last executing test programs: 2m33.598979714s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402a1101000001010200010902270001010080320904000003ff000000070582024000000705810240000007050102400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, "0101010101010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000400)="0080002000"/16) syz_usb_ep_write(r0, 0x82, 0x10, &(0x7f0000000500)='\x00'/16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m30.403577685s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-3\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 2m29.309981926s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./debug/usb/xhci\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/xhci_hcd\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000500), 0x1000) close(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/xhci-hcd\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000700), 0x1000) close(r2) 2m29.23350082s ago: executing program 4 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/bluetooth/hci0\x00', 0x0, 0x0) 2m29.125050395s ago: executing program 4 (id=16): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/virtio-pci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/virtio-pci/uevent\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) 2m29.110684526s ago: executing program 4 (id=17): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2m29.054999938s ago: executing program 4 (id=18): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100000000010902200001010080fa0904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) 2m28.929590914s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m28.444249577s ago: executing program 3 (id=23): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) r11 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r11}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) io_uring_enter(r7, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001400)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) close(r7) 2m28.201234009s ago: executing program 3 (id=24): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f00000001c0)={0x40, 0x4, 0x2, ' \x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m27.201151716s ago: executing program 2 (id=33): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001000000010902270001010080320904000003ff0000000705810308000a0705020240000007058602400000"], 0x0) close(r0) 2m26.677132601s ago: executing program 4 (id=37): syz_usb_connect(0x1, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000700), 0x1f, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000800), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)) 2m26.553908766s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/virtio-pci\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/serial\x00', 0x0, 0x0) 2m26.407145923s ago: executing program 3 (id=41): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040c00902020100000000010902200001010080320904000002ff0000000705820200020007050102000200"], 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040c00902020100000000010902200001010080320904000002ff0000000705820200020007050102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x2) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000200)) 2m25.767474484s ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy0/wlan0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/netdev:wlan0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/ieee80211/phy1/wlan1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/ieee80211/phy1/netdev:wlan1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/netdev:wlan1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/ieee80211/phy1/netdev:wlan0\x00', 0x0, 0x0) 2m25.696498547s ago: executing program 2 (id=46): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) r11 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r11}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) io_uring_enter(r7, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001400)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) 2m25.480940787s ago: executing program 2 (id=48): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x80, &(0x7f0000000100)='\x00'/128) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2) read$hidraw(r1, &(0x7f0000000400)=""/128, 0x80) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 2m3.665549898s ago: executing program 32 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\n\x00', 0xd) write(r0, &(0x7f00000000e0)='0000:00:03.0\n\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000120)='0000:00:02.0\n\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\n\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='8086 100e\n\x00', 0xa) write(r2, &(0x7f00000001a0)='8086 100f\n\x00', 0xa) write(r2, &(0x7f00000001c0)='8086 10d3\n\x00', 0xa) write(r2, &(0x7f00000001e0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000220)='0000:00:02.0\n\x00', 0xd) write(r3, &(0x7f0000000240)='0000:00:03.0\n\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000260)='./file0\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='8086 100e\n\x00', 0xa) write(r4, &(0x7f00000002a0)='8086 100f\n\x00', 0xa) write(r4, &(0x7f00000002c0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f00000002e0)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='0000:00:02.0\n\x00', 0xd) write(r5, &(0x7f0000000320)='0000:00:03.0\n\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000360)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r7, &(0x7f00000003a0)='0\n\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/pm_test\x00', 0x1, 0x0) write(r8, &(0x7f00000003e0)='devices\n\x00', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r9, &(0x7f0000000420)='freeze\n\x00', 0x7) write(r9, &(0x7f0000000440)='mem\n\x00', 0x4) 2m3.541325883s ago: executing program 33 (id=52): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'\x00', 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)={0xc0, 0xa1, 0x4, "80000178"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x78010080}, 0x0, 0x0}) syz_usb_disconnect(r0) 2m3.353141963s ago: executing program 34 (id=48): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x80, &(0x7f0000000100)='\x00'/128) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2) read$hidraw(r1, &(0x7f0000000400)=""/128, 0x80) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 2m3.219555469s ago: executing program 35 (id=41): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040c00902020100000000010902200001010080320904000002ff0000000705820200020007050102000200"], 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040c00902020100000000010902200001010080320904000002ff0000000705820200020007050102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x2) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000200)) 2m3.105465044s ago: executing program 36 (id=37): syz_usb_connect(0x1, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="12011002000000402505a4a400000000000109022000010100c0000904000002ff0000000705810200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f00010a1003000e0001000000"]}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000700), 0x1f, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000800), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)) 1m26.077027764s ago: executing program 7 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices\x00', 0x0, 0x0) 1m25.974471698s ago: executing program 7 (id=80): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)}) 1m25.807844197s ago: executing program 7 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform\x00', 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/rtc_cmos\x00', 0x10000, 0x0) 1m25.632249935s ago: executing program 7 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) 1m25.582794167s ago: executing program 7 (id=83): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000750001010203010902270001010080fa0904"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) read(r2, &(0x7f0000000300)=""/4096, 0x1000) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000400)=0x1) syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x0, 0x2) r3 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 1m23.686123157s ago: executing program 7 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='freezer\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='freeze\n\x00', 0x7) close(r2) 1m13.301456308s ago: executing program 5 (id=162): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000750001010203010902270001010080fa0904"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) nanosleep(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) read(r2, &(0x7f0000000300)=""/4096, 0x1000) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000400)=0x1) syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x0, 0x2) r3 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 1m11.883054924s ago: executing program 5 (id=172): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) write(0xffffffffffffffff, &(0x7f00000002c0)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) close(r4) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='512\n', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='2\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='3\n', 0x2) close(r8) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) 1m10.926110609s ago: executing program 5 (id=181): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000750001010203010902270001010080fa0904"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)) nanosleep(0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) read(r2, &(0x7f0000000300)=""/4096, 0x1000) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000400)=0x1) syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x0, 0x2) r3 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 1m9.44275978s ago: executing program 5 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond1/bonding/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='balance-r', 0x9) close(r0) 1m9.22095176s ago: executing program 5 (id=193): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) getpid() io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) 1m9.079170007s ago: executing program 5 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/scsi/devices/0:0:0:0/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/sync_on_suspend\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='devices\n', 0x8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='freeze\n', 0x7) close(r5) 1m8.266867275s ago: executing program 37 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='freezer\n\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='freeze\n\x00', 0x7) close(r2) 53.824404868s ago: executing program 38 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/scsi/devices/0:0:0:0/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/sync_on_suspend\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='devices\n', 0x8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='freeze\n', 0x7) close(r5) 36.153036232s ago: executing program 1 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='all\n', 0x4) close(r1) write(0xffffffffffffffff, &(0x7f0000000380)='+192.0.2.1\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) 35.985739911s ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:01.0\x00', 0xd) write(r0, &(0x7f0000000300)='0000:00:1f.2\x00', 0xd) 35.797041889s ago: executing program 1 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./sys\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='bus/pci/devices/0000:00:1f.2\x00', 0x0, 0x0) 35.604323588s ago: executing program 1 (id=406): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 35.36600072s ago: executing program 1 (id=409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="1400000015000103020000000000000006010000", 0x14) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000100)="140000001800010302000000000000000601", 0x12) write(r0, &(0x7f0000000000)="3000000019000500010000000000000003010000100002007664706173696d5f626c6b00000000", 0x27) write(r0, &(0x7f0000000100)="1400000019000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="140000001a0001030200", 0xa) write(r0, &(0x7f0000000100)="140000001b000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000100)="140000001d000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001e000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="140000001e000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001f000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000021000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000021000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000022000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000023000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000023000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000024000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000024000103020000000000000006010000", 0x14) 35.010522697s ago: executing program 1 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/ram0,65536\n', 0x10) close(r0) r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000}) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0) close(r3) 32.39319631s ago: executing program 6 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/cpu/drivers\x00', 0x0, 0x0) close(r0) 32.253042957s ago: executing program 6 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/cpu\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu\x00', 0x0, 0x0) 32.207807399s ago: executing program 6 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) 32.045004066s ago: executing program 6 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb0\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600), 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) close(r6) ioctl(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a00)='\x00'/48) 31.948424801s ago: executing program 6 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/ci_hdrc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) 31.711809822s ago: executing program 6 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000300)={0x0, 0x10000}) 29.521099816s ago: executing program 8 (id=448): nanosleep(&(0x7f0000000300), 0x0) 29.463784649s ago: executing program 8 (id=449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="1400000015000103020000000000000006010000", 0x14) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000100)="140000001800010302000000000000000601", 0x12) write(r0, &(0x7f0000000000)="3000000019000500010000000000000003010000100002007664706173696d5f626c6b00000000", 0x27) write(r0, &(0x7f0000000100)="1400000019000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="140000001a00010302000000000000", 0xf) write(r0, &(0x7f0000000100)="140000001b000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000100)="140000001d000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001e000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="140000001e000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001f000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000021000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000021000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000022000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000023000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000023000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000024000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000024000103020000000000000006010000", 0x14) 29.21745265s ago: executing program 8 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/arp_validate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='all\n', 0x4) close(r1) write(0xffffffffffffffff, &(0x7f0000000380)='+192.0.2.1\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='10', 0x2) 29.065736457s ago: executing program 8 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7, 0x6, 0x8, 0x2, 0x6, 0xffff8000}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xeeef0000, 0x75000, 0xd, 0xcc, 0x16, 0x40, 0x51, 0x6, 0x8, 0x7f, 0xd, 0x8}, {0x200000, 0xa000, 0xa, 0x7b, 0x16, 0x18, 0x0, 0x5, 0x1, 0x3, 0x5, 0x1}, {0xb000, 0x576463a100692f35, 0xb, 0x0, 0x4, 0x6, 0x7c, 0x0, 0x1, 0x8, 0x1, 0x4}, {0xffffffff, 0xe000, 0xe, 0x0, 0xa9, 0x7, 0x53, 0x49, 0x8, 0x2, 0x0, 0x7}, {0x80a0000, 0x50000, 0xc, 0x7, 0x4e, 0x9b, 0x9, 0x8, 0x0, 0xe4, 0x9, 0x40}, {0x4000, 0xeeee0000, 0xf, 0xe, 0x5, 0x40, 0x2a, 0x0, 0x5, 0x8, 0x81, 0x2}, {0x8000000, 0xa000, 0xb, 0x51, 0x1, 0x7f, 0x5, 0x4, 0x5, 0x16, 0x2}, {0xfec00000, 0x3000, 0xe, 0x6, 0x10, 0x3, 0x5, 0x3, 0xf9, 0xf7, 0x8, 0x1}, {0x70000, 0x700}, {0x1, 0x6}, 0x0, 0x0, 0xd000, 0x0, 0x8, 0x9400, 