169.560205][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.711190][ T4912] Bluetooth: hci6: command tx timeout [ 169.755693][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.755952][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.756059][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.756533][ T6047] bridge_slave_1: entered allmulticast mode [ 169.760080][ T6047] bridge_slave_1: entered promiscuous mode [ 169.800262][ T6032] team0: Port device team_slave_1 added [ 169.837639][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.844062][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.880932][ T4912] Bluetooth: hci5: command tx timeout [ 169.884464][ T6035] team0: Port device team_slave_0 added [ 169.979524][ T6035] team0: Port device team_slave_1 added [ 170.044421][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.048160][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.048173][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.048187][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.110883][ T4912] Bluetooth: hci7: command tx timeout [ 170.132241][ T6044] team0: Port device team_slave_0 added [ 170.134943][ T6033] team0: Port device team_slave_0 added [ 170.302972][ T5960] hsr_slave_0: left promiscuous mode [ 170.342329][ T5960] hsr_slave_1: left promiscuous mode [ 170.419268][ T5960] veth1_macvtap: left promiscuous mode [ 170.420086][ T5960] veth0_macvtap: left promiscuous mode [ 170.420269][ T5960] veth1_vlan: left promiscuous mode [ 170.420499][ T5960] veth0_vlan: left promiscuous mode [ 170.670971][ T4912] Bluetooth: hci8: command tx timeout syzkaller syzkaller login: [ 171.071529][ T4912] Bluetooth: hci9: command tx timeout [ 171.202680][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 171.251624][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 171.445400][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.446120][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.446129][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.446144][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.464387][ T6044] team0: Port device team_slave_1 added [ 171.514511][ T6033] team0: Port device team_slave_1 added [ 171.520642][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 171.724814][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.724826][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.724839][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.809884][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.809900][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.809923][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.868015][ T6047] team0: Port device team_slave_0 added [ 171.887952][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.887969][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.887993][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.889668][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.889676][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.889689][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.921828][ T6047] team0: Port device team_slave_1 added [ 171.953029][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.953045][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.953069][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.954756][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.954767][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.954791][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.109706][ T6032] hsr_slave_0: entered promiscuous mode [ 172.110493][ T6032] hsr_slave_1: entered promiscuous mode [ 172.127227][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.127243][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.127265][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.177412][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.177429][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.177453][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.190274][ T6035] hsr_slave_0: entered promiscuous mode [ 172.193250][ T6035] hsr_slave_1: entered promiscuous mode [ 172.194199][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 172.197814][ T6035] Cannot create hsr debugfs directory [ 172.317258][ T6044] hsr_slave_0: entered promiscuous mode [ 172.318146][ T6044] hsr_slave_1: entered promiscuous mode [ 172.318743][ T6044] debugfs: 'hsr0' already exists in 'hsr' [ 172.318759][ T6044] Cannot create hsr debugfs directory [ 172.336010][ T6033] hsr_slave_0: entered promiscuous mode [ 172.337392][ T6033] hsr_slave_1: entered promiscuous mode [ 172.340227][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 172.340251][ T6033] Cannot create hsr debugfs directory [ 172.613805][ T6047] hsr_slave_0: entered promiscuous mode [ 172.614649][ T6047] hsr_slave_1: entered promiscuous mode [ 172.615221][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 172.615236][ T6047] Cannot create hsr debugfs directory [ 173.186817][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 173.858179][ T5960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.276804][ T5960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.617212][ T5960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.646918][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.660618][ T6032] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.712885][ T6032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.731295][ T6032] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.755833][ T6032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.874358][ T5960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.903725][ T6032] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.944120][ T6032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.984432][ T6032] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.013917][ T6032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.404963][ T6035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.464554][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.492500][ T6035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.537234][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.641733][ T6035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.684498][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.776315][ T6035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.818123][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.884327][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.188370][ T6044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 176.229389][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.429904][ T5960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.474007][ T6044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 176.517334][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.529795][ T6044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 176.573549][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.619323][ T6044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 176.654420][ T6044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.853803][ T5960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.942058][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.095854][ T5960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.336145][ T6033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.369370][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.681433][ T5960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.751498][ T6033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.799599][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.805523][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.819360][ T6033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.885694][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.930564][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 177.934447][ T6033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.969543][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.010102][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.010645][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.080326][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.080527][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.175892][ T6047] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 178.205316][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.252428][ T6047] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 178.287766][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.303629][ T6047] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 178.337434][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.348430][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.448427][ T6047] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 178.489616][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.815740][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.919940][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.920699][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.175767][ T5960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.228471][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 179.246583][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.246769][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.285715][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.644213][ T5960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.697295][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.739766][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.739901][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.774173][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.795267][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.795391][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.968094][ T5960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.219973][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.463528][ T5960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.624145][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.649868][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.650008][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.715756][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.817823][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.818002][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.964736][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.009796][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 181.191590][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.191715][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.412100][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.432103][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.789442][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.052142][ T5960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.345301][ T6032] veth0_vlan: entered promiscuous mode [ 182.569373][ T5960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.650679][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.669954][ T6032] veth1_vlan: entered promiscuous mode [ 183.049637][ T5960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.261873][ T6032] veth0_macvtap: entered promiscuous mode [ 183.405437][ T6032] veth1_macvtap: entered promiscuous mode [ 183.698566][ T5960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.757608][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 183.758008][ T6035] veth0_vlan: entered promiscuous mode [ 183.830071][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.926380][ T6035] veth1_vlan: entered promiscuous mode [ 183.939696][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.995201][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.368798][ T6044] veth0_vlan: entered promiscuous mode [ 184.418420][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.487143][ T6035] veth0_macvtap: entered promiscuous mode [ 184.679097][ T6044] veth1_vlan: entered promiscuous mode [ 184.962461][ T6035] veth1_macvtap: entered promiscuous mode [ 185.289215][ T4644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.289236][ T4644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.392091][ T5960] bridge_slave_1: left allmulticast mode [ 185.392125][ T5960] bridge_slave_1: left promiscuous mode [ 185.392366][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.522050][ T5960] bridge_slave_0: left allmulticast mode [ 185.522074][ T5960] bridge_slave_0: left promiscuous mode [ 185.522235][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.781256][ T5960] bridge_slave_1: left allmulticast mode [ 185.781281][ T5960] bridge_slave_1: left promiscuous mode [ 185.781471][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.911998][ T5960] bridge_slave_0: left allmulticast mode [ 185.912023][ T5960] bridge_slave_0: left promiscuous mode [ 185.912176][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.151376][ T5960] bridge_slave_1: left allmulticast mode [ 186.151413][ T5960] bridge_slave_1: left promiscuous mode [ 186.151688][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.274366][ T5960] bridge_slave_0: left allmulticast mode [ 186.274400][ T5960] bridge_slave_0: left promiscuous mode [ 186.274692][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.491463][ T5960] bridge_slave_1: left allmulticast mode [ 186.491487][ T5960] bridge_slave_1: left promiscuous mode [ 186.491648][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.592765][ T5960] bridge_slave_0: left allmulticast mode [ 186.592789][ T5960] bridge_slave_0: left promiscuous mode [ 186.592943][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.611500][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.673035][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.692880][ T5960] bond0 (unregistering): Released all slaves [ 188.241527][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.324416][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.364554][ T5960] bond0 (unregistering): Released all slaves [ 188.871639][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.951897][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.006743][ T5960] bond0 (unregistering): Released all slaves [ 189.491508][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.577627][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.613201][ T5960] bond0 (unregistering): Released all slaves [ 189.659471][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.899880][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.054136][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.054158][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.133775][ T6044] veth0_macvtap: entered promiscuous mode [ 190.140269][ T6033] veth0_vlan: entered promiscuous mode [ 190.209746][ T6044] veth1_macvtap: entered promiscuous mode [ 190.479805][ T6047] veth0_vlan: entered promiscuous mode [ 190.488543][ T6033] veth1_vlan: entered promiscuous mode [ 190.823618][ T6047] veth1_vlan: entered promiscuous mode [ 190.965272][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.109990][ T37] audit: type=1800 audit(1785854798.078:20): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.28" name="idVendor" dev="configfs" ino=12203 res=0 errno=0 [ 191.198522][ T37] audit: type=1800 audit(1785854798.128:21): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.28" name="idProduct" dev="configfs" ino=12204 res=0 errno=0 [ 191.198570][ T37] audit: type=1800 audit(1785854798.168:22): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.28" name="ep_name" dev="configfs" ino=12669 res=0 errno=0 [ 191.275417][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.638719][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 191.681208][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.681229][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.772064][ T6033] veth0_macvtap: entered promiscuous mode [ 191.994537][ T6033] veth1_macvtap: entered promiscuous mode [ 192.016331][ T6047] veth0_macvtap: entered promiscuous mode [ 192.036775][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.036795][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.436203][ T6047] veth1_macvtap: entered promiscuous mode [ 192.626675][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.667191][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.667211][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.254164][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.256854][ T6386] lo speed is unknown, defaulting to 1000 [ 193.344804][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.347805][ T6386] lo speed is unknown, defaulting to 1000 [ 193.383854][ T6386] lo speed is unknown, defaulting to 1000 [ 193.563931][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.058337][ T6403] device-mapper: ioctl: Invalid ioctl structure: name ol, dev 6f70796d00000000 [ 194.092742][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.092760][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.130989][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 194.790027][ T6386] infiniband syz0: set active [ 194.790046][ T6386] infiniband syz0: added lo [ 195.095981][ T6386] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 195.096016][ T6386] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 195.096053][ T6386] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 195.205187][ T6386] RDS/IB: syz0: added [ 195.205931][ T6386] smc: adding ib device syz0 with port count 1 [ 195.206104][ T6386] smc: ib device syz0 port 1 has no pnetid [ 195.362623][ T36] lo speed is unknown, defaulting to 1000 [ 195.678601][ T5829] lo speed is unknown, defaulting to 1000 [ 195.844680][ T6386] lo speed is unknown, defaulting to 1000 [ 196.379218][ T6414] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.421139][ T6414] CIFS: Attempting to mount //127.0.0.1/test [ 197.045527][ T6410] ftl_cs: FTL header not found. [ 197.106779][ T6414] CIFS: VFS: cifs_mount failed w/return code = -112 [ 197.235944][ T6414] syz.7.37 (6414) used greatest stack depth: 19008 bytes left [ 197.317496][ T6420] UBIFS error (ubi0:0 pid 6420): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 197.412944][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.413000][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.951108][ T5731] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 198.102795][ T6413] ubi: ubi0 already exists [ 198.107789][ T6410] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 198.147731][ T5731] usb 8-1: not running at top speed; connect to a high speed hub [ 198.149967][ T5731] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 198.149994][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.241801][ T6386] lo speed is unknown, defaulting to 1000 [ 198.337019][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.337039][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.690986][ T5711] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 198.910661][ T4644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.910680][ T4644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.920041][ T4644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.936678][ T5711] usb 9-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 198.936706][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.936724][ T5711] usb 9-1: Product: syz [ 198.936738][ T5711] usb 9-1: Manufacturer: syz [ 198.936798][ T5711] usb 9-1: SerialNumber: syz [ 199.292827][ T6386] lo speed is unknown, defaulting to 1000 [ 199.516330][ T5731] cxacru 8-1:1.0: send of cm 0x90 failed (-71) [ 199.532903][ T6437] cxacru 8-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 199.532919][ T6437] cxacru 8-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 199.547704][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.547723][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.596730][ T5711] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 199.633190][ T5995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.684942][ T5995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.685612][ T5995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.686260][ T5995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.686677][ T5995] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.688675][ T5995] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.702111][ T5966] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703386][ T5966] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703422][ T5966] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703455][ T5966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703500][ T5966] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703533][ T5966] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.703566][ T5966] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743534][ T5966] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743576][ T5966] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743609][ T5966] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743640][ T5966] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743672][ T5966] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.743705][ T5966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.971661][ T5711] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 200.303739][ T5731] usb 8-1: USB disconnect, device number 2 [ 200.472614][ T5711] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.476958][ T5711] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 200.477051][ T5711] usb 9-1: media controller created [ 200.569924][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.575193][ T6419] cifsd (6419) used greatest stack depth: 18976 bytes left [ 200.790301][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 200.810762][ T5711] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 200.933789][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.933808][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.023192][ T6451] kAFS: No cell specified [ 201.098621][ T6386] lo speed is unknown, defaulting to 1000 [ 201.137659][ T5711] usb 9-1: USB disconnect, device number 2 [ 201.811524][ T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.974674][ T5711] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 202.026486][ T36] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 202.026516][ T36] usb 6-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 202.026535][ T36] usb 6-1: Product: syz [ 202.026548][ T36] usb 6-1: Manufacturer: syz [ 202.026561][ T36] usb 6-1: SerialNumber: syz [ 202.130967][ T36] em28xx 6-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 202.131004][ T36] em28xx 6-1:1.0: DVB interface 0 found: bulk [ 202.183081][ T5711] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 202.183167][ T5711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.158486][ T6386] lo speed is unknown, defaulting to 1000 [ 203.345658][ T36] em28xx 6-1:1.0: unknown em28xx chip ID (0) [ 203.456603][ T6476] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 203.838148][ T5711] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 204.267075][ T5711] lg-g15 0003:046D:C222.0001: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 204.357433][ T36] em28xx 6-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 204.357463][ T36] em28xx 6-1:1.0: board has no eeprom [ 204.442403][ T36] em28xx 6-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 204.442423][ T36] em28xx 6-1:1.0: dvb set to bulk mode. [ 204.442944][ T5718] em28xx 6-1:1.0: Binding DVB extension [ 204.703801][ T37] audit: type=1800 audit(1785854811.678:23): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="ipv4_address" dev="configfs" ino=14402 res=0 errno=0 [ 204.706796][ T5718] em28xx 6-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 204.706824][ T5718] zl10353_read_register: readreg error (reg=127, ret==-5) [ 204.706885][ T5718] em28xx 6-1:1.0: frontend initialization failed [ 204.787019][ T37] audit: type=1800 audit(1785854811.758:24): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="ipv4_port" dev="configfs" ino=14403 res=0 errno=0 [ 204.809976][ T37] audit: type=1800 audit(1785854811.778:25): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="num" dev="configfs" ino=14404 res=0 errno=0 [ 204.971633][ T37] audit: type=1800 audit(1785854811.898:26): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="local" dev="configfs" ino=14405 res=0 errno=0 [ 205.067405][ T37] audit: type=1800 audit(1785854812.038:27): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="block_bytes" dev="configfs" ino=13955 res=0 errno=0 [ 205.068050][ T5711] usb 9-1: USB disconnect, device number 3 [ 205.069084][ T37] audit: type=1800 audit(1785854812.038:28): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="start_block" dev="configfs" ino=13956 res=0 errno=0 [ 205.070673][ T37] audit: type=1800 audit(1785854812.038:29): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="blocks" dev="configfs" ino=13957 res=0 errno=0 [ 205.163446][ T37] audit: type=1800 audit(1785854812.138:30): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.49" name="dev" dev="configfs" ino=13958 res=0 errno=0 [ 205.237677][ T36] usb 6-1: USB disconnect, device number 2 [ 205.240645][ T5718] em28xx 6-1:1.0: Remote control support is not available for this card. [ 205.436361][ T36] em28xx 6-1:1.0: Disconnecting em28xx [ 205.436563][ T36] em28xx 6-1:1.0: Closing input extension [ 205.801762][ T203] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 206.109239][ T203] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 206.109278][ T203] usb 10-1: can't read configurations, error -71 [ 206.424585][ T6386] lo speed is unknown, defaulting to 1000 [ 207.645621][ T203] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 207.650642][ T36] em28xx 6-1:1.0: Freeing device [ 207.811383][ T203] usb 10-1: not running at top speed; connect to a high speed hub [ 207.812705][ T203] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 207.812730][ T203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.209253][ T6531] NFSD: Failed to start, no listeners configured. [ 208.550911][ T6386] lo speed is unknown, defaulting to 1000 [ 208.908943][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 209.225102][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.275381][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.303153][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.338124][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.357266][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.277638][ T203] cxacru 10-1:1.0: receive of cm 0x90 failed (-104) [ 210.427274][ T6386] lo speed is unknown, defaulting to 1000 [ 210.460260][ T6563] svc: failed to register lockdv1 RPC service (errno 512). [ 210.493620][ T6563] lockd_up: makesock failed, error=-512 [ 210.773834][ T31] usb 10-1: USB disconnect, device number 4 [ 211.116565][ T6598] vim2m vim2m.0: Removing vim2m [ 211.370520][ T6386] lo speed is unknown, defaulting to 1000 [ 211.463638][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 211.541602][ T6563] svc: failed to register nfsdv3 RPC service (errno 512). [ 211.541827][ T6563] svc: failed to register nfsaclv3 RPC service (errno 512). [ 211.541842][ T6563] failed to unregister tcp with rpcbind [ 211.548234][ T6563] svc: failed to register nfsdv3 RPC service (errno 97). [ 211.548250][ T6563] svc: failed to register nfsaclv3 RPC service (errno 97). [ 211.548257][ T6563] failed to unregister tcp with rpcbind [ 211.565646][ T4912] Bluetooth: hci0: command tx timeout [ 212.109919][ T6602] vim2m vim2m.0: Device registered as /dev/video3 [ 212.263974][ T6622] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 212.360954][ T5711] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 212.566326][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 212.606997][ T5711] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 212.607025][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.607044][ T5711] usb 6-1: Product: syz [ 212.607057][ T5711] usb 6-1: Manufacturer: syz [ 212.607071][ T5711] usb 6-1: SerialNumber: syz [ 212.967080][ T6570] lo speed is unknown, defaulting to 1000 [ 213.098465][ T6570] lo speed is unknown, defaulting to 1000 [ 213.630893][ T4912] Bluetooth: hci0: command tx timeout [ 214.329992][ T5711] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 214.516160][ T5711] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 214.520373][ T5711] usb 6-1: unit 37 not found! [ 214.520396][ T5711] usb 6-1: unit 0 not found! [ 214.942533][ T6661] xhci-hcd pcspkr: error -ENXIO: IRQ index 0 not found [ 215.190270][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 215.273544][ T6664] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.714512][ T4912] Bluetooth: hci0: command tx timeout [ 216.194275][ T5711] usb 6-1: USB disconnect, device number 3 [ 216.266023][ T6667] NFSD: Failed to start, no listeners configured. [ 217.453627][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 217.762203][ T6679] __kmem_cache_create_args(nfsd_file_mark) failed with error -12 [ 217.762233][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.8.73 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.762257][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.762269][ T6679] Call Trace: [ 217.762275][ T6679] [ 217.762282][ T6679] dump_stack_lvl+0xe8/0x150 [ 217.762319][ T6679] __kmem_cache_create_args+0x3ee/0x450 [ 217.762344][ T6679] nfsd_file_cache_init+0x1d9/0x530 [ 217.762367][ T6679] ? __pfx_nfsd_file_cache_init+0x10/0x10 [ 217.762389][ T6679] ? net_generic+0x1e/0x240 [ 217.762413][ T6679] ? net_generic+0x1e/0x240 [ 217.762432][ T6679] ? net_generic+0x1e/0x240 [ 217.762455][ T6679] ? net_generic+0x1f4/0x240 [ 217.762476][ T6679] nfsd_svc+0x330/0x7d0 [ 217.762515][ T6679] write_threads+0x3d3/0x5a0 [ 217.762539][ T6679] ? __might_fault+0xaf/0x130 [ 217.762563][ T6679] ? __pfx_write_threads+0x10/0x10 [ 217.762605][ T6679] ? _copy_from_user+0x94/0xb0 [ 217.762631][ T6679] ? simple_transaction_get+0x130/0x170 [ 217.762654][ T6679] nfsctl_transaction_write+0x112/0x160 [ 217.762684][ T6679] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 217.762713][ T6679] vfs_write+0x29f/0xbb0 [ 217.762753][ T6679] ? __pfx_vfs_write+0x10/0x10 [ 217.762783][ T6679] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.762812][ T6679] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.762836][ T6679] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.762859][ T6679] ? mutex_lock_nested+0x152/0x1d0 [ 217.762876][ T6679] ? fdget_pos+0x252/0x320 [ 217.762901][ T6679] ksys_write+0x156/0x270 [ 217.762919][ T6679] ? __pfx_ksys_write+0x10/0x10 [ 217.762936][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.762947][ T6679] do_syscall_64+0x174/0x580 [ 217.762960][ T6679] ? trace_irq_disable+0x3b/0x140 [ 217.762971][ T6679] ? clear_bhb_loop+0x40/0x90 [ 217.762987][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.762998][ T6679] RIP: 0033:0x7fbede65e019 [ 217.763010][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.763019][ T6679] RSP: 002b:00007fbedc874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.763031][ T6679] RAX: ffffffffffffffda RBX: 00007fbede8e6180 RCX: 00007fbede65e019 [ 217.763039][ T6679] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 217.763045][ T6679] RBP: 00007fbede6f500c R08: 0000000000000000 R09: 0000000000000000 [ 217.763052][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.763057][ T6679] R13: 00007fbede8e6218 R14: 00007fbede8e6180 R15: 00007ffde95d1718 [ 217.763075][ T6679] [ 217.763215][ T6679] nfsd: unable to create nfsd_file_mark_slab [ 217.791097][ T4912] Bluetooth: hci0: command tx timeout [ 218.970915][ T5711] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.143484][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 219.145247][ T5711] usb 6-1: config index 0 descriptor too short (expected 39, got 21) [ 219.145270][ T5711] usb 6-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 219.145313][ T5711] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.238912][ T5711] usb 6-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice= 1.00 [ 219.238939][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.238957][ T5711] usb 6-1: Product: syz [ 219.238970][ T5711] usb 6-1: Manufacturer: syz [ 219.238983][ T5711] usb 6-1: SerialNumber: syz [ 219.376003][ T5711] r8152-cfgselector 6-1: Unknown version 0x0000 [ 219.413872][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 219.437712][ T5711] r8152 6-1:1.0: Expected endpoints are not found [ 219.647142][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.647500][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.647740][ T6570] bridge_slave_0: entered allmulticast mode [ 219.674394][ T6570] bridge_slave_0: entered promiscuous mode [ 219.743541][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.745221][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.746072][ T6570] bridge_slave_1: entered allmulticast mode [ 219.773615][ T6570] bridge_slave_1: entered promiscuous mode [ 219.933389][ T5960] hsr_slave_0: left promiscuous mode [ 219.970940][ T5960] hsr_slave_1: left promiscuous mode [ 219.972338][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.972575][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.995301][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.995328][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.151052][ T5960] hsr_slave_0: left promiscuous mode [ 220.171200][ T5960] hsr_slave_1: left promiscuous mode [ 220.172343][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.172372][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.231791][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.231818][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.401011][ T5960] hsr_slave_0: left promiscuous mode [ 220.421120][ T5960] hsr_slave_1: left promiscuous mode [ 220.422242][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.422276][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.479196][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.479223][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.639829][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.650831][ T5960] hsr_slave_0: left promiscuous mode [ 220.681643][ T5960] hsr_slave_1: left promiscuous mode [ 220.682325][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.682342][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.719712][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.731579][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.731604][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.778239][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.843784][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.886248][ T5960] veth1_macvtap: left promiscuous mode [ 220.886325][ T5960] veth0_macvtap: left promiscuous mode [ 220.886523][ T5960] veth1_vlan: left promiscuous mode [ 220.886640][ T5960] veth0_vlan: left promiscuous mode [ 221.007800][ T5960] veth1_macvtap: left promiscuous mode [ 221.007863][ T5960] veth0_macvtap: left promiscuous mode [ 221.008007][ T5960] veth1_vlan: left promiscuous mode [ 221.008113][ T5960] veth0_vlan: left promiscuous mode [ 221.121147][ T5960] veth1_macvtap: left promiscuous mode [ 221.121216][ T5960] veth0_macvtap: left promiscuous mode [ 221.121384][ T5960] veth1_vlan: left promiscuous mode [ 221.128139][ T5960] veth0_vlan: left promiscuous mode [ 221.251207][ T5960] veth1_macvtap: left promiscuous mode [ 221.251311][ T5960] veth0_macvtap: left promiscuous mode [ 221.251553][ T5960] veth1_vlan: left promiscuous mode [ 221.251851][ T5960] veth0_vlan: left promiscuous mode [ 222.019965][ T5844] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 222.151882][ T6739] rdma_rxe: rxe_newlink: failed to add lo [ 222.435744][ T6747] CIFS: VFS: UNC: path must begin with // or \\ [ 222.435759][ T6747] Malformed UNC in devname [ 222.435759][ T6747] [ 222.435892][ T6747] CIFS: VFS: Malformed UNC in devname [ 222.810918][ T5711] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 222.831530][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 222.906704][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 223.008554][ T5711] usb 6-1: not running at top speed; connect to a high speed hub [ 223.020296][ T5711] usb 6-1: New USB device found, idVendor=1337, idProduct=1337, bcdDevice= 0.00 [ 223.020327][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.020346][ T5711] usb 6-1: Product: syz [ 223.020356][ T5711] usb 6-1: Manufacturer: syz [ 223.020363][ T5711] usb 6-1: SerialNumber: syz [ 223.912303][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 223.965475][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 224.481874][ T5973] smbdirect: ib_dev[syz1] removed [ 224.896365][ T37] audit: type=1800 audit(1785854831.868:31): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.90" name="idVendor" dev="configfs" ino=14232 res=0 errno=0 [ 224.900360][ T37] audit: type=1800 audit(1785854831.868:32): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.90" name="idProduct" dev="configfs" ino=14233 res=0 errno=0 [ 224.942109][ T37] audit: type=1800 audit(1785854831.918:33): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.90" name="process_ump" dev="configfs" ino=14719 res=0 errno=0 [ 224.951366][ T37] audit: type=1800 audit(1785854831.918:34): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.90" name="ep_name" dev="configfs" ino=14720 res=0 errno=0 [ 225.117048][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 225.245234][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 225.390972][ T4912] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 225.586123][ T9] usb 6-1: USB disconnect, device number 5 [ 225.677499][ T6762] PM: hibernation: hibernation entry [ 225.787650][ T6764] loop1: detected capacity change from 0 to 32768 [ 225.934732][ T6764] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY) [ 225.934759][ T6764] device-mapper: ioctl: error adding target to table [ 226.362951][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 226.432233][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 226.716952][ T37] audit: type=1800 audit(1785854833.688:35): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.100" name="idVendor" dev="configfs" ino=14765 res=0 errno=0 [ 226.718108][ T37] audit: type=1800 audit(1785854833.688:36): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.100" name="idProduct" dev="configfs" ino=14766 res=0 errno=0 [ 226.780427][ T37] audit: type=1800 audit(1785854833.748:37): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.100" name="process_ump" dev="configfs" ino=14264 res=0 errno=0 [ 226.800281][ T37] audit: type=1800 audit(1785854833.768:38): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.100" name="ep_name" dev="configfs" ino=14265 res=0 errno=0 [ 227.065646][ T6782] svc: failed to register lockdv1 RPC service (errno 111). [ 227.263494][ T6483] lo speed is unknown, defaulting to 1000 [ 227.263523][ T6483] infiniband syz1: ib_query_port failed (-19) [ 227.317760][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.372235][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.568417][ T6762] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 227.568502][ T6762] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.625438][ T6570] team0: Port device team_slave_0 added [ 227.633837][ T6570] team0: Port device team_slave_1 added [ 227.728072][ T6784] syz.9.101 (6784) used greatest stack depth: 18240 bytes left [ 227.729148][ T6762] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.743607][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.743622][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.743645][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.745635][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.745647][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.745670][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.939539][ T6762] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 227.939850][ T6762] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 227.976206][ T5844] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 228.107143][ T6762] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 228.178063][ T5844] usb 9-1: not running at top speed; connect to a high speed hub [ 228.182730][ T5844] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 228.182758][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.182776][ T5844] usb 9-1: Product: syz [ 228.182789][ T5844] usb 9-1: Manufacturer: syz [ 228.182802][ T5844] usb 9-1: SerialNumber: syz [ 228.351799][ T6762] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 228.351890][ T6762] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 228.355104][ T6570] hsr_slave_0: entered promiscuous mode [ 228.437230][ T6570] hsr_slave_1: entered promiscuous mode [ 228.465766][ T6570] debugfs: 'hsr0' already exists in 'hsr' [ 228.465791][ T6570] Cannot create hsr debugfs directory [ 228.478140][ T5844] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input6 [ 228.497166][ T6762] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 228.726172][ T6762] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 228.726351][ T6762] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 228.930077][ T6782] svc: failed to register nfsdv3 RPC service (errno 512). [ 228.943195][ T6782] svc: failed to register nfsaclv3 RPC service (errno 512). [ 228.943218][ T6782] failed to unregister tcp with rpcbind [ 229.072969][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 229.112278][ T6762] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 229.205433][ T6782] svc: failed to register nfsdv3 RPC service (errno 97). [ 229.205456][ T6782] svc: failed to register nfsaclv3 RPC service (errno 97). [ 229.205467][ T6782] failed to unregister tcp with rpcbind [ 229.362591][ T6762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.362759][ T6762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 229.572023][ C1] usbtouchscreen 9-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 229.630990][ T4912] Bluetooth: hci6: command 0x0c1a tx timeout [ 229.636684][ T5844] usb 9-1: USB disconnect, device number 4 [ 229.772857][ T6762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 229.951230][ T4912] Bluetooth: hci7: command 0x0c1a tx timeout [ 230.432186][ T4912] Bluetooth: hci8: command 0x0c1a tx timeout [ 230.757544][ T4912] Bluetooth: hci9: command 0x0c1a tx timeout [ 230.846781][ T5966] Filesystems sync: 0.899 seconds [ 231.059336][ T5844] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 231.269481][ T5844] usb 9-1: unable to get BOS descriptor or descriptor too short [ 231.300071][ T5844] usb 9-1: not running at top speed; connect to a high speed hub [ 231.320596][ T5844] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 231.320620][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.320639][ T5844] usb 9-1: Product: syz [ 231.320651][ T5844] usb 9-1: Manufacturer: syz [ 231.320663][ T5844] usb 9-1: SerialNumber: syz [ 231.392004][ T4912] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.572065][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 231.716056][ T4912] Bluetooth: hci6: command 0x0c1a tx timeout [ 232.058809][ T4912] Bluetooth: hci7: command 0x0c1a tx timeout [ 232.425544][ T37] audit: type=1800 audit(1785854839.398:39): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.109" name="local" dev="configfs" ino=14911 res=0 errno=0 [ 232.427611][ T37] audit: type=1800 audit(1785854839.398:40): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.109" name="nodeid" dev="configfs" ino=14912 res=0 errno=0 [ 232.511148][ T6852] dlm: Using TCP for communications [ 232.511163][ T6852] dlm: Detect multi-homed hosts but use only the first IP address. [ 232.511171][ T6852] dlm: Try SCTP, if you want to enable multi-link. [ 232.520995][ T4912] Bluetooth: hci8: command 0x0c1a tx timeout [ 232.648382][ T5844] usb 9-1: 1:1: cannot set freq 44100 to ep 0x1 [ 232.674632][ T5844] usb 9-1: 2:1: cannot set freq 44100 to ep 0x81 [ 232.843735][ T4912] Bluetooth: hci9: command 0x0c1a tx timeout [ 232.899379][ T6852] dlm: foo: joining the lockspace group... [ 232.925900][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 233.066067][ T5844] usb 9-1: USB disconnect, device number 5 [ 233.242322][ T6851] dlm: dlm user daemon left 1 lockspaces [ 233.506006][ T4912] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.544425][ T6863] siw: device registration error -23 [ 233.759742][ T6860] NFSD: Failed to start, no listeners configured. [ 233.791845][ T4912] Bluetooth: hci6: command 0x0c1a tx timeout [ 234.124678][ T4912] Bluetooth: hci7: command 0x0c1a tx timeout [ 234.469690][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 234.590929][ T4912] Bluetooth: hci8: command 0x0c1a tx timeout [ 234.926984][ T4912] Bluetooth: hci9: command 0x0c1a tx timeout [ 235.596071][ T4912] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.787652][ T6570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.905205][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.906207][ T6570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.002779][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.003658][ T6570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.162429][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.164260][ T6570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.211240][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.664633][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.740211][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.807290][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.807498][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.860711][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.869568][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.429847][ T6540] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 238.492662][ T5993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.579968][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.582011][ T6540] usb 9-1: not running at top speed; connect to a high speed hub [ 238.585398][ T6540] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 238.585425][ T6540] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.585444][ T6540] usb 9-1: Product: syz [ 238.585456][ T6540] usb 9-1: Manufacturer: syz [ 238.585469][ T6540] usb 9-1: SerialNumber: syz [ 238.654132][ T6540] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input11 [ 238.909188][ T6570] veth0_vlan: entered promiscuous mode [ 238.950322][ T6570] veth1_vlan: entered promiscuous mode [ 239.325684][ T5993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.437648][ T6570] veth0_macvtap: entered promiscuous mode [ 239.484593][ T6570] veth1_macvtap: entered promiscuous mode [ 239.526384][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.799376][ T5993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.863959][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.959050][ T9] usb 9-1: USB disconnect, device number 6 [ 240.022291][ T5960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.493922][ T5993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.701830][ T5960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.744506][ T5960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.744561][ T5960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.275655][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.275673][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.508688][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.530655][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.592107][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.626644][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.627397][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.291632][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.291649][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.561313][ T7014] infiniband syz1: set active [ 242.561334][ T7014] infiniband syz1: added veth0 [ 242.573800][ T7014] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 242.667029][ T7014] infiniband syz1: Couldn't open port 1 [ 242.667313][ T7014] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 242.667345][ T7014] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 242.667384][ T7014] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 242.913844][ T5993] bridge_slave_1: left allmulticast mode [ 242.913877][ T5993] bridge_slave_1: left promiscuous mode [ 242.914121][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.089282][ T7014] RDS/IB: syz1: added [ 243.089357][ T7014] smc: adding ib device syz1 with port count 1 [ 243.089380][ T7014] smc: ib device syz1 port 1 has no pnetid [ 243.093645][ T7053] PM: suspend entry (deep) [ 243.093662][ T7053] PM: suspend exit [ 243.122552][ T5993] bridge_slave_0: left allmulticast mode [ 243.122588][ T5993] bridge_slave_0: left promiscuous mode [ 243.122824][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.441073][ T5732] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.605621][ T5732] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 243.605651][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.605671][ T5732] usb 1-1: Product: syz [ 243.605683][ T5732] usb 1-1: Manufacturer: syz [ 243.605690][ T5732] usb 1-1: SerialNumber: syz [ 243.819867][ T5608] Bluetooth: hci1: command tx timeout [ 244.082141][ C1] usb 1-1: received EP1 urb->status = -2 [ 244.083708][ T5732] usb 1-1: unable to init card! (ret=-110) [ 244.085481][ T5732] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 244.162637][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.221754][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.243961][ T5993] bond0 (unregistering): Released all slaves [ 244.684815][ T7024] lo speed is unknown, defaulting to 1000 [ 245.877563][ T5608] Bluetooth: hci1: command tx timeout [ 246.246336][ T203] usb 1-1: USB disconnect, device number 9 [ 247.150444][ T7112] svc: failed to register lockdv1 RPC service (errno 111). [ 247.491408][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.491614][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.491833][ T7024] bridge_slave_0: entered allmulticast mode [ 247.523580][ T7024] bridge_slave_0: entered promiscuous mode [ 247.571043][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.571160][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.571386][ T7024] bridge_slave_1: entered allmulticast mode [ 247.583800][ T7024] bridge_slave_1: entered promiscuous mode [ 247.790512][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.837664][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.901392][ T7112] svc: failed to register nfsdv3 RPC service (errno 512). [ 247.901615][ T7112] svc: failed to register nfsaclv3 RPC service (errno 512). [ 247.901630][ T7112] failed to unregister tcp with rpcbind [ 247.934070][ T7112] svc: failed to register nfsdv3 RPC service (errno 97). [ 247.934094][ T7112] svc: failed to register nfsaclv3 RPC service (errno 97). [ 247.934106][ T7112] failed to unregister tcp with rpcbind [ 247.954699][ T5608] Bluetooth: hci1: command tx timeout [ 247.955719][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 248.097843][ T7024] team0: Port device team_slave_0 added [ 248.141965][ T7024] team0: Port device team_slave_1 added [ 248.330431][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.330448][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.330479][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.339034][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.339050][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.339073][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.477281][ T4912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.485449][ T4912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.492251][ T4912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.532577][ T4912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.533317][ T4912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.965823][ T7024] hsr_slave_0: entered promiscuous mode [ 248.967788][ T7024] hsr_slave_1: entered promiscuous mode [ 248.988584][ T7024] debugfs: 'hsr0' already exists in 'hsr' [ 248.988610][ T7024] Cannot create hsr debugfs directory [ 249.673307][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.033493][ T4912] Bluetooth: hci1: command tx timeout [ 250.601134][ T4912] Bluetooth: hci2: command tx timeout [ 250.834556][ T7110] lo speed is unknown, defaulting to 1000 [ 250.836555][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.848444][ T7179] vmwgfx 0000:00:00.0: probe with driver vmwgfx failed with error -22 [ 251.660415][ T37] audit: type=1800 audit(1785854858.628:41): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.134" name="streaming_maxpacket" dev="configfs" ino=16590 res=0 errno=0 [ 251.741574][ T37] audit: type=1800 audit(1785854858.718:42): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.134" name="UDC" dev="configfs" ino=16145 res=0 errno=0 [ 252.224960][ T7184] UDC core: g1: couldn't find an available UDC or it's busy [ 252.684739][ T4912] Bluetooth: hci2: command tx timeout [ 252.692917][ T5993] hsr_slave_0: left promiscuous mode [ 252.731025][ T5993] hsr_slave_1: left promiscuous mode [ 252.731997][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.732021][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.782151][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.782177][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.811097][ T5843] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 252.875377][ T5993] veth1_macvtap: left promiscuous mode [ 252.875442][ T5993] veth0_macvtap: left promiscuous mode [ 252.875585][ T5993] veth1_vlan: left promiscuous mode [ 252.875686][ T5993] veth0_vlan: left promiscuous mode [ 252.962647][ T5843] usb 9-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 252.962678][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.978188][ T5843] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 253.930410][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 253.982124][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 254.363171][ T7138] lo speed is unknown, defaulting to 1000 [ 254.408442][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 254.422825][ T5711] lo speed is unknown, defaulting to 1000 [ 254.422855][ T5711] syz0: Port: 1 Link DOWN [ 254.425619][ T5711] lo speed is unknown, defaulting to 1000 [ 254.757789][ T4912] Bluetooth: hci2: command tx timeout [ 255.808063][ T2383] pvrusb2: Failed to submit write-control URB status=-2 [ 255.808081][ T2383] pvrusb2: Device being rendered inoperable [ 255.886321][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 255.886336][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 255.934205][ T7024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.976930][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.978013][ T7024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.095085][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.128422][ T7024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.186036][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.189124][ T7024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.200208][ T5843] usb 9-1: USB disconnect, device number 7 [ 256.247739][ T7024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.650934][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.814818][ T5843] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 256.831118][ T4912] Bluetooth: hci2: command tx timeout [ 256.973224][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.025551][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.025700][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.033053][ T5843] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 257.033083][ T5843] usb 9-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 257.033101][ T5843] usb 9-1: Product: syz [ 257.033114][ T5843] usb 9-1: Manufacturer: syz [ 257.033127][ T5843] usb 9-1: SerialNumber: syz [ 257.101556][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.101745][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.199272][ T5843] pvrusb2: Hardware description: Terratec Grabster AV400 [ 257.199293][ T5843] pvrusb2: ********** [ 257.199297][ T5843] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 257.199303][ T5843] pvrusb2: Important functionality might not be entirely working. [ 257.199308][ T5843] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 257.199314][ T5843] pvrusb2: ********** [ 257.942068][ T5995] smc: removing ib device syz0 [ 258.673765][ T5995] smbdirect: ib_dev[syz0] removed [ 258.845975][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.846034][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.097728][ T2383] pvrusb2: Failed to submit write-control URB status=-2 [ 259.097744][ T2383] pvrusb2: Device being rendered inoperable [ 259.097768][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.097777][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.277373][ T5843] usb 9-1: USB disconnect, device number 8 [ 259.976660][ T7288] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 261.488384][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.636395][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.636515][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.636757][ T7138] bridge_slave_0: entered allmulticast mode [ 261.667684][ T7138] bridge_slave_0: entered promiscuous mode [ 261.715242][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.715350][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.715562][ T7138] bridge_slave_1: entered allmulticast mode [ 261.718026][ T7138] bridge_slave_1: entered promiscuous mode [ 261.920547][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.954782][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.198286][ T7138] team0: Port device team_slave_0 added [ 262.219192][ T7138] team0: Port device team_slave_1 added [ 262.458106][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.511918][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.518400][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.531517][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.532174][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.583337][ T6483] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 262.787638][ T6483] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 262.787668][ T6483] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.787686][ T6483] usb 9-1: Product: syz [ 262.787699][ T6483] usb 9-1: Manufacturer: syz [ 262.787712][ T6483] usb 9-1: SerialNumber: syz [ 262.923266][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.923283][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.923307][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.993734][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.993751][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.993777][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.421529][ C1] usb 9-1: received EP1 urb->status = -2 [ 263.421590][ T6483] usb 9-1: unable to init card! (ret=-110) [ 263.422059][ T6483] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 263.518519][ T7138] hsr_slave_0: entered promiscuous mode [ 263.529490][ T7138] hsr_slave_1: entered promiscuous mode [ 263.588716][ T7024] veth0_vlan: entered promiscuous mode [ 263.976781][ T6583] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 264.016035][ T7024] veth1_vlan: entered promiscuous mode [ 264.114148][ T6437] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 264.145519][ T6762] Freezing user space processes [ 264.831089][ T4912] Bluetooth: hci3: command tx timeout [ 266.911130][ T4912] Bluetooth: hci3: command tx timeout [ 268.991096][ T4912] Bluetooth: hci3: command tx timeout [ 271.072487][ T4912] Bluetooth: hci3: command tx timeout [ 284.161178][ T6762] Freezing user space processes failed after 20.015 seconds (4 tasks refusing to freeze, wq_busy=0): [ 284.161424][ T6762] task:syz-executor state:S stack:22440 pid:6033 tgid:6033 ppid:1 task_flags:0x40054c flags:0x00080001 [ 284.161473][ T6762] Call Trace: [ 284.161478][ T6762] [ 284.161498][ T6762] __schedule+0x16dc/0x5500 [ 284.161521][ T6762] ? __lock_acquire+0x683/0x2ce0 [ 284.161565][ T6762] ? __pfx___schedule+0x10/0x10 [ 284.161587][ T6762] ? schedule+0x90/0x2b0 [ 284.161612][ T6762] schedule+0x164/0x2b0 [ 284.161627][ T6762] do_wait+0x283/0x510 [ 284.161639][ T6762] ? do_wait+0x17d/0x510 [ 284.161666][ T6762] kernel_wait4+0x232/0x2b0 [ 284.161677][ T6762] ? irqentry_exit+0x218/0x8f0 [ 284.161706][ T6762] ? __pfx_kernel_wait4+0x10/0x10 [ 284.161719][ T6762] ? __pfx_child_wait_callback+0x10/0x10 [ 284.161734][ T6762] ? zap_pid_ns_processes+0x38c/0x5f0 [ 284.161750][ T6762] zap_pid_ns_processes+0x382/0x5f0 [ 284.161775][ T6762] ? zap_pid_ns_processes+0x129/0x5f0 [ 284.161789][ T6762] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 284.161800][ T6762] ? rt_write_unlock+0x19c/0x360 [ 284.161815][ T6762] ? rt_write_unlock+0x1a8/0x360 [ 284.161829][ T6762] do_exit+0x1fd8/0x2360 [ 284.161839][ T6762] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.161853][ T6762] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.161871][ T6762] ? __pfx_do_exit+0x10/0x10 [ 284.161887][ T6762] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 284.161897][ T6762] ? rt_spin_lock+0x1e0/0x400 [ 284.161913][ T6762] ? rt_spin_unlock+0x157/0x200 [ 284.161926][ T6762] do_group_exit+0x22d/0x2f0 [ 284.161936][ T6762] ? rt_spin_unlock+0x163/0x200 [ 284.161948][ T6762] get_signal+0x121b/0x12c0 [ 284.161975][ T6762] arch_do_signal_or_restart+0xbb/0x860 [ 284.162046][ T6762] ? __pfx___x64_sys_wait4+0x10/0x10 [ 284.162060][ T6762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.162086][ T6762] exit_to_user_mode_loop+0x104/0x730 [ 284.162099][ T6762] ? rcu_is_watching+0x15/0xb0 [ 284.162113][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.162125][ T6762] do_syscall_64+0x353/0x580 [ 284.162139][ T6762] ? trace_irq_disable+0x3b/0x140 [ 284.162151][ T6762] ? clear_bhb_loop+0x40/0x90 [ 284.162164][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.162175][ T6762] RIP: 0033:0x7f4fc372e84e [ 284.162186][ T6762] RSP: 002b:00007ffc7d58caf8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 284.162198][ T6762] RAX: fffffffffffffe00 RBX: 00005555781a5500 RCX: 00007f4fc372e84e [ 284.162206][ T6762] RDX: 0000000040000000 RSI: 00007ffc7d58cb9c RDI: ffffffffffffffff [ 284.162213][ T6762] RBP: 00007ffc7d58cb9c R08: 0000000000000000 R09: 0000000000000000 [ 284.162220][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 284.162227][ T6762] R13: 00005555781b8a00 R14: 0000000000036824 R15: 00007ffc7d58cbf0 [ 284.162245][ T6762] [ 284.162252][ T6762] task:syz-executor state:S stack:21616 pid:6035 tgid:6035 ppid:1 task_flags:0x40054c flags:0x00080001 [ 284.162280][ T6762] Call Trace: [ 284.162284][ T6762] [ 284.162290][ T6762] __schedule+0x16dc/0x5500 [ 284.162304][ T6762] ? __lock_acquire+0x683/0x2ce0 [ 284.162331][ T6762] ? __pfx___schedule+0x10/0x10 [ 284.162349][ T6762] ? schedule+0x90/0x2b0 [ 284.162364][ T6762] schedule+0x164/0x2b0 [ 284.162378][ T6762] do_wait+0x283/0x510 [ 284.162389][ T6762] ? do_wait+0x17d/0x510 [ 284.162402][ T6762] kernel_wait4+0x232/0x2b0 [ 284.162412][ T6762] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.162428][ T6762] ? __pfx_kernel_wait4+0x10/0x10 [ 284.162441][ T6762] ? __pfx_child_wait_callback+0x10/0x10 [ 284.162461][ T6762] zap_pid_ns_processes+0x382/0x5f0 [ 284.162473][ T6762] ? zap_pid_ns_processes+0x129/0x5f0 [ 284.162489][ T6762] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 284.162500][ T6762] ? rt_write_unlock+0x19c/0x360 [ 284.162514][ T6762] ? rt_write_unlock+0x1a8/0x360 [ 284.162528][ T6762] do_exit+0x1fd8/0x2360 [ 284.162538][ T6762] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.162551][ T6762] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.162569][ T6762] ? __pfx_do_exit+0x10/0x10 [ 284.162584][ T6762] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 284.162595][ T6762] ? rt_spin_lock+0x1e0/0x400 [ 284.162611][ T6762] ? rt_spin_unlock+0x157/0x200 [ 284.162624][ T6762] do_group_exit+0x22d/0x2f0 [ 284.162634][ T6762] ? rt_spin_unlock+0x163/0x200 [ 284.162647][ T6762] get_signal+0x121b/0x12c0 [ 284.162673][ T6762] arch_do_signal_or_restart+0xbb/0x860 [ 284.162688][ T6762] ? __pfx___x64_sys_wait4+0x10/0x10 [ 284.162700][ T6762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.162729][ T6762] exit_to_user_mode_loop+0x104/0x730 [ 284.162741][ T6762] ? rcu_is_watching+0x15/0xb0 [ 284.162755][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.162766][ T6762] do_syscall_64+0x353/0x580 [ 284.162780][ T6762] ? trace_irq_disable+0x3b/0x140 [ 284.162791][ T6762] ? clear_bhb_loop+0x40/0x90 [ 284.162805][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.162815][ T6762] RIP: 0033:0x7f886213e84e [ 284.162825][ T6762] RSP: 002b:00007fff72b23ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 284.162835][ T6762] RAX: fffffffffffffe00 RBX: 00005555693cc500 RCX: 00007f886213e84e [ 284.162843][ T6762] RDX: 0000000040000000 RSI: 00007fff72b23f9c RDI: ffffffffffffffff [ 284.162851][ T6762] RBP: 00007fff72b23f9c R08: 0000000000000000 R09: 0000000000000000 [ 284.162857][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 284.162864][ T6762] R13: 00005555693dfa00 R14: 0000000000038268 R15: 00007fff72b23ff0 [ 284.162883][ T6762] [ 284.162911][ T6762] task:syz-executor state:S stack:22464 pid:6570 tgid:6570 ppid:1 task_flags:0x40054c flags:0x00080001 [ 284.162940][ T6762] Call Trace: [ 284.162943][ T6762] [ 284.162950][ T6762] __schedule+0x16dc/0x5500 [ 284.162963][ T6762] ? __lock_acquire+0x683/0x2ce0 [ 284.162996][ T6762] ? __pfx___schedule+0x10/0x10 [ 284.163014][ T6762] ? schedule+0x90/0x2b0 [ 284.163029][ T6762] schedule+0x164/0x2b0 [ 284.163044][ T6762] do_wait+0x283/0x510 [ 284.163055][ T6762] ? do_wait+0x17d/0x510 [ 284.163068][ T6762] kernel_wait4+0x232/0x2b0 [ 284.163081][ T6762] ? __pfx_kernel_wait4+0x10/0x10 [ 284.163095][ T6762] ? __pfx_child_wait_callback+0x10/0x10 [ 284.163110][ T6762] ? zap_pid_ns_processes+0x129/0x5f0 [ 284.163125][ T6762] zap_pid_ns_processes+0x382/0x5f0 [ 284.163138][ T6762] ? zap_pid_ns_processes+0x129/0x5f0 [ 284.163151][ T6762] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 284.163162][ T6762] ? rt_write_unlock+0x19c/0x360 [ 284.163177][ T6762] ? rt_write_unlock+0x1a8/0x360 [ 284.163190][ T6762] do_exit+0x1fd8/0x2360 [ 284.163199][ T6762] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.163214][ T6762] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 284.163231][ T6762] ? __pfx_do_exit+0x10/0x10 [ 284.163247][ T6762] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 284.163258][ T6762] ? rt_spin_lock+0x1e0/0x400 [ 284.163273][ T6762] ? rt_spin_unlock+0x157/0x200 [ 284.163286][ T6762] do_group_exit+0x22d/0x2f0 [ 284.163296][ T6762] ? rt_spin_unlock+0x163/0x200 [ 284.163309][ T6762] get_signal+0x121b/0x12c0 [ 284.163335][ T6762] arch_do_signal_or_restart+0xbb/0x860 [ 284.163350][ T6762] ? __pfx___x64_sys_wait4+0x10/0x10 [ 284.163362][ T6762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.163389][ T6762] exit_to_user_mode_loop+0x104/0x730 [ 284.163400][ T6762] ? rcu_is_watching+0x15/0xb0 [ 284.163414][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.163426][ T6762] do_syscall_64+0x353/0x580 [ 284.163440][ T6762] ? trace_irq_disable+0x3b/0x140 [ 284.163451][ T6762] ? clear_bhb_loop+0x40/0x90 [ 284.163464][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.163475][ T6762] RIP: 0033:0x7f14a4abe84e [ 284.163485][ T6762] RSP: 002b:00007ffc82679e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 284.163497][ T6762] RAX: fffffffffffffe00 RBX: 000055557deb4500 RCX: 00007f14a4abe84e [ 284.163505][ T6762] RDX: 0000000040000000 RSI: 00007ffc82679f1c RDI: ffffffffffffffff [ 284.163528][ T6762] RBP: 00007ffc82679f1c R08: 0000000000000000 R09: 0000000000000000 [ 284.163535][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 284.163542][ T6762] R13: 000055557dec7a00 R14: 000000000003baac R15: 00007ffc82679f70 [ 284.163570][ T6762] [ 284.163579][ T6762] task:syz.7.109 state:D stack:26440 pid:6852 tgid:6851 ppid:6035 task_flags:0x400140 flags:0x00080002 [ 284.163611][ T6762] Call Trace: [ 284.163615][ T6762] [ 284.163621][ T6762] __schedule+0x16dc/0x5500 [ 284.163639][ T6762] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.163656][ T6762] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 284.163673][ T6762] ? rt_spin_lock+0x1e0/0x400 [ 284.163686][ T6762] ? __pfx___schedule+0x10/0x10 [ 284.163704][ T6762] ? schedule+0x90/0x2b0 [ 284.163719][ T6762] schedule+0x164/0x2b0 [ 284.163734][ T6762] do_uevent+0x2c3/0x570 [ 284.163749][ T6762] ? __pfx_do_uevent+0x10/0x10 [ 284.163761][ T6762] ? kfree+0x1c5/0x6c0 [ 284.163800][ T6762] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.163818][ T6762] ? kobject_uevent_env+0x378/0x9e0 [ 284.163829][ T6762] ? __pfx_autoremove_wake_function+0x10/0x10 [ 284.163848][ T6762] ? kobject_uevent_env+0x378/0x9e0 [ 284.163865][ T6762] __dlm_new_lockspace+0x1aa4/0x2060 [ 284.163878][ T6762] ? __dlm_new_lockspace+0x273/0x2060 [ 284.163894][ T6762] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 284.163907][ T6762] ? rcu_is_watching+0x15/0xb0 [ 284.163921][ T6762] ? cap_capable+0x123/0x460 [ 284.163933][ T6762] ? safesetid_security_capable+0xa9/0x1a0 [ 284.163947][ T6762] ? bpf_lsm_capable+0x9/0x20 [ 284.163959][ T6762] ? security_capable+0x7e/0x2c0 [ 284.163973][ T6762] ? dlm_new_user_lockspace+0x3e/0x80 [ 284.163993][ T6762] device_create_lockspace+0xc7/0x350 [ 284.164010][ T6762] ? __pfx_device_create_lockspace+0x10/0x10 [ 284.164028][ T6762] ? _copy_from_user+0x94/0xb0 [ 284.164044][ T6762] device_write+0x875/0xed0 [ 284.164059][ T6762] ? __pfx_device_write+0x10/0x10 [ 284.164072][ T6762] vfs_write+0x29f/0xbb0 [ 284.164091][ T6762] ? __pfx_vfs_write+0x10/0x10 [ 284.164106][ T6762] ? __fget_files+0x2a/0x420 [ 284.164120][ T6762] ? __fget_files+0x2a/0x420 [ 284.164131][ T6762] ? __fget_files+0x3a8/0x420 [ 284.164141][ T6762] ? __fget_files+0x2a/0x420 [ 284.164158][ T6762] ksys_write+0x156/0x270 [ 284.164173][ T6762] ? __pfx_ksys_write+0x10/0x10 [ 284.164192][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.164205][ T6762] do_syscall_64+0x174/0x580 [ 284.164219][ T6762] ? trace_irq_disable+0x3b/0x140 [ 284.164229][ T6762] ? clear_bhb_loop+0x40/0x90 [ 284.164243][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.164254][ T6762] RIP: 0033:0x7f886217e019 [ 284.164263][ T6762] RSP: 002b:00007f88603d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.164273][ T6762] RAX: ffffffffffffffda RBX: 00007f8862405fa0 RCX: 00007f886217e019 [ 284.164281][ T6762] RDX: 0000000000000078 RSI: 0000200000000400 RDI: 0000000000000007 [ 284.164289][ T6762] RBP: 00007f886221500c R08: 0000000000000000 R09: 0000000000000000 [ 284.164295][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.164302][ T6762] R13: 00007f8862406038 R14: 00007f8862405fa0 R15: 00007fff72b23bf8 [ 284.164320][ T6762] [ 284.165638][ T6762] OOM killer enabled. [ 284.165645][ T6762] Restarting tasks: Starting [ 284.211035][ T6762] Restarting tasks: Done [ 285.417168][ T6762] PM: hibernation: hibernation exit [ 285.528332][ T5844] usb 9-1: USB disconnect, device number 9 [ 286.367615][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.396064][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.397812][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.415442][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.417637][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.646215][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.651424][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.700258][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.708877][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.720269][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.394464][ T5973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.595012][ T4912] Bluetooth: hci0: command tx timeout [ 288.833736][ T4912] Bluetooth: hci4: command tx timeout [ 289.260986][ T5973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.375102][ T7024] veth0_macvtap: entered promiscuous mode [ 290.041702][ T5973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.142101][ T7024] veth1_macvtap: entered promiscuous mode [ 290.671573][ T4912] Bluetooth: hci0: command tx timeout [ 290.882413][ T5973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.911451][ T4912] Bluetooth: hci4: command tx timeout [ 291.376317][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.376435][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.376669][ T7335] bridge_slave_0: entered allmulticast mode [ 291.412958][ T7335] bridge_slave_0: entered promiscuous mode [ 291.523322][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.523434][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.523676][ T7335] bridge_slave_1: entered allmulticast mode [ 291.526741][ T7335] bridge_slave_1: entered promiscuous mode [ 291.558934][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.676709][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.699858][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.726808][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.127713][ T7335] team0: Port device team_slave_0 added [ 292.206287][ T7335] team0: Port device team_slave_1 added [ 292.398742][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.398759][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.398775][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.652789][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.652807][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.652835][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.752300][ T4912] Bluetooth: hci0: command tx timeout [ 292.991206][ T4912] Bluetooth: hci4: command tx timeout [ 293.231822][ T5973] bridge_slave_1: left allmulticast mode [ 293.231856][ T5973] bridge_slave_1: left promiscuous mode [ 293.232108][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.372089][ T5973] bridge_slave_0: left allmulticast mode [ 293.372116][ T5973] bridge_slave_0: left promiscuous mode [ 293.372357][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.171593][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.231587][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.287711][ T5973] bond0 (unregistering): Released all slaves [ 294.611340][ T7335] hsr_slave_0: entered promiscuous mode [ 294.642366][ T7335] hsr_slave_1: entered promiscuous mode [ 294.648096][ T7335] debugfs: 'hsr0' already exists in 'hsr' [ 294.648125][ T7335] Cannot create hsr debugfs directory [ 294.742697][ T7138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.830959][ T4912] Bluetooth: hci0: command tx timeout [ 294.856756][ T7138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.918116][ T7138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.985196][ T7138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.071138][ T4912] Bluetooth: hci4: command tx timeout [ 295.323809][ T7138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.353699][ T7138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.407745][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.407928][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.408182][ T7370] bridge_slave_0: entered allmulticast mode [ 295.410272][ T7370] bridge_slave_0: entered promiscuous mode [ 295.444304][ T7138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.483747][ T7138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.644655][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.644787][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.645009][ T7370] bridge_slave_1: entered allmulticast mode [ 295.647673][ T7370] bridge_slave_1: entered promiscuous mode [ 295.836469][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.836500][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.182246][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.182433][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.182696][ T7372] bridge_slave_0: entered allmulticast mode [ 296.184840][ T7372] bridge_slave_0: entered promiscuous mode [ 296.216683][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.301806][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.302307][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.302524][ T7372] bridge_slave_1: entered allmulticast mode [ 296.314071][ T7372] bridge_slave_1: entered promiscuous mode [ 296.329333][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.711032][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.719625][ T7370] team0: Port device team_slave_0 added [ 296.953589][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.957713][ T7370] team0: Port device team_slave_1 added [ 296.959573][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.959591][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.171417][ T5973] hsr_slave_0: left promiscuous mode [ 297.215710][ T5973] hsr_slave_1: left promiscuous mode [ 297.216670][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.216686][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.251849][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.251877][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.332322][ T5973] veth1_macvtap: left promiscuous mode [ 297.332386][ T5973] veth0_macvtap: left promiscuous mode [ 297.334216][ T5973] veth1_vlan: left promiscuous mode [ 297.334327][ T5973] veth0_vlan: left promiscuous mode [ 298.042313][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 298.091700][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 298.395001][ T7372] team0: Port device team_slave_0 added [ 298.398661][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.398675][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.398694][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.479213][ T7372] team0: Port device team_slave_1 added [ 298.490718][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.491200][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.491223][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.783807][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.783822][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.783846][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.791140][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.791154][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.791178][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.919154][ T7370] hsr_slave_0: entered promiscuous mode [ 299.930597][ T7370] hsr_slave_1: entered promiscuous mode [ 299.933209][ T7370] debugfs: 'hsr0' already exists in 'hsr' [ 299.935928][ T7370] Cannot create hsr debugfs directory [ 300.703820][ T7372] hsr_slave_0: entered promiscuous mode [ 300.707430][ T7372] hsr_slave_1: entered promiscuous mode [ 300.708381][ T7372] debugfs: 'hsr0' already exists in 'hsr' [ 300.708405][ T7372] Cannot create hsr debugfs directory [ 301.431322][ T5796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 301.635296][ T5796] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 301.635327][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.653505][ T5796] usb 2-1: NFC: intf ffff8880a62b0000 id ffffffff8ebb9580 [ 301.804656][ T5796] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 302.243807][ T5973] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.378435][ T5796] usb 2-1: USB disconnect, device number 2 [ 302.385907][ T5796] usb 2-1: NFC: intf ffff8880a62b0000 [ 302.947273][ T5973] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.444878][ T5973] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.511546][ T7628] lo speed is unknown, defaulting to 1000 [ 303.560950][ T7628] lo speed is unknown, defaulting to 1000 [ 303.584665][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.614753][ T7628] lo speed is unknown, defaulting to 1000 [ 303.829754][ T5973] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.890366][ T7628] infiniband syz0: set down [ 303.890431][ T7628] infiniband syz0: added lo [ 303.909384][ T5844] lo speed is unknown, defaulting to 1000 [ 