0xffefc002, [0xff, 0x100000000, 0xd, 0x6]}) 28.740978422s ago: executing program 8 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1\n', 0x2) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r5, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r5) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r6, 0xc0101282, &(0x7f0000000a00)='\x00'/48) 28.115012182s ago: executing program 8 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/ram0,131072\x00', 0x11) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000140)={0x0, 0x400000}) 26.45533934s ago: executing program 0 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/device\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/uevent\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x0, 0x0) 26.344027086s ago: executing program 0 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='2\n', 0x2) close(r1) 24.805021908s ago: executing program 9 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) 24.804877408s ago: executing program 0 (id=472): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) read(r0, &(0x7f0000000400), 0xa) 24.705407253s ago: executing program 9 (id=473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="1400000015000103020000000000000006010000", 0x14) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000100)="140000001800010302000000000000000601", 0x12) write(r0, &(0x7f0000000000)="3000000019000500010000000000000003010000100002007664706173696d5f626c6b00000000", 0x27) write(r0, &(0x7f0000000100)="1400000019000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000100)="140000001a00010302000000000000", 0xf) write(r0, &(0x7f0000000100)="140000001b000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000100)="140000001d000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001e000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="140000001e000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="300000001f000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000021000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000021000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000022000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000000)="3000000023000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000023000103020000000000000006010000", 0x14) write(r0, &(0x7f0000000000)="3000000024000500010000000000000003010000100002007664706173696d5f626c6b00000000000a0004007664706130000000", 0x30) write(r0, &(0x7f0000000100)="1400000024000103020000000000000006010000", 0x14) 24.575478519s ago: executing program 9 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/NON_EXISTENT_XYZ\x00', 0x0, 0x0) 24.445060866s ago: executing program 9 (id=475): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0), 0x0, &(0x7f0000001140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 24.427216077s ago: executing program 9 (id=476): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 24.075827033s ago: executing program 0 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='path_group G', 0xc) write(r0, &(0x7f0000000300)='delete path_group G1 /bin/true\n', 0x1f) 23.992385727s ago: executing program 0 (id=478): syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000040ffffffff0001010200010902200001010080320904000002000000000905010240000009058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000140)=0x1) 22.133724705s ago: executing program 9 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb0\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) close(r6) ioctl(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a00)='\x00'/48) 21.992796561s ago: executing program 0 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 74753 0 0 0\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='1\n', 0x2) mount(&(0x7f00000003c0), &(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,port=2049,vers=4.0,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/etc/passwd\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x10}) 423.18971ms ago: executing program 39 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/ram0,65536\n', 0x10) close(r0) r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000}) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0) close(r3) 219.12398ms ago: executing program 40 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000300)={0x0, 0x10000}) 150.205063ms ago: executing program 41 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='localhost 1 \\x00000000 2147483647 /\n', 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 74753 0 0 0\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='1\n', 0x2) mount(&(0x7f00000003c0), &(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,port=2049,vers=4.0,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/etc/passwd\x00', 0x0, 0x0) flock(r5, 0x2) fcntl$lock(r5, 0x6, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x10}) 80.286327ms ago: executing program 42 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/ram0,131072\x00', 0x11) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000140)={0x0, 0x400000}) 0s ago: executing program 43 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb0/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb0\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) close(r6) ioctl(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a00)='\x00'/48) kernel console output (not intermixed with test programs): ice strings: Mfr=1, Product=2, SerialNumber=3 [ 164.139304][ T26] usb 10-1: Product: syz [ 164.150872][ T26] usb 10-1: Manufacturer: syz [ 164.168060][ T26] usb 10-1: SerialNumber: syz [ 164.200463][ T26] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 164.298536][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.373427][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.399866][ T26] usb 10-1: USB disconnect, device number 5 [ 164.410364][ T26] pvrusb2: Device being rendered inoperable [ 164.422053][ T5381] device bridge_slave_0 entered promiscuous mode [ 164.436017][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.453827][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.462517][ T5381] device bridge_slave_1 entered promiscuous mode [ 164.505055][ T5381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.539973][ T5381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.637248][ T5381] team0: Port device team_slave_0 added [ 164.658781][ T5381] team0: Port device team_slave_1 added [ 164.710260][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.728011][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.780627][ T5381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.803599][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.821661][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.876426][ T5381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.995459][ T5381] device hsr_slave_0 entered promiscuous mode [ 165.025506][ T5381] device hsr_slave_1 entered promiscuous mode [ 165.041696][ T5381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.059606][ T5381] Cannot create hsr debugfs directory [ 165.105442][ T5412] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 165.638404][ T5430] o2cb: Local heartbeat has not been started. [ 165.644699][ T5430] o2cb: Cluster check failed. Fix errors before retrying. [ 165.668152][ T5430] (syz.9.206,5430,0):user_dlm_register:674 ERROR: status = -22 [ 165.676081][ T5430] (syz.9.206,5430,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 165.772118][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.208'. [ 165.802008][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 165.815970][ T5433] netlink: 'syz.8.208': attribute type 2 has an invalid length. [ 165.880670][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.208'. [ 166.079252][ T5381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.098165][ T5381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.109665][ T5381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.129121][ T5381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.228833][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.248746][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.259817][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.277812][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.290748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.305794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.315737][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.322926][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.341987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.351515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.361099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.379153][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.386336][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.412751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.447508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.485157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.540201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.557475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.585223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.610229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.640836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.655859][ T5452] o2cb: Local heartbeat has not been started. [ 166.677526][ T5381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.688594][ T5452] o2cb: Cluster check failed. Fix errors before retrying. [ 166.699250][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.718592][ T5452] (syz.9.210,5452,1):user_dlm_register:674 ERROR: status = -22 [ 166.729606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.738322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.745493][ T5452] (syz.9.210,5452,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 166.757939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.165648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.176480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.193348][ T5381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.203497][ T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 167.232783][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.241568][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.276188][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.291177][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.301095][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.316897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.331069][ T5381] device veth0_vlan entered promiscuous mode [ 167.346105][ T5381] device veth1_vlan entered promiscuous mode [ 167.379368][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.404095][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.413830][ T14] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.441246][ T14] usb 9-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 167.459288][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.482720][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.490847][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.500086][ T14] usb 9-1: Product: syz [ 167.506138][ T14] usb 9-1: Manufacturer: syz [ 167.510970][ T14] usb 9-1: SerialNumber: syz [ 167.516352][ T5381] device veth0_macvtap entered promiscuous mode [ 167.572940][ T14] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 167.596251][ T5381] device veth1_macvtap entered promiscuous mode [ 167.637514][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.655372][ T5471] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 167.665245][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.685718][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.706652][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.737088][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.754028][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.765606][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.776519][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.798766][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.832966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.848780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.869533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.882211][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 167.894166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.921330][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.944435][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.954655][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.965156][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.975246][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.985860][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.003125][ T5381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.025701][ T5381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.054551][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.074105][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.093941][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.118427][ T5381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.140644][ T5381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.158476][ T5381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.177419][ T5381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.203019][ T5477] bond0: option arp_interval: invalid value (all) [ 168.210229][ T5477] bond0: option arp_interval: allowed values 0 - 2147483647 [ 168.270569][ T14] usb 9-1: USB disconnect, device number 4 [ 168.287297][ T14] pvrusb2: Device being rendered inoperable [ 168.339587][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.354189][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.429253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.458622][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.483420][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.508729][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.732023][ T5489] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 168.951252][ T4359] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484 for subsystem testsubsys not allowed [ 168.983848][ T5489] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484 [ 169.023651][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.217'. [ 169.052432][ T5498] netlink: 'syz.8.217': attribute type 2 has an invalid length. [ 169.117798][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.217'. [ 169.166435][ T5504] loop0: detected capacity change from 0 to 4096 [ 169.196292][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.211526][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.220003][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.228215][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.237447][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.247045][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.275750][ T5507] o2cb: Local heartbeat has not been started. [ 169.321410][ T5507] o2cb: Cluster check failed. Fix errors before retrying. [ 169.367721][ T5507] (syz.9.218,5507,0):user_dlm_register:674 ERROR: status = -22 [ 169.390292][ T5503] lo speed is unknown, defaulting to 1000 [ 169.414298][ T5507] (syz.9.218,5507,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 169.734881][ T5519] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 169.887115][ T5525] o2cb: Local heartbeat has not been started. [ 169.904753][ T5525] o2cb: Cluster check failed. Fix errors before retrying. [ 169.912172][ T5525] (syz.0.222,5525,0):user_dlm_register:674 ERROR: status = -22 [ 169.919841][ T5525] (syz.0.222,5525,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 169.952086][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 170.081105][ T5503] chnl_net:caif_netlink_parms(): no params data found [ 170.402496][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.409746][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.419152][ T5503] device bridge_slave_0 entered promiscuous mode [ 170.428156][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.436148][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.444457][ T5503] device bridge_slave_1 entered promiscuous mode [ 170.471715][ T5503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.484711][ T5503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.538767][ T5503] team0: Port device team_slave_0 added [ 170.555893][ T5503] team0: Port device team_slave_1 added [ 170.620179][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.638473][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.700804][ T5503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.714325][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.228'. [ 