303.937296][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.976116][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.976246][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.980047][ T7628] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 303.980080][ T7628] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 303.980112][ T7628] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 304.108917][ T7628] RDS/IB: syz0: added [ 304.108992][ T7628] smc: adding ib device syz0 with port count 1 [ 304.109014][ T7628] smc: ib device syz0 port 1 has no pnetid [ 304.126057][ T6540] lo speed is unknown, defaulting to 1000 [ 304.154270][ T7628] lo speed is unknown, defaulting to 1000 [ 304.158355][ T7335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.262050][ T7335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.264102][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.264196][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.301180][ T7335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.347997][ T7335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.360421][ T7335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.415393][ T7335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.429404][ T7335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.480562][ T7335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.864440][ T7628] lo speed is unknown, defaulting to 1000 [ 305.536516][ T7628] lo speed is unknown, defaulting to 1000 [ 306.062301][ T7628] lo speed is unknown, defaulting to 1000 [ 306.556158][ T5973] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.610202][ T7628] lo speed is unknown, defaulting to 1000 [ 306.953550][ T7628] lo speed is unknown, defaulting to 1000 [ 307.195667][ T5973] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.244133][ T7628] lo speed is unknown, defaulting to 1000 [ 307.379009][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.453805][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.506513][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.506744][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.765377][ T5973] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.823590][ T7628] lo speed is unknown, defaulting to 1000 [ 307.850042][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.852780][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.223035][ T7628] lo speed is unknown, defaulting to 1000 [ 308.550727][ T5973] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.995558][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.076611][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.080668][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.137064][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.156259][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.354977][ T5926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.486428][ T5919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.025068][ T5919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.027988][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.321516][ T4912] Bluetooth: hci5: command tx timeout [ 311.659038][ T7653] lo speed is unknown, defaulting to 1000 [ 312.268395][ T5973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.332122][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.781561][ T5973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.177763][ T5973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.391252][ T4912] Bluetooth: hci5: command tx timeout [ 313.648790][ T5973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.683076][ T7370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.735477][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.772180][ T7370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.805767][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.876625][ T7370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.919327][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.069591][ T7370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.107676][ T7370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.254420][ T7335] veth0_vlan: entered promiscuous mode [ 314.815285][ T7335] veth1_vlan: entered promiscuous mode [ 314.924581][ T7372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.947078][ T7372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.003291][ T7372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.046063][ T7372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.074576][ T7372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.105068][ T7372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.241250][ T5973] bridge_slave_1: left allmulticast mode [ 315.241275][ T5973] bridge_slave_1: left promiscuous mode [ 315.241447][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.362457][ T5973] bridge_slave_0: left allmulticast mode [ 315.362482][ T5973] bridge_slave_0: left promiscuous mode [ 315.362630][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.471338][ T4912] Bluetooth: hci5: command tx timeout [ 315.561334][ T5973] bridge_slave_1: left allmulticast mode [ 315.561358][ T5973] bridge_slave_1: left promiscuous mode [ 315.561554][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.661860][ T5973] bridge_slave_0: left allmulticast mode [ 315.661885][ T5973] bridge_slave_0: left promiscuous mode [ 315.662043][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.881230][ T5973] bridge_slave_1: left allmulticast mode [ 315.881254][ T5973] bridge_slave_1: left promiscuous mode [ 315.881404][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.001831][ T5973] bridge_slave_0: left allmulticast mode [ 316.001855][ T5973] bridge_slave_0: left promiscuous mode [ 316.002011][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.931517][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.012037][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.053072][ T5973] bond0 (unregistering): Released all slaves [ 317.551074][ T4912] Bluetooth: hci5: command tx timeout [ 317.623051][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.702096][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.724608][ T5973] bond0 (unregistering): Released all slaves [ 318.391777][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.451656][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.472956][ T5973] bond0 (unregistering): Released all slaves [ 318.515717][ T7372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.535891][ T7372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.768287][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.768503][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.768771][ T7653] bridge_slave_0: entered allmulticast mode [ 318.793618][ T7653] bridge_slave_0: entered promiscuous mode [ 318.808023][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.808124][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.808352][ T7653] bridge_slave_1: entered allmulticast mode [ 318.810629][ T7653] bridge_slave_1: entered promiscuous mode [ 319.051534][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.077161][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.346664][ T7653] team0: Port device team_slave_0 added [ 319.356413][ T7653] team0: Port device team_slave_1 added [ 319.358367][ T7335] veth0_macvtap: entered promiscuous mode [ 319.491849][ T7335] veth1_macvtap: entered promiscuous mode [ 319.495222][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.495239][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.495266][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.506111][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.506129][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.506155][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.143541][ T7653] hsr_slave_0: entered promiscuous mode [ 320.146573][ T7653] hsr_slave_1: entered promiscuous mode [ 320.147517][ T7653] debugfs: 'hsr0' already exists in 'hsr' [ 320.147542][ T7653] Cannot create hsr debugfs directory [ 320.312515][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.312570][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.339270][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.657655][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.825416][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.516961][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.917494][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.166426][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.166540][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.488314][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.550110][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.560131][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.564742][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.567661][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.117060][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.117281][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.320893][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.493192][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.532001][ T4912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.618098][ T4912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.638612][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.639258][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.754491][ T4912] Bluetooth: hci2: command tx timeout [ 324.951527][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.951657][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.057486][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.071128][ T4644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.072224][ T5966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.211728][ T5960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.512313][ T5995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.512504][ T5995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.831116][ T4912] Bluetooth: hci2: command tx timeout [ 326.831116][ T5608] Bluetooth: hci3: command tx timeout [ 327.638596][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.919121][ T7853] lo speed is unknown, defaulting to 1000 [ 328.111483][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.321083][ T7653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.454997][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.459514][ T7653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.602702][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.619805][ T7653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.667622][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.679435][ T7653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.759770][ T7653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.911071][ T5608] Bluetooth: hci3: command tx timeout [ 328.911104][ T5608] Bluetooth: hci2: command tx timeout [ 329.066137][ T7370] veth0_vlan: entered promiscuous mode [ 329.203688][ T7892] lo speed is unknown, defaulting to 1000 [ 329.261307][ T7370] veth1_vlan: entered promiscuous mode [ 329.793759][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.795325][ T7370] veth0_macvtap: entered promiscuous mode [ 329.968459][ T7372] veth0_vlan: entered promiscuous mode [ 329.982427][ T7370] veth1_macvtap: entered promiscuous mode [ 330.476992][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.646153][ T7372] veth1_vlan: entered promiscuous mode [ 330.923147][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.993195][ T4912] Bluetooth: hci3: command tx timeout [ 330.993227][ T4912] Bluetooth: hci2: command tx timeout [ 331.040327][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.040570][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.120113][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.320319][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.320461][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.443600][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.443794][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.444048][ T7853] bridge_slave_0: entered allmulticast mode [ 331.446701][ T7853] bridge_slave_0: entered promiscuous mode [ 331.502352][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.502473][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.502744][ T7853] bridge_slave_1: entered allmulticast mode [ 331.506280][ T7853] bridge_slave_1: entered promiscuous mode [ 331.701030][ T5973] hsr_slave_0: left promiscuous mode [ 331.742345][ T5973] hsr_slave_1: left promiscuous mode [ 331.743017][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.743033][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.782735][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.782761][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.981014][ T5973] hsr_slave_0: left promiscuous mode [ 332.020984][ T5973] hsr_slave_1: left promiscuous mode [ 332.021621][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.021636][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.081980][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.082006][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.273451][ T5973] hsr_slave_0: left promiscuous mode [ 332.310998][ T5973] hsr_slave_1: left promiscuous mode [ 332.311722][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.311738][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.334781][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.334807][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.443858][ T5973] veth1_macvtap: left promiscuous mode [ 332.443924][ T5973] veth0_macvtap: left promiscuous mode [ 332.444067][ T5973] veth1_vlan: left promiscuous mode [ 332.444167][ T5973] veth0_vlan: left promiscuous mode [ 332.571281][ T5973] veth1_macvtap: left promiscuous mode [ 332.571386][ T5973] veth0_macvtap: left promiscuous mode [ 332.571658][ T5973] veth1_vlan: left promiscuous mode [ 332.571841][ T5973] veth0_vlan: left promiscuous mode [ 332.712566][ T5973] veth1_macvtap: left promiscuous mode [ 332.712628][ T5973] veth0_macvtap: left promiscuous mode [ 332.712774][ T5973] veth1_vlan: left promiscuous mode [ 332.712882][ T5973] veth0_vlan: left promiscuous mode [ 333.071010][ T4912] Bluetooth: hci3: command tx timeout [ 333.642483][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 333.681755][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 333.783078][ T5972] smc: removing ib device syz1 [ 334.342659][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 334.381559][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 335.052282][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 335.091843][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 335.280923][ T5843] syz1: Port: 1 Link DOWN [ 335.293318][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.355623][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.489910][ T5972] smbdirect: ib_dev[syz1] removed [ 335.831094][ T7853] team0: Port device team_slave_0 added [ 335.989277][ T7853] team0: Port device team_slave_1 added [ 335.992681][ T7372] veth0_macvtap: entered promiscuous mode [ 336.822252][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.822269][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.822295][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.830078][ T7372] veth1_macvtap: entered promiscuous mode [ 337.179664][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.179681][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.179709][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.954089][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.954242][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.954384][ T7892] bridge_slave_0: entered allmulticast mode [ 337.982356][ T7892] bridge_slave_0: entered promiscuous mode [ 338.060041][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.060063][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.320448][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.320575][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.321310][ T7892] bridge_slave_1: entered allmulticast mode [ 338.324128][ T7892] bridge_slave_1: entered promiscuous mode [ 338.433708][ T7853] hsr_slave_0: entered promiscuous mode [ 338.436028][ T7853] hsr_slave_1: entered promiscuous mode [ 338.441555][ T7853] debugfs: 'hsr0' already exists in 'hsr' [ 338.441582][ T7853] Cannot create hsr debugfs directory [ 338.444700][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.944886][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.009173][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.178673][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.325093][ T4644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.325114][ T4644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.677938][ T7892] team0: Port device team_slave_0 added [ 339.838240][ T7892] team0: Port device team_slave_1 added [ 339.999087][ T8119] PM: hibernation: hibernation entry [ 340.546243][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.546260][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.546285][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.724608][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.724626][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.724652][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.837994][ T8119] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 340.838968][ T8119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.839088][ T8119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 341.199917][ T8119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 341.348247][ T8119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.349635][ T8119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 341.669929][ T8119] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 341.797277][ T8119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.797505][ T8119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 341.843540][ T7892] hsr_slave_0: entered promiscuous mode [ 341.853481][ T7892] hsr_slave_1: entered promiscuous mode [ 341.856547][ T7892] debugfs: 'hsr0' already exists in 'hsr' [ 341.856571][ T7892] Cannot create hsr debugfs directory [ 341.936448][ T8119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 341.993398][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.069656][ T8119] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 342.069750][ T8119] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 342.253798][ T8119] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 342.377176][ T8119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.377257][ T8119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 342.518092][ T8119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 342.639732][ T8119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.640094][ T8119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 342.726010][ T8119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 342.729384][ T7853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.810629][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 342.921503][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 342.921630][ T5608] Bluetooth: hci7: command 0x0c1a tx timeout [ 343.090215][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.090234][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.189829][ T5960] Filesystems sync: 0.355 seconds [ 343.209921][ T8119] Freezing user space processes [ 343.288575][ T8119] ------------[ cut here ]------------ [ 343.288591][ T8119] debug_locks && p->lockdep_depth [ 343.288605][ T8119] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#0: syz.4.141/8119 [ 343.288657][ T8119] Modules linked in: [ 343.288678][ T8119] CPU: 0 UID: 0 PID: 8119 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.288705][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.288724][ T8119] RIP: 0010:__set_task_frozen+0x260/0x340 [ 343.288755][ T8119] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 343.288773][ T8119] RSP: 0018:ffffc90003b1fa10 EFLAGS: 00010087 [ 343.288790][ T8119] RAX: ffffffff81b0b75f RBX: ffff88802f15be00 RCX: 0000000000080000 [ 343.288806][ T8119] RDX: ffffc9001bdd7000 RSI: 000000000001dc83 RDI: 000000000001dc84 [ 343.288821][ T8119] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 343.288834][ T8119] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88802f15be18 [ 343.288850][ T8119] R13: 1ffff11005e2b7c3 R14: 0000000000000000 R15: ffff88802f15ca00 [ 343.288866][ T8119] FS: 00007fe8917b66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 343.288885][ T8119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.288897][ T8119] CR2: 00007f06a61a7e9c CR3: 000000004425e000 CR4: 00000000003526f0 [ 343.288914][ T8119] Call Trace: [ 343.288923][ T8119] [ 343.288934][ T8119] ? __pfx___set_task_frozen+0x10/0x10 [ 343.288968][ T8119] task_call_func+0x1aa/0x260 [ 343.289009][ T8119] freeze_task+0x216/0x390 [ 343.289038][ T8119] ? __pfx_rt_read_lock+0x10/0x10 [ 343.289061][ T8119] ? __pfx_freeze_task+0x10/0x10 [ 343.289089][ T8119] ? seqcount_lockdep_reader_access+0xea/0x100 [ 343.289110][ T8119] ? ktime_get_with_offset+0x27f/0x2d0 [ 343.289134][ T8119] try_to_freeze_tasks+0x190/0x620 [ 343.289167][ T8119] freeze_processes+0xce/0x1e0 [ 343.289195][ T8119] hibernate+0x247/0x680 [ 343.289237][ T8119] state_store+0x234/0x290 [ 343.289259][ T8119] ? __pfx_sysfs_kf_write+0x10/0x10 [ 343.289276][ T8119] kernfs_fop_write_iter+0x3a5/0x540 [ 343.289307][ T8119] vfs_write+0x61e/0xbb0 [ 343.289340][ T8119] ? __pfx_vfs_write+0x10/0x10 [ 343.289378][ T8119] ? __fget_files+0x2a/0x420 [ 343.289407][ T8119] __x64_sys_pwrite64+0x199/0x230 [ 343.289434][ T8119] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 343.289467][ T8119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.289486][ T8119] do_syscall_64+0x174/0x580 [ 343.289510][ T8119] ? trace_irq_disable+0x3b/0x140 [ 343.289528][ T8119] ? clear_bhb_loop+0x40/0x90 [ 343.289549][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.289567][ T8119] RIP: 0033:0x7fe89355e019 [ 343.289584][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.289598][ T8119] RSP: 002b:00007fe8917b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 343.289615][ T8119] RAX: ffffffffffffffda RBX: 00007fe8937e5fa0 RCX: 00007fe89355e019 [ 343.289628][ T8119] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 343.289639][ T8119] RBP: 00007fe8935f500c R08: 0000000000000000 R09: 0000000000000000 [ 343.289650][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.289661][ T8119] R13: 00007fe8937e6038 R14: 00007fe8937e5fa0 R15: 00007ffc24615468 [ 343.289693][ T8119] [ 343.289702][ T8119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.289716][ T8119] CPU: 0 UID: 0 PID: 8119 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.289737][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.289747][ T8119] Call Trace: [ 343.289754][ T8119] [ 343.289761][ T8119] vpanic+0x56c/0xa60 [ 343.289779][ T8119] ? __pfx__printk+0x10/0x10 [ 343.289800][ T8119] ? __pfx_vpanic+0x10/0x10 [ 343.289815][ T8119] ? is_bpf_text_address+0x292/0x2b0 [ 343.289839][ T8119] ? is_bpf_text_address+0x26/0x2b0 [ 343.289866][ T8119] panic+0xc5/0xd0 [ 343.289879][ T8119] ? __pfx_panic+0x10/0x10 [ 343.289907][ T8119] __warn+0x315/0x4c0 [ 343.289924][ T8119] ? __set_task_frozen+0x260/0x340 [ 343.289951][ T8119] ? __set_task_frozen+0x260/0x340 [ 343.289976][ T8119] __report_bug+0x276/0x570 [ 343.290002][ T8119] ? sched_clock+0x3f/0x60 [ 343.290031][ T8119] ? __set_task_frozen+0x260/0x340 [ 343.290064][ T8119] ? __pfx___report_bug+0x10/0x10 [ 343.290094][ T8119] ? __lock_acquire+0x683/0x2ce0 [ 343.290122][ T8119] ? __lock_acquire+0x683/0x2ce0 [ 343.290150][ T8119] ? __set_task_frozen+0x260/0x340 [ 343.290179][ T8119] report_bug+0x16a/0x220 [ 343.290207][ T8119] ? __set_task_frozen+0x260/0x340 [ 343.290244][ T8119] ? __set_task_frozen+0x262/0x340 [ 343.290274][ T8119] handle_bug+0x9c/0x200 [ 343.290303][ T8119] exc_invalid_op+0x1a/0x50 [ 343.290331][ T8119] asm_exc_invalid_op+0x1a/0x20 [ 343.290351][ T8119] RIP: 0010:__set_task_frozen+0x260/0x340 [ 343.290380][ T8119] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 09 97 09 cc e8 ef 21 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 e1 21 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 343.290398][ T8119] RSP: 0018:ffffc90003b1fa10 EFLAGS: 00010087 [ 343.290416][ T8119] RAX: ffffffff81b0b75f RBX: ffff88802f15be00 RCX: 0000000000080000 [ 343.290431][ T8119] RDX: ffffc9001bdd7000 RSI: 000000000001dc83 RDI: 000000000001dc84 [ 343.290446][ T8119] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 343.290459][ T8119] R10: dffffc0000000000 R11: ffffffff81b0b500 R12: ffff88802f15be18 [ 343.290475][ T8119] R13: 1ffff11005e2b7c3 R14: 0000000000000000 R15: ffff88802f15ca00 [ 343.290495][ T8119] ? __pfx___set_task_frozen+0x10/0x10 [ 343.290529][ T8119] ? __set_task_frozen+0x25f/0x340 [ 343.290569][ T8119] ? __pfx___set_task_frozen+0x10/0x10 [ 343.290596][ T8119] task_call_func+0x1aa/0x260 [ 343.290634][ T8119] freeze_task+0x216/0x390 [ 343.290663][ T8119] ? __pfx_rt_read_lock+0x10/0x10 [ 343.290686][ T8119] ? __pfx_freeze_task+0x10/0x10 [ 343.290716][ T8119] ? seqcount_lockdep_reader_access+0xea/0x100 [ 343.290738][ T8119] ? ktime_get_with_offset+0x27f/0x2d0 [ 343.290762][ T8119] try_to_freeze_tasks+0x190/0x620 [ 343.290796][ T8119] freeze_processes+0xce/0x1e0 [ 343.290823][ T8119] hibernate+0x247/0x680 [ 343.290868][ T8119] state_store+0x234/0x290 [ 343.290891][ T8119] ? __pfx_sysfs_kf_write+0x10/0x10 [ 343.290910][ T8119] kernfs_fop_write_iter+0x3a5/0x540 [ 343.290941][ T8119] vfs_write+0x61e/0xbb0 [ 343.290975][ T8119] ? __pfx_vfs_write+0x10/0x10 [ 343.291008][ T8119] ? __fget_files+0x2a/0x420 [ 343.291039][ T8119] __x64_sys_pwrite64+0x199/0x230 [ 343.291070][ T8119] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 343.291106][ T8119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.291129][ T8119] do_syscall_64+0x174/0x580 [ 343.291157][ T8119] ? trace_irq_disable+0x3b/0x140 [ 343.291178][ T8119] ? clear_bhb_loop+0x40/0x90 [ 343.291204][ T8119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.291234][ T8119] RIP: 0033:0x7fe89355e019 [ 343.291255][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.291272][ T8119] RSP: 002b:00007fe8917b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 343.291291][ T8119] RAX: ffffffffffffffda RBX: 00007fe8937e5fa0 RCX: 00007fe89355e019 [ 343.291306][ T8119] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 343.291320][ T8119] RBP: 00007fe8935f500c R08: 0000000000000000 R09: 0000000000000000 [ 343.291333][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.291346][ T8119] R13: 00007fe8937e6038 R14: 00007fe8937e5fa0 R15: 00007ffc24615468 [ 343.291378][ T8119] [ 343.293619][ T8119] Kernel Offset: disabled