170.732993][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.743136][ T5545] netlink: 'syz.9.228': attribute type 2 has an invalid length. [ 170.758779][ T5547] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 170.767920][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.796164][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.228'. [ 170.826252][ T5503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.866022][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.940976][ T5503] device hsr_slave_0 entered promiscuous mode [ 170.954741][ T5503] device hsr_slave_1 entered promiscuous mode [ 170.981707][ T5503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.997454][ T5503] Cannot create hsr debugfs directory [ 171.039841][ T4359] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484 for subsystem testsubsys not allowed [ 171.066006][ T5547] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484 [ 171.093312][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.108757][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 171.118470][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.126835][ T5556] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 171.139926][ T22] usb 1-1: Product: syz [ 171.151297][ T22] usb 1-1: Manufacturer: syz [ 171.160505][ T22] usb 1-1: SerialNumber: syz [ 171.197223][ T22] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 171.312635][ T4286] Bluetooth: hci6: command 0x0409 tx timeout [ 171.365457][ T5560] loop0: detected capacity change from 0 to 4096 [ 171.377750][ T5503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.411046][ T5503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.479346][ T5503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.512980][ T5566] o2cb: Local heartbeat has not been started. [ 171.519884][ T5566] o2cb: Cluster check failed. Fix errors before retrying. [ 171.530324][ T5503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.559595][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.233'. [ 171.576293][ T5567] netlink: 'syz.8.233': attribute type 11 has an invalid length. [ 171.588099][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.8.233'. [ 171.597547][ T5566] (syz.9.232,5566,0):user_dlm_register:674 ERROR: status = -22 [ 171.636327][ T5566] (syz.9.232,5566,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 171.805731][ T5503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.855266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.892332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.903910][ T22] usb 1-1: USB disconnect, device number 3 [ 171.912553][ T22] pvrusb2: Device being rendered inoperable [ 171.937180][ T5503] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.985367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.004366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.019382][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.026575][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.043026][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 172.050070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.060138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.149496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.169288][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.176492][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.238382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.264797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.275667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.295923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.307584][ T5580] o2cb: Local heartbeat has not been started. [ 172.315162][ T5580] o2cb: Cluster check failed. Fix errors before retrying. [ 172.346370][ T5580] (syz.8.234,5580,0):user_dlm_register:674 ERROR: status = -22 [ 172.367690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.379561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.395622][ T5580] (syz.8.234,5580,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 172.429437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.468768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.489172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.513669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.550734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.576520][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.087525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.100564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.121398][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.392694][ T4286] Bluetooth: hci6: command 0x041b tx timeout [ 173.474904][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.239'. [ 173.484823][ T5610] netlink: 'syz.8.239': attribute type 2 has an invalid length. [ 173.493527][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.239'. [ 173.700008][ T5616] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 173.806967][ T5623] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 174.063380][ T4319] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 174.108967][ T5623] nvme nvme0: creating 2 I/O queues. [ 174.130372][ T5623] nvme nvme0: new ctrl: "testsubsys" [ 174.157291][ T5634] loop0: detected capacity change from 0 to 4096 [ 174.173588][ T22] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 174.285724][ T5635] o2cb: Local heartbeat has not been started. [ 174.296082][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.301371][ T5635] o2cb: Cluster check failed. Fix errors before retrying. [ 174.314727][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.354255][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.362594][ T22] usb 9-1: Invalid ep0 maxpacket: 64 [ 174.368076][ T5635] (syz.9.245,5635,1):user_dlm_register:674 ERROR: status = -22 [ 174.383272][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.392048][ T5635] (syz.9.245,5635,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 174.413507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.432236][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.450005][ T5503] device veth0_vlan entered promiscuous mode [ 174.478139][ T5503] device veth1_vlan entered promiscuous mode [ 174.522029][ T22] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 174.559140][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.574807][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.610857][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.645013][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.675471][ T5503] device veth0_macvtap entered promiscuous mode [ 174.711938][ T5503] device veth1_macvtap entered promiscuous mode [ 174.731668][ T22] usb 9-1: Invalid ep0 maxpacket: 64 [ 174.736329][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.748397][ T22] usb usb9-port1: attempt power cycle [ 174.758727][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.769086][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.786128][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.812458][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.829449][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.840378][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.858043][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.868145][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.880193][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.901012][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.938710][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.952455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.968060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.022512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.050519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.070407][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.095841][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.121779][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.134460][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.155848][ T4321] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 175.171673][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.181862][ T22] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 175.191744][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.199833][ T4321] usb 1-1: Product: syz [ 175.209772][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.220444][ T4321] usb 1-1: Manufacturer: syz [ 175.232372][ T22] usb 9-1: Invalid ep0 maxpacket: 64 [ 175.238072][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.243328][ T4321] usb 1-1: SerialNumber: syz [ 175.258493][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.280592][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.290748][ T5503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.306269][ T5503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.317807][ T4321] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 175.318811][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.348141][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.361479][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.379963][ T5503] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.391241][ T5503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.401825][ T22] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 175.413281][ T5503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.427952][ T5503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.442324][ T22] usb 9-1: Invalid ep0 maxpacket: 64 [ 175.448145][ T22] usb usb9-port1: unable to enumerate USB device [ 175.472698][ T4286] Bluetooth: hci6: command 0x040f tx timeout [ 175.607229][ T5658] loop0: detected capacity change from 0 to 4096 [ 175.640766][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.658190][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.691412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.710117][ T5660] o2cb: Local heartbeat has not been started. [ 175.737389][ T5660] o2cb: Cluster check failed. Fix errors before retrying. [ 175.757083][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.770624][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.780875][ T5660] (syz.9.248,5660,0):user_dlm_register:674 ERROR: status = -22 [ 175.800696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.810304][ T5660] (syz.9.248,5660,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 176.002423][ T4321] usb 1-1: USB disconnect, device number 4 [ 176.008651][ T4321] pvrusb2: Device being rendered inoperable [ 176.171291][ T5667] svc: failed to register lockdv1 RPC service (errno 111). [ 176.429391][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.250'. [ 176.447062][ T5678] netlink: 'syz.6.250': attribute type 2 has an invalid length. [ 176.478733][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.250'. [ 176.698850][ T5687] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 177.048012][ T5700] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 177.175746][ T5705] loop0: detected capacity change from 0 to 4096 [ 177.247945][ T4321] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 177.271306][ T5709] o2cb: Local heartbeat has not been started. [ 177.283497][ T5700] nvme nvme1: creating 2 I/O queues. [ 177.291135][ T5709] o2cb: Cluster check failed. Fix errors before retrying. [ 177.306742][ T5700] nvme nvme1: new ctrl: "testsubsys" [ 177.310695][ T5709] (syz.6.257,5709,1):user_dlm_register:674 ERROR: status = -22 [ 177.334721][ T5709] (syz.6.257,5709,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 177.552136][ T4286] Bluetooth: hci6: command 0x0419 tx timeout [ 177.746762][ T4321] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 177.941249][ T5726] o2cb: Local heartbeat has not been started. [ 177.960853][ T5726] o2cb: Cluster check failed. Fix errors before retrying. [ 177.993916][ T5726] (syz.0.262,5726,0):user_dlm_register:674 ERROR: status = -22 [ 178.019261][ T5726] (syz.0.262,5726,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 178.073105][ T4321] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 178.184140][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.263'. [ 178.230109][ T5731] netlink: 'syz.8.263': attribute type 2 has an invalid length. [ 178.250105][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.263'. [ 178.314344][ T5733] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 178.487469][ T4284] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.494774][ T5716] ceph: No mds server is up or the cluster is laggy [ 178.512313][ T4284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.524979][ T4284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.534521][ T4284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.541881][ T4292] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.550991][ T4284] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 178.558339][ T4284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.583581][ T4360] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 178.675043][ T5741] lo speed is unknown, defaulting to 1000 [ 178.744188][ T4292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.762878][ T4292] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 178.795041][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.848643][ T4292] usb 1-1: Product: syz [ 178.878854][ T4292] usb 1-1: Manufacturer: syz [ 178.897505][ T4292] usb 1-1: SerialNumber: syz [ 178.940324][ T4292] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 178.977286][ T5754] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 179.236671][ T4360] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 179.288186][ T5754] nvme nvme2: creating 2 I/O queues. [ 179.307601][ T5754] nvme nvme2: new ctrl: "testsubsys" [ 179.509065][ T5771] loop0: detected capacity change from 0 to 4096 [ 179.583535][ T5741] chnl_net:caif_netlink_parms(): no params data found [ 179.626798][ T5773] o2cb: Local heartbeat has not been started. [ 179.653524][ T4292] usb 1-1: USB disconnect, device number 5 [ 179.659055][ T5773] o2cb: Cluster check failed. Fix errors before retrying. [ 179.671148][ T4292] pvrusb2: Device being rendered inoperable [ 179.706623][ T5773] (syz.9.273,5773,1):user_dlm_register:674 ERROR: status = -22 [ 179.727707][ T5773] (syz.9.273,5773,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 179.857227][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.883662][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.899532][ T5781] o2cb: Local heartbeat has not been started. [ 179.909412][ T5741] device bridge_slave_0 entered promiscuous mode [ 179.933687][ T5781] o2cb: Cluster check failed. Fix errors before retrying. [ 179.940284][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.967584][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.980281][ T5781] (syz.8.274,5781,1):user_dlm_register:674 ERROR: status = -22 [ 179.994657][ T5741] device bridge_slave_1 entered promiscuous mode [ 180.010909][ T5781] (syz.8.274,5781,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 180.078009][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.132941][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.147442][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.275'. [ 180.222403][ T5785] netlink: 'syz.6.275': attribute type 2 has an invalid length. [ 180.253976][ T5741] team0: Port device team_slave_0 added [ 180.296746][ T5741] team0: Port device team_slave_1 added [ 180.316115][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.275'. [ 180.362499][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.369574][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.413148][ T5791] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 180.505997][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.592826][ T4286] Bluetooth: hci7: command 0x0409 tx timeout [ 180.668276][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.691722][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.780497][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.967975][ T5741] device hsr_slave_0 entered promiscuous mode [ 181.038692][ T5741] device hsr_slave_1 entered promiscuous mode [ 181.063572][ T5811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 181.091985][ T5741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.099641][ T5741] Cannot create hsr debugfs directory [ 181.160274][ T5819] loop0: detected capacity change from 0 to 4096 [ 181.262336][ T5823] o2cb: Local heartbeat has not been started. [ 181.286909][ T5823] o2cb: Cluster check failed. Fix errors before retrying. [ 181.350510][ T4292] nvmet: creating nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 181.365042][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.379295][ T5823] (syz.8.287,5823,0):user_dlm_register:674 ERROR: status = -22 [ 181.401871][ T5823] (syz.8.287,5823,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 181.417002][ T5811] nvme nvme3: creating 2 I/O queues. [ 181.426842][ T5825] o2cb: Local heartbeat has not been started. [ 181.445432][ T5825] o2cb: Cluster check failed. Fix errors before retrying. [ 181.453419][ T5811] nvme nvme3: new ctrl: "testsubsys" [ 181.464793][ T5825] (syz.9.288,5825,0):user_dlm_register:674 ERROR: status = -22 [ 181.473203][ T5825] (syz.9.288,5825,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 181.574465][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.594460][ T4319] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 181.603786][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.611954][ T4319] usb 1-1: Product: syz [ 181.616317][ T4319] usb 1-1: Manufacturer: syz [ 181.621045][ T4319] usb 1-1: SerialNumber: syz [ 181.638370][ T4319] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 181.833921][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.289'. [ 181.913102][ T5829] netlink: 'syz.9.289': attribute type 2 has an invalid length. [ 181.925952][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.289'. [ 182.298839][ T5843] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 182.374331][ T4319] usb 1-1: USB disconnect, device number 6 [ 182.392511][ T4319] pvrusb2: Device being rendered inoperable [ 182.671922][ T4286] Bluetooth: hci7: command 0x041b tx timeout [ 182.959524][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.983497][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.004441][ T5863] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 183.024386][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.042880][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.068106][ T5865] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.091889][ T5865] (syz.6.299,5865,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 183.109621][ T5865] (syz.6.299,5865,0):o2hb_region_dev_store:1852 ERROR: status = -5 [ 183.152162][ T22] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 183.163328][ T5865] o2cb: Local heartbeat has not been started. [ 183.193232][ T5865] o2cb: Cluster check failed. Fix errors before retrying. [ 183.211860][ T5865] (syz.6.299,5865,1):user_dlm_register:674 ERROR: status = -22 [ 183.216193][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 183.233566][ T5865] (syz.6.299,5865,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 183.280024][ T4319] nvmet: creating nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 183.305536][ T5872] netlink: 'syz.0.301': attribute type 2 has an invalid length. [ 183.325620][ T5863] nvme nvme4: creating 2 I/O queues. [ 183.355358][ T5863] nvme nvme4: new ctrl: "testsubsys" [ 183.366768][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 183.367919][ T22] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 183.412444][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.419346][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.457521][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.468293][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.479669][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.492936][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.504103][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.513799][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.520923][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.538910][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.553180][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.571210][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.611046][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.618219][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.668457][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.669666][ T5876] loop0: detected capacity change from 0 to 4096 [ 183.755793][ T5879] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.765573][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.784514][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.824618][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.827233][ T5876] o2cb: Local heartbeat has not been started. [ 183.853449][ T22] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v1.10 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 183.865823][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.882142][ T5879] (syz.6.302,5879,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 183.892835][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.907860][ T5876] o2cb: Cluster check failed. Fix errors before retrying. [ 183.923372][ T5884] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 183.927110][ T5879] (syz.6.302,5879,1):o2hb_region_dev_store:1852 ERROR: status = -5 [ 183.956854][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.974586][ T5876] (syz.6.302,5876,1):user_dlm_register:674 ERROR: status = -22 [ 184.002496][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.026950][ T5876] (syz.6.302,5876,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 184.038466][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.058385][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.093063][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.152497][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.700710][ T5907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'. [ 184.761618][ T4286] Bluetooth: hci7: command 0x040f tx timeout [ 184.801939][ T4278] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 184.825548][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 184.836959][ T5910] netlink: 'syz.0.312': attribute type 2 has an invalid length. [ 184.845327][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 184.948162][ T4360] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.998980][ T5914] loop0: detected capacity change from 0 to 4096 [ 185.030693][ T4278] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 185.046636][ T4278] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.056159][ T22] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 185.085003][ T22] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 185.093980][ T4278] usb 10-1: Product: syz [ 185.098287][ T4278] usb 10-1: Manufacturer: syz [ 185.113954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.121386][ T22] arvo: probe of 0003:1E7D:30D4.0005 failed with error -71 [ 185.132634][ T5918] o2cb: Local heartbeat has not been started. [ 185.141848][ T4278] usb 10-1: SerialNumber: syz [ 185.149084][ T4360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.159027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.169864][ T5918] o2cb: Cluster check failed. Fix errors before retrying. [ 185.190409][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.198550][ T5918] (syz.0.313,5918,0):user_dlm_register:674 ERROR: status = -22 [ 185.210165][ T4360] usb 7-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 185.220440][ T22] usb 9-1: USB disconnect, device number 9 [ 185.226445][ T5918] (syz.0.313,5918,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 185.254034][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.271754][ T4360] usb 7-1: Product: syz [ 185.287811][ T4360] usb 7-1: Manufacturer: syz [ 185.310262][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.312626][ T4360] usb 7-1: SerialNumber: syz [ 185.328811][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.379052][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.383729][ T4360] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 185.399170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.429781][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.457675][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.492562][ T5741] device veth0_vlan entered promiscuous mode [ 185.537432][ T5741] device veth1_vlan entered promiscuous mode [ 185.574441][ T4278] kalmia 10-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 185.616393][ T5920] fido_id[5920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 185.653452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.667744][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.699103][ T5741] device veth0_macvtap entered promiscuous mode [ 185.733011][ T5741] device veth1_macvtap entered promiscuous mode [ 185.780076][ T5926] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 185.800610][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.844661][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.891303][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.920548][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.946401][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.975394][ T4278] kalmia 10-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 186.001940][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.028523][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.068702][ T4359] nvmet: creating nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 186.069938][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.103484][ T4360] usb 7-1: USB disconnect, device number 2 [ 186.120218][ T4360] pvrusb2: Device being rendered inoperable [ 186.122361][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.149670][ T5926] nvme nvme5: creating 2 I/O queues. [ 186.178551][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.183114][ T5926] nvme nvme5: new ctrl: "testsubsys" [ 186.209163][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.244863][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.308438][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.424087][ T4278] kalmia 10-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.9-1, Samsung Kalmia LTE USB dongle, b2:93:26:72:d7:fb [ 186.432926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.465399][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.479119][ T5941] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 186.506670][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.587499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.612648][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.635808][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.659266][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.683721][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.717478][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.761374][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.790056][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.810899][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.829160][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.840054][ T4286] Bluetooth: hci7: command 0x0419 tx timeout [ 186.853795][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.868528][ T5741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.880268][ T5741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.904858][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.918067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.928417][ T4360] usb 10-1: USB disconnect, device number 6 [ 186.949349][ T4360] kalmia 10-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.9-1, Samsung Kalmia LTE USB dongle [ 186.962151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.982327][ T5741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.991060][ T5741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.031654][ T5741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.050605][ T5741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.174877][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 187.246568][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.322'. [ 187.257969][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.276181][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.301773][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.342579][ T5965] netlink: 'syz.6.322': attribute type 2 has an invalid length. [ 187.358068][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.322'. [ 187.358168][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.408178][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.437205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.833644][ T5985] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 188.191874][ T4360] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.288571][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.334'. [ 188.302714][ T5999] netlink: 'syz.6.334': attribute type 2 has an invalid length. [ 188.313122][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.334'. [ 188.384570][ T4360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.404548][ T4360] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 188.416542][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.425387][ T4360] usb 2-1: Product: syz [ 188.431029][ T4360] usb 2-1: Manufacturer: syz [ 188.436305][ T4360] usb 2-1: SerialNumber: syz [ 188.451796][ T5964] NFSD: attempt to initialize umh client tracking in a container ignored. [ 188.460561][ T5964] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 188.473157][ T4360] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 188.498884][ T5964] NFSD: Unable to initialize client recovery tracking! (-22) [ 188.522685][ T5964] NFSD: starting 90-second grace period (net f0000509) [ 188.664934][ T6005] rtc_cmos 00:00: in use; can't configure [ 188.687224][ T6005] i8042 kbd 00:01: in use; can't configure [ 188.698801][ T6005] i8042 aux 00:02: in use; can't configure [ 188.725101][ T6005] serial 00:03: in use; can't configure [ 188.754349][ T6005] serial 00:04: in use; can't configure [ 188.777439][ T6005] serial 00:05: in use; can't configure [ 188.796581][ T6005] serial 00:06: in use; can't configure [ 189.158137][ T4360] usb 2-1: USB disconnect, device number 6 [ 189.166905][ T4360] pvrusb2: Device being rendered inoperable [ 189.587378][ T6033] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 189.622637][ T14] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.764930][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 189.785123][ T6042] netlink: 'syz.1.345': attribute type 2 has an invalid length. [ 189.806815][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 189.909303][ T14] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 190.028736][ T6049] loop0: detected capacity change from 0 to 4096 [ 190.102051][ T6011] NFSD: attempt to initialize umh client tracking in a container ignored. [ 190.116992][ T6011] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 190.128042][ T6053] o2cb: Local heartbeat has not been started. [ 190.149752][ T6053] o2cb: Cluster check failed. Fix errors before retrying. [ 190.150061][ T6011] NFSD: Unable to initialize client recovery tracking! (-22) [ 190.181709][ T6011] NFSD: starting 90-second grace period (net f0000509) [ 190.201684][ T6053] (syz.6.347,6053,1):user_dlm_register:674 ERROR: status = -22 [ 190.209304][ T6053] (syz.6.347,6053,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 190.341418][ T6055] svc: failed to register nfsdv3 RPC service (errno 111). [ 190.370873][ T6055] svc: failed to register nfsaclv3 RPC service (errno 111). [ 190.404781][ T6034] ceph: No mds server is up or the cluster is laggy [ 190.422720][ T4320] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 191.025176][ T6076] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 191.117224][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.356'. [ 191.169768][ T6080] netlink: 'syz.6.356': attribute type 2 has an invalid length. [ 191.199974][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.356'. [ 191.312048][ T4319] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 191.494045][ T6093] comedi comedi3: pcl816: I/O port conflict (0x300,16) [ 191.505848][ T4319] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.544451][ T4319] usb 9-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00 [ 191.582959][ T4319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.618800][ T4319] usb 9-1: Product: syz [ 191.642790][ T4319] usb 9-1: Manufacturer: syz [ 191.647440][ T4319] usb 9-1: SerialNumber: syz [ 191.691393][ T4319] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 191.806513][ T6106] loop0: detected capacity change from 0 to 4096 [ 191.901089][ T6108] o2cb: Local heartbeat has not been started. [ 191.920643][ T6108] o2cb: Cluster check failed. Fix errors before retrying. [ 191.961923][ T6108] (syz.0.367,6108,1):user_dlm_register:674 ERROR: status = -22 [ 191.988519][ T6108] (syz.0.367,6108,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 192.050541][ T6114] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 192.317246][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.371'. [ 192.340604][ T6122] netlink: 'syz.6.371': attribute type 2 has an invalid length. [ 192.378939][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.371'. [ 192.401392][ T4319] usb 9-1: USB disconnect, device number 10 [ 192.422741][ T4319] pvrusb2: Device being rendered inoperable [ 192.821670][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 192.844140][ T6139] netlink: 'syz.9.375': attribute type 1 has an invalid length. [ 192.874054][ T6139] netlink: 'syz.9.375': attribute type 2 has an invalid length. [ 192.906240][ T6141] netlink: 'syz.9.375': attribute type 1 has an invalid length. [ 192.948853][ T6141] netlink: 'syz.9.375': attribute type 2 has an invalid length. [ 192.975277][ T6136] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.997568][ T6139] netlink: 'syz.9.375': attribute type 1 has an invalid length. [ 193.024897][ T4320] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 193.025449][ T6139] netlink: 'syz.9.375': attribute type 2 has an invalid length. [ 193.060381][ T4320] usb 2-1: New USB device found, idVendor=04b4, idProduct=2102, bcdDevice= 0.00 [ 193.084302][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.104443][ T6141] netlink: 'syz.9.375': attribute type 1 has an invalid length. [ 193.125170][ T6128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.167307][ T4320] dvb-usb: found a 'DVBWorld DVB-S 2102 USB2.0' in cold state, will try to load a firmware [ 193.190565][ T4320] usb 2-1: Direct firmware load for dvb-usb-dw2102.fw failed with error -2 [ 193.208663][ T4320] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dw2102.fw [ 193.499695][ T6155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 193.538750][ T6157] Error parsing options; rc = [-22] [ 193.621706][ T4292] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 193.647386][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.383'. [ 193.708379][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.383'. [ 193.745719][ T6163] bond0: (slave bond_slave_0): Releasing backup interface [ 193.826385][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.846630][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 193.875176][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 193.887056][ T4292] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 193.896640][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.907062][ T4292] usb 1-1: config 0 descriptor?? [ 193.913672][ T6151] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 193.937238][ T6151] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 194.035463][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.046229][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.147533][ T4321] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 194.347855][ T4321] usb 7-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 194.366335][ T4292] gt683r_led 0003:1770:FF00.0006: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 194.381194][ T4321] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 194.411679][ T4321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.449119][ T6169] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 194.480466][ T4321] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 194.610180][ T6193] bond0: (slave bond_slave_1): Releasing backup interface [ 194.788429][ T6198] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 194.871897][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.396'. [ 194.915480][ T6202] validate_nla: 14 callbacks suppressed [ 194.915497][ T6202] netlink: 'syz.8.396': attribute type 2 has an invalid length. [ 194.984123][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.396'. [ 195.060878][ T6205] svc: failed to register lockdv1 RPC service (errno 111). [ 195.073662][ T4321] usb 1-1: USB disconnect, device number 7 [ 195.099541][ T4360] gt683r_led 0003:1770:FF00.0006: failed to send set report request: -19 [ 195.531220][ T4360] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 195.695833][ T4340] usb 7-1: USB disconnect, device number 3 [ 195.741740][ T4360] usb 9-1: Invalid ep0 maxpacket: 64 [ 195.884979][ T6237] rdma_rxe: rxe_register_device failed with error -23 [ 195.901855][ T4360] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 195.938981][ T6237] rdma_rxe: failed to add lo [ 196.040524][ T6240] svc: failed to register nfsdv3 RPC service (errno 111). [ 196.050054][ T6240] svc: failed to register nfsaclv3 RPC service (errno 111). [ 196.111975][ T4360] usb 9-1: Invalid ep0 maxpacket: 64 [ 196.118725][ T4360] usb usb9-port1: attempt power cycle [ 196.135825][ T6242] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 196.194038][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 196.232362][ T6245] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 196.263099][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 196.576568][ T6257] svc: failed to register lockdv1 RPC service (errno 111). [ 196.577990][ T4360] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 196.632423][ T4360] usb 9-1: Invalid ep0 maxpacket: 64 [ 196.639130][ T6260] ubi0: attaching mtd1 [ 196.643958][ T4340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 196.652520][ T6263] nfs4: Bad value for 'source' [ 196.761027][ T6260] ubi0: scanning is finished [ 196.791941][ T6260] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 196.801979][ T4360] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 196.850907][ T4340] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 196.853584][ T4360] usb 9-1: Invalid ep0 maxpacket: 64 [ 196.888757][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.889689][ T4360] usb usb9-port1: unable to enumerate USB device [ 196.926816][ T4340] usb 1-1: Product: syz [ 196.945684][ T4340] usb 1-1: Manufacturer: syz [ 196.950337][ T4340] usb 1-1: SerialNumber: syz [ 197.024398][ T6260] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 197.138755][ T4340] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 197.233256][ T4292] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 197.425022][ T4292] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.446527][ T4292] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 197.471875][ T4292] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 197.491710][ T4292] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 197.502129][ T4292] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.515846][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.553044][ T4292] usb 10-1: config 0 descriptor?? [ 197.562691][ T6268] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 197.569987][ T6268] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 197.587787][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.664531][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.028465][ T4292] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.9-1/input0 [ 198.462540][ T6305] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 198.502985][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.423'. [ 198.529327][ T6308] netlink: 'syz.8.423': attribute type 2 has an invalid length. [ 198.537705][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.423'. [ 198.729159][ T26] usb 10-1: USB disconnect, device number 7 [ 198.758472][ T4360] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 199.281921][ T4340] usb 1-1: device descriptor read/64, error -71 [ 199.393020][ T6342] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 199.504130][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.435'. [ 199.530123][ T6345] netlink: 'syz.9.435': attribute type 2 has an invalid length. [ 199.551647][ T4340] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 199.592719][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.435'. [ 199.762354][ T4340] usb 1-1: device firmware changed [ 199.823618][ T4340] usb 1-1: USB disconnect, device number 8 [ 200.001823][ T4340] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.193649][ T4340] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 200.209685][ T4340] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 200.233768][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.253291][ T6315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.276449][ T4340] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 200.771960][ T4340] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 200.973513][ T4340] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.991507][ T4340] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.015879][ T4340] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 201.031484][ T4340] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 201.048399][ T4340] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.063740][ T4340] usb 10-1: config 0 descriptor?? [ 201.074779][ T6378] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 201.089718][ T6378] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 201.141875][ T6351] NFSD: attempt to initialize umh client tracking in a container ignored. [ 201.155627][ T6351] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 201.171171][ T6351] NFSD: Unable to initialize client recovery tracking! (-22) [ 201.181422][ T6351] NFSD: starting 90-second grace period (net f0000509) [ 201.496439][ T4319] usb 1-1: USB disconnect, device number 9 [ 201.515973][ T4340] gt683r_led 0003:1770:FF00.0008: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.9-1/input0 [ 201.558749][ T6405] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 201.776173][ T4321] usb 10-1: USB disconnect, device number 8 [ 201.808076][ T26] gt683r_led 0003:1770:FF00.0008: failed to send set report request: -19 [ 202.022831][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.449'. [ 202.064375][ T6419] netlink: 'syz.8.449': attribute type 2 has an invalid length. [ 202.105236][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.8.449'. [ 202.671076][ T6444] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 202.777125][ T26] nvmet: creating nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:448ee5b5-c8a5-4b5c-8662-b6ae172e7484. [ 202.816030][ T6444] nvme nvme6: creating 2 I/O queues. [ 202.834871][ T6444] nvme nvme6: new ctrl: "testsubsys" [ 202.870141][ T6450] comedi comedi3: pcl816: I/O port conflict (0x300,16) [ 203.017820][ T6453] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 203.332396][ T6463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.701786][ T6435] NFSD: attempt to initialize umh client tracking in a container ignored. [ 203.710560][ T6435] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 203.741632][ T6435] NFSD: Unable to initialize client recovery tracking! (-22) [ 203.749255][ T6435] NFSD: starting 90-second grace period (net f00005b8) [ 203.977867][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.9.461'. [ 203.988443][ T6485] netlink: 'syz.9.461': attribute type 2 has an invalid length. [ 203.996698][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.9.461'. [ 204.055903][ T6487] loop0: detected capacity change from 0 to 4096 [ 204.183600][ T6493] o2cb: Local heartbeat has not been started. [ 204.196541][ T6493] o2cb: Cluster check failed. Fix errors before retrying. [ 204.228457][ T6493] (syz.0.462,6493,0):user_dlm_register:674 ERROR: status = -22 [ 204.253053][ T6493] (syz.0.462,6493,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain0" [ 205.340132][ T6526] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 206.381871][ T6519] NFSD: attempt to initialize umh client tracking in a container ignored. [ 206.391112][ T6519] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 206.400339][ T6519] NFSD: Unable to initialize client recovery tracking! (-22) [ 206.409046][ T6519] NFSD: starting 90-second grace period (net f00005b8) [ 206.744829][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.9.473'. [ 206.765425][ T6570] netlink: 'syz.9.473': attribute type 2 has an invalid length. [ 206.779800][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.9.473'. [ 207.271833][ T4319] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 207.491934][ T4319] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 207.510395][ T4319] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.520767][ T4319] usb 10-1: Product: syz [ 207.534317][ T4319] usb 10-1: Manufacturer: syz [ 207.540044][ T4319] usb 10-1: SerialNumber: syz [ 207.701953][ T4319] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 207.741771][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.937986][ T4319] usb 10-1: driver API: 1.9.9 2016-02-15 [1-1] [ 207.954411][ T4319] usb 10-1: firmware API: 1.9.6 2012-07-07 [ 207.960620][ T26] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 207.984486][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 208.000948][ T26] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.023542][ T26] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 1.00 [ 208.040796][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 208.050046][ T26] usb 1-1: Product: syz [ 208.063879][ T26] usb 1-1: Manufacturer: syz [ 208.087514][ T6596] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.745784][ T4340] usb 10-1: USB disconnect, device number 9 [ 208.754039][ C0] device 10-1 is not registered [ 208.827805][ T4321] usb 1-1: USB disconnect, device number 10 [ 209.071775][ T4319] usb 10-1: firmware upload failed (-110). [ 209.349991][ T6643] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 209.395767][ T2313] pvrusb2: request_firmware fatal error with code=-110 [ 209.403975][ T4907] Freezing user space processes [ 209.419758][ T2313] pvrusb2: Failure uploading firmware1 [ 209.429908][ T2313] pvrusb2: Device initialization was not successful. [ 209.450984][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 209.461762][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 209.479438][ T954] pvrusb2: Device being rendered inoperable [ 229.418244][ T4907] Freezing of tasks failed after 20.008 seconds (6 tasks refusing to freeze, wq_busy=0): [ 229.428516][ T4907] task:udevd state:D stack:24528 pid:4512 ppid:3639 flags:0x00004006 [ 229.438005][ T4907] Call Trace: [ 229.441318][ T4907] [ 229.444322][ T4907] __schedule+0x107f/0x4030 [ 229.448893][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 229.454920][ T4907] ? __mutex_trylock_common+0x86/0x260 [ 229.460445][ T4907] ? trace_raw_output_contention_end+0xd0/0xd0 [ 229.466752][ T4907] schedule+0xb9/0x180 [ 229.470873][ T4907] schedule_preempt_disabled+0xf/0x20 [ 229.477262][ T4907] __mutex_lock+0x548/0xae0 [ 229.481886][ T4907] ? __mutex_lock+0x3ba/0xae0 [ 229.486604][ T4907] ? uevent_show+0x16e/0x320 [ 229.491215][ T4907] ? mutex_lock_nested+0x10/0x10 [ 229.496252][ T4907] uevent_show+0x16e/0x320 [ 229.500693][ T4907] dev_attr_show+0x50/0xb0 [ 229.505242][ T4907] sysfs_kf_seq_show+0x349/0x4b0 [ 229.510234][ T4907] ? device_get_ownership+0xa0/0xa0 [ 229.515526][ T4907] seq_read_iter+0x460/0xc50 [ 229.520197][ T4907] vfs_read+0x471/0x960 [ 229.524478][ T4907] ? kernel_read+0x1e0/0x1e0 [ 229.529110][ T4907] ? __fdget_pos+0x101/0x360 [ 229.533904][ T4907] ? kasan_check_range+0x1b4/0x290 [ 229.539060][ T4907] ? __fdget_pos+0x2b5/0x360 [ 229.543761][ T4907] ksys_read+0x14d/0x260 [ 229.548052][ T4907] ? vfs_write+0x9a0/0x9a0 [ 229.552624][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 229.557858][ T4907] do_syscall_64+0x4c/0xa0 [ 229.562364][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 229.567092][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 229.571859][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.578641][ T4907] RIP: 0033:0x7fc5b46a7407 [ 229.583399][ T4907] RSP: 002b:00007fff097b2900 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 229.591888][ T4907] RAX: ffffffffffffffda RBX: 00007fc5b4d6c880 RCX: 00007fc5b46a7407 [ 229.599883][ T4907] RDX: 0000000000001000 RSI: 000056421c14aa00 RDI: 0000000000000008 [ 229.607904][ T4907] RBP: 00007fc5b47efff0 R08: 0000000000000000 R09: 0000000000000000 [ 229.615926][ T4907] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 229.623982][ T4907] R13: 00007fc5b47efea0 R14: 0000000000000000 R15: 000056421c13f4b0 [ 229.632046][ T4907] [ 229.635108][ T4907] task:syz-executor state:S stack:22384 pid:4518 ppid:1 flags:0x00004002 [ 229.644392][ T4907] Call Trace: [ 229.647698][ T4907] [ 229.650656][ T4907] __schedule+0x107f/0x4030 [ 229.655239][ T4907] ? do_wait+0x6cb/0xb80 [ 229.659538][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 229.665541][ T4907] ? __lock_acquire+0x7c40/0x7c40 [ 229.670637][ T4907] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 229.676630][ T4907] ? _raw_spin_unlock+0x40/0x40 [ 229.681538][ T4907] schedule+0xb9/0x180 [ 229.685687][ T4907] do_wait+0x7a5/0xb80 [ 229.689815][ T4907] kernel_wait4+0x22b/0x2b0 [ 229.694411][ T4907] ? __ia32_sys_waitid+0xc0/0xc0 [ 229.699409][ T4907] ? kernel_waitid+0x3d0/0x3d0 [ 229.704274][ T4907] ? zap_pid_ns_processes+0x13a/0x690 [ 229.709698][ T4907] zap_pid_ns_processes+0x3a0/0x690 [ 229.714990][ T4907] ? zap_pid_ns_processes+0x13a/0x690 [ 229.720415][ T4907] ? lock_chain_count+0x20/0x20 [ 229.725357][ T4907] ? put_pid_ns+0x130/0x130 [ 229.729912][ T4907] ? _raw_write_unlock_irq+0x1f/0x40 [ 229.735285][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 229.740519][ T4907] do_exit+0x20a2/0x2570 [ 229.744865][ T4907] ? put_task_struct+0x80/0x80 [ 229.749723][ T4907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 229.755800][ T4907] ? lock_chain_count+0x20/0x20 [ 229.760697][ T4907] ? _raw_spin_lock_irq+0xb7/0xf0 [ 229.765784][ T4907] do_group_exit+0x229/0x2e0 [ 229.770406][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 229.775662][ T4907] get_signal+0x1259/0x1340 [ 229.780214][ T4907] arch_do_signal_or_restart+0xc4/0x1310 [ 229.785905][ T4907] ? __ia32_sys_waitid+0xc0/0xc0 [ 229.790888][ T4907] ? kernel_waitid+0x3d0/0x3d0 [ 229.795724][ T4907] ? __might_sleep+0xd0/0xd0 [ 229.800337][ T4907] ? get_sigframe_size+0x10/0x10 [ 229.805332][ T4907] ? __x64_sys_wait4+0x1b4/0x230 [ 229.810344][ T4907] ? exit_to_user_mode_loop+0x3b/0x110 [ 229.815891][ T4907] exit_to_user_mode_loop+0x70/0x110 [ 229.821218][ T4907] exit_to_user_mode_prepare+0xee/0x180 [ 229.826849][ T4907] syscall_exit_to_user_mode+0x16/0x40 [ 229.832398][ T4907] do_syscall_64+0x58/0xa0 [ 229.836850][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 229.841535][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 229.846336][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.852312][ T4907] RIP: 0033:0x7feb8715e98e [ 229.856786][ T4907] RSP: 002b:00007fff51f9cd28 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 229.865284][ T4907] RAX: fffffffffffffe00 RBX: 000055557b4df500 RCX: 00007feb8715e98e [ 229.873337][ T4907] RDX: 0000000040000000 RSI: 00007fff51f9cdcc RDI: ffffffffffffffff [ 229.881340][ T4907] RBP: 00007fff51f9cdcc R08: 0000000000000000 R09: 0000000000000000 [ 229.889396][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 229.897456][ T4907] R13: 000055557b4f2a00 R14: 0000000000027d64 R15: 00007fff51f9ce20 [ 229.905524][ T4907] [ 229.908612][ T4907] task:syz-executor state:S stack:22928 pid:4527 ppid:1 flags:0x00004002 [ 229.917880][ T4907] Call Trace: [ 229.921161][ T4907] [ 229.924181][ T4907] __schedule+0x107f/0x4030 [ 229.928758][ T4907] ? do_wait+0x6cb/0xb80 [ 229.933119][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 229.939059][ T4907] ? __lock_acquire+0x7c40/0x7c40 [ 229.944170][ T4907] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 229.950110][ T4907] ? _raw_spin_unlock+0x40/0x40 [ 229.955026][ T4907] schedule+0xb9/0x180 [ 229.959122][ T4907] do_wait+0x7a5/0xb80 [ 229.963281][ T4907] kernel_wait4+0x22b/0x2b0 [ 229.967872][ T4907] ? __ia32_sys_waitid+0xc0/0xc0 [ 229.972945][ T4907] ? kernel_waitid+0x3d0/0x3d0 [ 229.977786][ T4907] ? zap_pid_ns_processes+0x13a/0x690 [ 229.983252][ T4907] zap_pid_ns_processes+0x3a0/0x690 [ 229.988521][ T4907] ? zap_pid_ns_processes+0x13a/0x690 [ 229.993986][ T4907] ? put_pid_ns+0x130/0x130 [ 229.998531][ T4907] ? preempt_schedule_thunk+0x16/0x18 [ 230.003985][ T4907] do_exit+0x20a2/0x2570 [ 230.008292][ T4907] ? put_task_struct+0x80/0x80 [ 230.013153][ T4907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.019185][ T4907] ? lock_chain_count+0x20/0x20 [ 230.024105][ T4907] ? _raw_spin_lock_irq+0xb7/0xf0 [ 230.029184][ T4907] do_group_exit+0x229/0x2e0 [ 230.033846][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 230.039106][ T4907] get_signal+0x1259/0x1340 [ 230.043730][ T4907] arch_do_signal_or_restart+0xc4/0x1310 [ 230.049408][ T4907] ? __ia32_sys_waitid+0xc0/0xc0 [ 230.054435][ T4907] ? kernel_waitid+0x3d0/0x3d0 [ 230.059249][ T4907] ? __might_sleep+0xd0/0xd0 [ 230.063916][ T4907] ? get_sigframe_size+0x10/0x10 [ 230.068891][ T4907] ? __x64_sys_wait4+0x1b4/0x230 [ 230.073914][ T4907] ? exit_to_user_mode_loop+0x3b/0x110 [ 230.079431][ T4907] exit_to_user_mode_loop+0x70/0x110 [ 230.084784][ T4907] exit_to_user_mode_prepare+0xee/0x180 [ 230.090387][ T4907] syscall_exit_to_user_mode+0x16/0x40 [ 230.095935][ T4907] do_syscall_64+0x58/0xa0 [ 230.100390][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.105140][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.109868][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.115848][ T4907] RIP: 0033:0x7f82d2f5e98e [ 230.120301][ T4907] RSP: 002b:00007ffc1aa1ed28 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 230.128776][ T4907] RAX: fffffffffffffe00 RBX: 000055557a109500 RCX: 00007f82d2f5e98e [ 230.136820][ T4907] RDX: 0000000040000000 RSI: 00007ffc1aa1edcc RDI: ffffffffffffffff [ 230.144870][ T4907] RBP: 00007ffc1aa1edcc R08: 0000000000000000 R09: 0000000000000000 [ 230.152932][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 230.160951][ T4907] R13: 000055557a11ca00 R14: 00000000000244a8 R15: 00007ffc1aa1ee20 [ 230.169363][ T4907] [ 230.172502][ T4907] task:syz.1.413 state:D stack:27696 pid:6255 ppid:5741 flags:0x00004004 [ 230.181799][ T4907] Call Trace: [ 230.185102][ T4907] [ 230.188064][ T4907] __schedule+0x107f/0x4030 [ 230.192656][ T4907] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 230.198582][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 230.203858][ T4907] ? _raw_spin_unlock+0x40/0x40 [ 230.208745][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 230.214715][ T4907] ? kobject_put+0x416/0x450 [ 230.219352][ T4907] ? prepare_to_wait_event+0x430/0x470 [ 230.224888][ T4907] schedule+0xb9/0x180 [ 230.228986][ T4907] wait_for_device_probe+0x137/0x1e0 [ 230.234339][ T4907] ? device_block_probing+0x20/0x20 [ 230.239577][ T4907] ? blkdev_get_by_path+0x26a/0x3e0 [ 230.244834][ T4907] ? wake_bit_function+0x200/0x200 [ 230.249976][ T4907] ? bd_finish_claiming+0x2c0/0x2c0 [ 230.255244][ T4907] block2mtd_setup2+0x3d9/0xf30 [ 230.260145][ T4907] ? trace_raw_output_contention_end+0xd0/0xd0 [ 230.266355][ T4907] ? block2mtd_setup+0xd0/0xd0 [ 230.271121][ T4907] ? rcu_is_watching+0x11/0xa0 [ 230.275957][ T4907] ? mutex_lock_nested+0x10/0x10 [ 230.280974][ T4907] block2mtd_setup+0x23/0xd0 [ 230.285647][ T4907] param_attr_store+0x20a/0x300 [ 230.290547][ T4907] ? param_attr_show+0x170/0x170 [ 230.295567][ T4907] ? sysfs_kf_read+0x350/0x350 [ 230.300380][ T4907] module_attr_store+0x5b/0x80 [ 230.305245][ T4907] kernfs_fop_write_iter+0x3a0/0x520 [ 230.310578][ T4907] vfs_write+0x482/0x9a0 [ 230.315091][ T4907] ? file_end_write+0x250/0x250 [ 230.319999][ T4907] ? __fget_files+0x3fc/0x460 [ 230.324780][ T4907] ? __fdget_pos+0x2ae/0x360 [ 230.329408][ T4907] ? ksys_write+0x70/0x260 [ 230.333920][ T4907] ksys_write+0x14d/0x260 [ 230.338311][ T4907] ? __ia32_sys_read+0x80/0x80 [ 230.343168][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 230.348412][ T4907] do_syscall_64+0x4c/0xa0 [ 230.352896][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.357610][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.362373][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.368311][ T4907] RIP: 0033:0x7f622899e159 [ 230.372787][ T4907] RSP: 002b:00007f6229871028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.381255][ T4907] RAX: ffffffffffffffda RBX: 00007f6228c25fa0 RCX: 00007f622899e159 [ 230.389282][ T4907] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000003 [ 230.397332][ T4907] RBP: 00007f6228a3506b R08: 0000000000000000 R09: 0000000000000000 [ 230.405380][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.413420][ T4907] R13: 00007f6228c26038 R14: 00007f6228c25fa0 R15: 00007ffdec3a8898 [ 230.421432][ T4907] [ 230.424498][ T4907] task:syz.6.438 state:D stack:27696 pid:6354 ppid:5503 flags:0x00004004 [ 230.433787][ T4907] Call Trace: [ 230.437099][ T4907] [ 230.440071][ T4907] __schedule+0x107f/0x4030 [ 230.444696][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 230.450623][ T4907] ? __mutex_trylock_common+0x86/0x260 [ 230.456149][ T4907] ? trace_raw_output_contention_end+0xd0/0xd0 [ 230.462378][ T4907] schedule+0xb9/0x180 [ 230.466486][ T4907] schedule_preempt_disabled+0xf/0x20 [ 230.471925][ T4907] __mutex_lock+0x548/0xae0 [ 230.476470][ T4907] ? __mutex_lock+0x3ba/0xae0 [ 230.481233][ T4907] ? param_attr_store+0xcb/0x300 [ 230.486247][ T4907] ? mutex_lock_nested+0x10/0x10 [ 230.491213][ T4907] ? kernfs_fop_write_iter+0x1d8/0x520 [ 230.496740][ T4907] ? read_lock_is_recursive+0x10/0x10 [ 230.502219][ T4907] param_attr_store+0xcb/0x300 [ 230.507042][ T4907] ? param_attr_show+0x170/0x170 [ 230.512074][ T4907] ? sysfs_kf_read+0x350/0x350 [ 230.516942][ T4907] module_attr_store+0x5b/0x80 [ 230.521787][ T4907] kernfs_fop_write_iter+0x3a0/0x520 [ 230.527126][ T4907] vfs_write+0x482/0x9a0 [ 230.531428][ T4907] ? file_end_write+0x250/0x250 [ 230.536347][ T4907] ? __fget_files+0x3fc/0x460 [ 230.541067][ T4907] ? __fdget_pos+0x2ae/0x360 [ 230.545816][ T4907] ? ksys_write+0x70/0x260 [ 230.550289][ T4907] ksys_write+0x14d/0x260 [ 230.554707][ T4907] ? __ia32_sys_read+0x80/0x80 [ 230.559528][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 230.564812][ T4907] do_syscall_64+0x4c/0xa0 [ 230.569235][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.573966][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.578688][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.584669][ T4907] RIP: 0033:0x7fc95e79e159 [ 230.589122][ T4907] RSP: 002b:00007fc95f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.597623][ T4907] RAX: ffffffffffffffda RBX: 00007fc95ea25fa0 RCX: 00007fc95e79e159 [ 230.605676][ T4907] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 230.613721][ T4907] RBP: 00007fc95e83506b R08: 0000000000000000 R09: 0000000000000000 [ 230.621755][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.629764][ T4907] R13: 00007fc95ea26038 R14: 00007fc95ea25fa0 R15: 00007ffed7805e88 [ 230.637797][ T4907] [ 230.640833][ T4907] task:syz.8.460 state:D stack:27696 pid:6467 ppid:4531 flags:0x00004004 [ 230.650105][ T4907] Call Trace: [ 230.653472][ T4907] [ 230.656453][ T4907] __schedule+0x107f/0x4030 [ 230.661061][ T4907] ? release_firmware_map_entry+0x187/0x187 [ 230.667025][ T4907] ? __mutex_trylock_common+0x86/0x260 [ 230.672674][ T4907] ? trace_raw_output_contention_end+0xd0/0xd0 [ 230.678865][ T4907] schedule+0xb9/0x180 [ 230.682989][ T4907] schedule_preempt_disabled+0xf/0x20 [ 230.688410][ T4907] __mutex_lock+0x548/0xae0 [ 230.692999][ T4907] ? __mutex_lock+0x3ba/0xae0 [ 230.697729][ T4907] ? param_attr_store+0xcb/0x300 [ 230.702769][ T4907] ? mutex_lock_nested+0x10/0x10 [ 230.707739][ T4907] ? kernfs_fop_write_iter+0x1d8/0x520 [ 230.713257][ T4907] ? read_lock_is_recursive+0x10/0x10 [ 230.718669][ T4907] param_attr_store+0xcb/0x300 [ 230.723523][ T4907] ? param_attr_show+0x170/0x170 [ 230.728501][ T4907] ? sysfs_kf_read+0x350/0x350 [ 230.733359][ T4907] module_attr_store+0x5b/0x80 [ 230.738154][ T4907] kernfs_fop_write_iter+0x3a0/0x520 [ 230.743499][ T4907] vfs_write+0x482/0x9a0 [ 230.747791][ T4907] ? file_end_write+0x250/0x250 [ 230.752721][ T4907] ? __fget_files+0x3fc/0x460 [ 230.757457][ T4907] ? __fdget_pos+0x2ae/0x360 [ 230.762125][ T4907] ? ksys_write+0x70/0x260 [ 230.766581][ T4907] ksys_write+0x14d/0x260 [ 230.770947][ T4907] ? __ia32_sys_read+0x80/0x80 [ 230.775805][ T4907] ? lockdep_hardirqs_on+0x94/0x140 [ 230.781076][ T4907] do_syscall_64+0x4c/0xa0 [ 230.785526][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.790205][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 230.794940][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.800877][ T4907] RIP: 0033:0x7fbfab19e159 [ 230.805385][ T4907] RSP: 002b:00007fbfac015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.813924][ T4907] RAX: ffffffffffffffda RBX: 00007fbfab425fa0 RCX: 00007fbfab19e159 [ 230.821973][ T4907] RDX: 0000000000000011 RSI: 00002000000000c0 RDI: 0000000000000003 [ 230.829977][ T4907] RBP: 00007fbfab23506b R08: 0000000000000000 R09: 0000000000000000 [ 230.838019][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.846050][ T4907] R13: 00007fbfab426038 R14: 00007fbfab425fa0 R15: 00007ffe41b391a8 [ 230.854114][ T4907] [ 230.858340][ T4907] OOM killer enabled. [ 230.867388][ T4907] Restarting tasks ... done. [ 231.350324][ T6653] nfs4: Bad value for 'source' [ 231.942903][ T4286] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 231.952280][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 231.958849][ T4286] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 231.966657][ T4286] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 231.974446][ T4907] random: crng reseeded on system resumption [ 231.981509][ T4907] PM: suspend exit [ 231.985440][ T4286] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 231.995978][ T4286] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 232.003329][ T4286] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 232.031164][ T6658] lo speed is unknown, defaulting to 1000 [ 232.491752][ T6649] NFSD: attempt to initialize umh client tracking in a container ignored. [ 232.500478][ T6649] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 232.510158][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.511954][ T4282] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 232.526338][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.535849][ T49] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 232.544334][ T49] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 232.555547][ T49] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 232.564046][ T49] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 232.573001][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.573075][ T4282] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 232.587744][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.587948][ T6649] NFSD: Unable to initialize client recovery tracking! (-22) [ 232.604194][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.611456][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.633133][ T6649] NFSD: starting 90-second grace period (net f00005b8) [ 232.762265][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.772264][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.780018][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.790671][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.798833][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.812446][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.859695][ T4286] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 232.868574][ T4286] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 232.877024][ T4286] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 232.896473][ T4286] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 232.914639][ T4286] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 232.923137][ T4286] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 233.001265][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.063472][ T6662] lo speed is unknown, defaulting to 1000 [ 233.283321][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.535946][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.575936][ T6668] lo speed is unknown, defaulting to 1000 [ 233.732711][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.783952][ T6661] lo speed is unknown, defaulting to 1000 [ 234.004524][ T6658] chnl_net:caif_netlink_parms(): no params data found [ 234.032616][ T4286] Bluetooth: hci8: command 0x0409 tx timeout [ 234.119953][ T6662] chnl_net:caif_netlink_parms(): no params data found [ 234.187858][ T9] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.227734][ T6666] lo speed is unknown, defaulting to 1000 [ 234.466083][ T6668] chnl_net:caif_netlink_parms(): no params data found [ 234.525071][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.548498][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.567047][ T6658] device bridge_slave_0 entered promiscuous mode [ 234.624816][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.632706][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.640998][ T6662] device bridge_slave_0 entered promiscuous mode [ 234.651959][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.659176][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.671979][ T4282] Bluetooth: hci9: command 0x0409 tx timeout [ 234.682085][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 234.690009][ T6658] device bridge_slave_1 entered promiscuous mode [ 234.717143][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.731873][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.740133][ T6662] device bridge_slave_1 entered promiscuous mode [ 234.780139][ T6662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.825819][ T6662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.835143][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 234.953802][ T6658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.993155][ T4282] Bluetooth: hci10: command 0x0409 tx timeout [ 235.006297][ T6662] team0: Port device team_slave_0 added [ 235.037087][ T6658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.048455][ T6662] team0: Port device team_slave_1 added [ 235.124884][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.139510][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.162892][ T6668] device bridge_slave_0 entered promiscuous mode [ 235.237280][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 235.271538][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.278739][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.294775][ T6668] device bridge_slave_1 entered promiscuous mode [ 235.306664][ T6658] team0: Port device team_slave_0 added [ 235.321268][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.328306][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.354515][ T6662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.397626][ T6666] chnl_net:caif_netlink_parms(): no params data found [ 235.432510][ T6658] team0: Port device team_slave_1 added [ 235.438769][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.451738][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.478382][ T6662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.579803][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.635505][ T6658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.643479][ T6658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.670519][ T6658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.695390][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.729505][ T6658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.737093][ T6658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.774449][ T6658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.862046][ T6662] device hsr_slave_0 entered promiscuous mode [ 235.868862][ T6662] device hsr_slave_1 entered promiscuous mode [ 235.876210][ T6662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.884198][ T6662] Cannot create hsr debugfs directory [ 235.915100][ T6668] team0: Port device team_slave_0 added [ 235.983490][ T6668] team0: Port device team_slave_1 added [ 235.989384][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.017894][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.033891][ T6661] device bridge_slave_0 entered promiscuous mode [ 236.111928][ T4282] Bluetooth: hci8: command 0x041b tx timeout [ 236.131375][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.149928][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.159251][ T6661] device bridge_slave_1 entered promiscuous mode [ 236.207066][ T6658] device hsr_slave_0 entered promiscuous mode [ 236.214615][ T6658] device hsr_slave_1 entered promiscuous mode [ 236.221281][ T6658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.228927][ T6658] Cannot create hsr debugfs directory [ 236.255412][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.266198][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.291973][ T6666] device bridge_slave_0 entered promiscuous mode [ 236.302642][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.309636][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.356148][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.369162][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.377136][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.405490][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.430246][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.495327][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.502632][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.510941][ T6666] device bridge_slave_1 entered promiscuous mode [ 236.564389][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.751710][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 236.757908][ T4286] Bluetooth: hci9: command 0x041b tx timeout [ 236.788313][ T6668] device hsr_slave_0 entered promiscuous mode [ 236.802414][ T6668] device hsr_slave_1 entered promiscuous mode [ 236.809139][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.817175][ T6668] Cannot create hsr debugfs directory [ 236.863802][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.886854][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.906314][ T6661] team0: Port device team_slave_0 added [ 236.913209][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 236.939296][ T9] device hsr_slave_0 left promiscuous mode [ 236.945681][ T9] device hsr_slave_1 left promiscuous mode [ 236.953150][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.960604][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.968709][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.976279][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.985630][ T9] device bridge_slave_1 left promiscuous mode [ 236.991937][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.001345][ T9] device bridge_slave_0 left promiscuous mode [ 237.007965][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.033673][ T9] device veth1_macvtap left promiscuous mode [ 237.039709][ T9] device veth0_macvtap left promiscuous mode [ 237.045916][ T9] device veth1_vlan left promiscuous mode [ 237.051925][ T9] device veth0_vlan left promiscuous mode [ 237.072192][ T4282] Bluetooth: hci10: command 0x041b tx timeout [ 237.531116][ T9] team0 (unregistering): Port device team_slave_1 removed [ 237.576286][ T9] team0 (unregistering): Port device team_slave_0 removed [ 237.907604][ T9] bond0 (unregistering): Released all slaves [ 238.033796][ T6661] team0: Port device team_slave_1 added [ 238.042989][ T6666] team0: Port device team_slave_0 added [ 238.085273][ T6666] team0: Port device team_slave_1 added [ 238.146957][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.155127][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.181593][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.193026][ T4282] Bluetooth: hci8: command 0x040f tx timeout [ 238.231998][ T6662] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.252338][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.259325][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.286530][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.299373][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.316174][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.343991][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.377265][ T6662] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.392612][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.399615][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.427421][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.538241][ T6662] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.620062][ T6661] device hsr_slave_0 entered promiscuous mode [ 238.627022][ T6661] device hsr_slave_1 entered promiscuous mode [ 238.634149][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.644939][ T6661] Cannot create hsr debugfs directory [ 238.654530][ T6666] device hsr_slave_0 entered promiscuous mode [ 238.662224][ T6666] device hsr_slave_1 entered promiscuous mode [ 238.668970][ T6666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.676972][ T6666] Cannot create hsr debugfs directory [ 238.702945][ T6662] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.834100][ T4282] Bluetooth: hci9: command 0x040f tx timeout [ 238.834120][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 238.996776][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 239.094287][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.152030][ T4284] Bluetooth: hci10: command 0x040f tx timeout [ 239.225197][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.337024][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.445989][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.551468][ T6668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.650700][ T6668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.776144][ T6668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.870679][ T6668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.271793][ T4284] Bluetooth: hci8: command 0x0419 tx timeout [ 240.285996][ T6662] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.307636][ T6662] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.383430][ T6662] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.394279][ T6662] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.855278][ T6662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.869932][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.878121][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.890352][ T6662] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.911949][ T4286] Bluetooth: hci9: command 0x0419 tx timeout [ 240.921776][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 240.993917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.005489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.024837][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.032008][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.081942][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 241.152374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.172562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.192626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.211990][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.219119][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.232215][ T4284] Bluetooth: hci10: command 0x0419 tx timeout [ 241.242078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.254475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.263716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.277990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.474380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.493249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.510012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.567814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.583131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.668436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.686528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.708274][ T6662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.328787][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.345826][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.493795][ T6662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.268611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.283900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.301529][ T6658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.383541][ T6658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.397275][ T6658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.447989][ T6658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.462881][ T6662] device veth0_vlan entered promiscuous mode [ 243.471375][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.482970][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.514913][ T9] device hsr_slave_0 left promiscuous mode [ 243.531837][ T9] device hsr_slave_1 left promiscuous mode [ 243.538970][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.559531][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.571811][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.579242][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.600999][ T9] device bridge_slave_1 left promiscuous mode [ 243.620088][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.643774][ T9] device bridge_slave_0 left promiscuous mode [ 243.650037][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.679632][ T9] device hsr_slave_0 left promiscuous mode [ 243.697516][ T9] device hsr_slave_1 left promiscuous mode [ 243.709210][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.731801][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.739697][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.772007][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.779840][ T9] device bridge_slave_1 left promiscuous mode [ 243.791618][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.800903][ T9] device bridge_slave_0 left promiscuous mode [ 243.807512][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.841935][ T9] device hsr_slave_0 left promiscuous mode [ 243.849532][ T9] device hsr_slave_1 left promiscuous mode [ 243.856233][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.863930][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.872556][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.879998][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.887849][ T9] device bridge_slave_1 left promiscuous mode [ 243.894277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.903438][ T9] device bridge_slave_0 left promiscuous mode [ 243.909687][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.040841][ T9] device veth1_macvtap left promiscuous mode [ 244.057640][ T9] device veth0_macvtap left promiscuous mode [ 244.068251][ T9] device veth1_vlan left promiscuous mode [ 244.080986][ T9] device veth0_vlan left promiscuous mode [ 244.109905][ T9] device veth1_macvtap left promiscuous mode [ 244.116299][ T9] device veth0_macvtap left promiscuous mode [ 244.124052][ T9] device veth1_vlan left promiscuous mode [ 244.129907][ T9] device veth0_vlan left promiscuous mode [ 244.138085][ T9] device veth1_macvtap left promiscuous mode [ 244.144864][ T9] device veth0_macvtap left promiscuous mode [ 244.150982][ T9] device veth1_vlan left promiscuous mode [ 244.157162][ T9] device veth0_vlan left promiscuous mode [ 244.453347][ T9] infiniband syz0: set down [ 244.827076][ T9] team0 (unregistering): Port device team_slave_1 removed [ 244.867415][ T9] team0 (unregistering): Port device team_slave_0 removed [ 244.903756][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.941672][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.211184][ T9] bond0 (unregistering): Released all slaves [ 245.675334][ T9] team0 (unregistering): Port device team_slave_1 removed [ 245.716792][ T9] team0 (unregistering): Port device team_slave_0 removed [ 245.758992][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.796380][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.053873][ T9] bond0 (unregistering): Released all slaves [ 246.494409][ T9] team0 (unregistering): Port device team_slave_1 removed [ 246.529399][ T9] team0 (unregistering): Port device team_slave_0 removed [ 246.565631][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.605549][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.866266][ T9] bond0 (unregistering): Released all slaves [ 246.963050][ T33] smc: removing ib device syz0 [ 246.976275][ T6662] device veth1_vlan entered promiscuous mode [ 247.005617][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.032801][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.044490][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.062418][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.072270][ T126] lo speed is unknown, defaulting to 1000 [ 247.079947][ T6668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.119788][ T6668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.143703][ T6668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.206483][ T6662] device veth0_macvtap entered promiscuous mode [ 247.260074][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.284223][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.293809][ T6668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.315030][ T6662] device veth1_macvtap entered promiscuous mode [ 247.357273][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.368188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.385022][ T6658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.456228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.482304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.512678][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.541585][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.551440][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.581886][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.600202][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.619534][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.632086][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.654941][ T6658] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.663866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.689377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.708311][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.719765][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.739465][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.752556][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.763545][ T6662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.774214][ T6662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.785977][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.805082][ T6666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.827771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.838455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.847722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.856893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.866824][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.873987][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.883200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.896989][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.905727][ T6810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.915640][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.922835][ T6810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.951193][ T6666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.989390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.017132][ T6662] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.032108][ T6662] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.041063][ T6662] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.061690][ T6662] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.097954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.124162][ T6666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.189162][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.206180][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.232696][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.250864][ T6666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.324919][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.395732][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.412738][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.441852][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 255.474388][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.480845][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.326699][ T4320] dvb-usb: did not find the firmware file 'dvb-usb-dw2102.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 291.430268][ T4320] usb 2-1: USB disconnect, device number 7 [ 291.607203][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.619498][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.628359][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.644233][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.653199][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.660537][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.820383][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.829973][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.838941][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.847660][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.861740][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.869028][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.886188][ T4284] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 292.904710][ T4284] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 292.913158][ T4284] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 292.921111][ T4284] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 292.930245][ T4284] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 292.937751][ T4284] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 293.023457][ T4284] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 293.033436][ T4284] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 293.041416][ T4284] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 293.049340][ T4284] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 293.057759][ T4284] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 293.066016][ T4284] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 293.128355][ T4282] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 293.141485][ T4282] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 293.150393][ T4282] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 293.159641][ T4282] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 293.168259][ T4282] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 293.175682][ T4282] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 293.401812][ T4284] Bluetooth: hci6: command 0x0406 tx timeout [ 293.711960][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 294.921886][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 295.001963][ T4282] Bluetooth: hci11: command 0x0409 tx timeout [ 295.161843][ T4282] Bluetooth: hci12: command 0x0409 tx timeout [ 295.231841][ T4282] Bluetooth: hci13: command 0x0409 tx timeout [ 295.801664][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 296.991863][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 297.071755][ T4282] Bluetooth: hci11: command 0x041b tx timeout [ 297.231712][ T4282] Bluetooth: hci12: command 0x041b tx timeout [ 297.311691][ T4282] Bluetooth: hci13: command 0x041b tx timeout [ 297.871690][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 299.071746][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 299.151875][ T4282] Bluetooth: hci11: command 0x040f tx timeout [ 299.312229][ T4282] Bluetooth: hci12: command 0x040f tx timeout [ 299.391709][ T4282] Bluetooth: hci13: command 0x040f tx timeout [ 299.953484][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 301.151833][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 301.241728][ T4282] Bluetooth: hci11: command 0x0419 tx timeout [ 301.391805][ T4284] Bluetooth: hci12: command 0x0419 tx timeout [ 301.471702][ T4282] Bluetooth: hci13: command 0x0419 tx timeout [ 303.641707][ T4284] Bluetooth: hci7: command 0x0406 tx timeout [ 316.913365][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.919798][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.187978][ T4284] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 352.197169][ T4284] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 352.205198][ T4284] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 352.214352][ T4284] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 352.222434][ T4284] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 352.229776][ T4284] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 353.416697][ T4284] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 353.427156][ T4284] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 353.435236][ T4284] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 353.443320][ T4284] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 353.451022][ T4284] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 353.459459][ T4284] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 353.468159][ T49] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 353.483462][ T49] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 353.492759][ T49] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 353.512559][ T49] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 353.520160][ T49] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 353.528054][ T49] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 353.557389][ T49] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 353.566616][ T49] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 353.575034][ T49] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 353.582892][ T49] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 353.591709][ T49] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 353.601097][ T4286] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 353.625093][ T4286] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 353.633848][ T4286] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 353.642129][ T4286] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 353.657326][ T4286] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 353.666061][ T4286] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 353.673649][ T4286] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 354.271811][ T4284] Bluetooth: hci14: command 0x0409 tx timeout [ 354.831798][ T4284] Bluetooth: hci9: command 0x0406 tx timeout [ 354.837879][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 354.844083][ T4282] Bluetooth: hci8: command 0x0406 tx timeout [ 355.551714][ T4284] Bluetooth: hci16: command 0x0409 tx timeout [ 355.558529][ T4284] Bluetooth: hci15: command 0x0409 tx timeout [ 355.631780][ T4284] Bluetooth: hci17: command 0x0409 tx timeout [ 355.712094][ T4284] Bluetooth: hci18: command 0x0409 tx timeout [ 356.351749][ T4284] Bluetooth: hci14: command 0x041b tx timeout [ 357.631795][ T4284] Bluetooth: hci15: command 0x041b tx timeout [ 357.633805][ T4282] Bluetooth: hci16: command 0x041b tx timeout [ 357.711813][ T4282] Bluetooth: hci17: command 0x041b tx timeout [ 357.792710][ T4282] Bluetooth: hci18: command 0x041b tx timeout [ 358.431875][ T4284] Bluetooth: hci14: command 0x040f tx timeout [ 359.711754][ T4284] Bluetooth: hci15: command 0x040f tx timeout [ 359.717901][ T4284] Bluetooth: hci16: command 0x040f tx timeout [ 359.791797][ T4284] Bluetooth: hci17: command 0x040f tx timeout [ 359.871720][ T4284] Bluetooth: hci18: command 0x040f tx timeout [ 359.951797][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 359.951808][ T4282] Bluetooth: hci10: command 0x0406 tx timeout [ 360.521639][ T4284] Bluetooth: hci14: command 0x0419 tx timeout [ 361.791671][ T4282] Bluetooth: hci16: command 0x0419 tx timeout [ 361.792058][ T4284] Bluetooth: hci15: command 0x0419 tx timeout [ 361.881904][ T4286] Bluetooth: hci17: command 0x0419 tx timeout [ 361.951704][ T4284] Bluetooth: hci18: command 0x0419 tx timeout [ 378.354088][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.360446][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.991662][ T28] INFO: task kworker/u4:0:9 blocked for more than 143 seconds. [ 394.999692][ T28] Not tainted syzkaller #0 [ 395.013645][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.027149][ T28] task:kworker/u4:0 state:D stack:23184 pid:9 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.040198][ T28] Workqueue: netns cleanup_net [ 395.054686][ T28] Call Trace: [ 395.058703][ T28] [ 395.068976][ T28] __schedule+0x107f/0x4030 [ 395.078159][ T28] ? release_firmware_map_entry+0x187/0x187 [ 395.141544][ T28] ? __mutex_trylock_common+0x86/0x260 [ 395.147087][ T28] ? wq_worker_sleeping+0x60/0x280 [ 395.171530][ T28] schedule+0xb9/0x180 [ 395.176321][ T28] schedule_preempt_disabled+0xf/0x20 [ 395.201563][ T28] __mutex_lock+0x548/0xae0 [ 395.206138][ T28] ? __mutex_lock+0x3ba/0xae0 [ 395.210881][ T28] ? wg_destruct+0x21/0x300 [ 395.237647][ T28] ? mutex_lock_nested+0x10/0x10 [ 395.255896][ T28] ? kobject_put+0x25c/0x450 [ 395.261034][ T28] ? __kmem_cache_free+0xb6/0x200 [ 395.281724][ T28] wg_destruct+0x21/0x300 [ 395.286106][ T28] ? wg_xmit+0xed0/0xed0 [ 395.290386][ T28] netdev_run_todo+0xbe3/0xdb0 [ 395.311716][ T28] ? netdev_refcnt_read+0x50/0x50 [ 395.316792][ T28] ? unregister_netdevice_queue+0x17c/0x330 [ 395.329389][ T28] ? list_netdevice+0x640/0x640 [ 395.338952][ T28] ? br_dev_delete+0x102/0x130 [ 395.351010][ T28] default_device_exit_batch+0x963/0x9f0 [ 395.361615][ T28] ? __might_sleep+0xd0/0xd0 [ 395.367131][ T28] ? net_rps_action_and_irq_enable+0x200/0x200 [ 395.380105][ T28] ? rdma_dev_init_net+0x270/0x270 [ 395.385640][ T28] ? net_rps_action_and_irq_enable+0x200/0x200 [ 395.392717][ T28] cleanup_net+0x78e/0xba0 [ 395.397184][ T28] ? ops_free_list+0x3b0/0x3b0 [ 395.402279][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 395.408213][ T28] ? _raw_spin_unlock+0x40/0x40 [ 395.413450][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 395.418699][ T28] ? process_one_work+0x7b4/0x1160 [ 395.424118][ T28] process_one_work+0x8ab/0x1160 [ 395.429105][ T28] ? worker_detach_from_pool+0x240/0x240 [ 395.436714][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 395.441982][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 395.447593][ T28] ? wq_worker_running+0x97/0x190 [ 395.453006][ T28] worker_thread+0xaf5/0x12a0 [ 395.457770][ T28] kthread+0x29d/0x330 [ 395.462136][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 395.467691][ T28] ? kthread_blkcg+0xd0/0xd0 [ 395.472823][ T28] ret_from_fork+0x1f/0x30 [ 395.477301][ T28] [ 395.480420][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 395.489683][ T28] Not tainted syzkaller #0 [ 395.495021][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.505120][ T28] task:rcu_tasks_kthre state:D stack:28256 pid:12 ppid:2 flags:0x00004000 [ 395.514654][ T28] Call Trace: [ 395.517965][ T28] [ 395.520932][ T28] __schedule+0x107f/0x4030 [ 395.525792][ T28] ? release_firmware_map_entry+0x187/0x187 [ 395.531963][ T28] schedule+0xb9/0x180 [ 395.536070][ T28] schedule_timeout+0xbd/0x2d0 [ 395.540885][ T28] ? console_conditional_schedule+0x40/0x40 [ 395.547165][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.553660][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 395.558735][ T28] ? lock_chain_count+0x20/0x20 [ 395.563999][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 395.569603][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 395.575549][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 395.580802][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 395.586335][ T28] ? wait_for_completion+0x26f/0x590 [ 395.591917][ T28] wait_for_completion+0x2c2/0x590 [ 395.597083][ T28] ? io_schedule+0xd0/0xd0 [ 395.602502][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 395.608478][ T28] ? debug_object_active_state+0x6b/0x380 [ 395.617070][ T28] __synchronize_srcu+0x2b3/0x350 [ 395.622350][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 395.628285][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 395.634522][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 395.640121][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 395.645964][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 395.651033][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 395.656274][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 395.661429][ T28] ? lock_chain_count+0x20/0x20 [ 395.666613][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 395.673631][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 395.678893][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 395.684598][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 395.690543][ T28] ? _raw_spin_unlock+0x40/0x40 [ 395.695780][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 395.700698][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 395.705956][ T28] rcu_tasks_kthread+0x6e/0x90 [ 395.710761][ T28] kthread+0x29d/0x330 [ 395.715381][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 395.720277][ T28] ? kthread_blkcg+0xd0/0xd0 [ 395.726053][ T28] ret_from_fork+0x1f/0x30 [ 395.730532][ T28] [ 395.734003][ T28] INFO: task udevd:3639 blocked for more than 144 seconds. [ 395.741220][ T28] Not tainted syzkaller #0 [ 395.746507][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.755465][ T28] task:udevd state:D stack:23120 pid:3639 ppid:1 flags:0x00004002 [ 395.767819][ T28] Call Trace: [ 395.771128][ T28] [ 395.774854][ T28] __schedule+0x107f/0x4030 [ 395.779434][ T28] ? release_firmware_map_entry+0x187/0x187 [ 395.785927][ T28] ? __mutex_trylock_common+0x86/0x260 [ 395.791435][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 395.797984][ T28] schedule+0xb9/0x180 [ 395.802311][ T28] schedule_preempt_disabled+0xf/0x20 [ 395.807736][ T28] __mutex_lock+0x548/0xae0 [ 395.812559][ T28] ? __mutex_lock+0x3ba/0xae0 [ 395.817294][ T28] ? uevent_show+0x16e/0x320 [ 395.822365][ T28] ? mutex_lock_nested+0x10/0x10 [ 395.827360][ T28] uevent_show+0x16e/0x320 [ 395.832126][ T28] dev_attr_show+0x50/0xb0 [ 395.836585][ T28] sysfs_kf_seq_show+0x349/0x4b0 [ 395.842769][ T28] ? device_get_ownership+0xa0/0xa0 [ 395.848018][ T28] seq_read_iter+0x460/0xc50 [ 395.853114][ T28] vfs_read+0x471/0x960 [ 395.857326][ T28] ? kernel_read+0x1e0/0x1e0 [ 395.862309][ T28] ? __x64_sys_newfstat+0x19a/0x220 [ 395.867564][ T28] ? do_sys_openat2+0x20a/0x4f0 [ 395.873483][ T28] ? __fdget_pos+0x2b5/0x360 [ 395.879138][ T28] ksys_read+0x14d/0x260 [ 395.884391][ T28] ? vfs_write+0x9a0/0x9a0 [ 395.888864][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 395.894373][ T28] do_syscall_64+0x4c/0xa0 [ 395.898834][ T28] ? clear_bhb_loop+0x60/0xb0 [ 395.904263][ T28] ? clear_bhb_loop+0x60/0xb0 [ 395.909004][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.915282][ T28] RIP: 0033:0x7fc5b46a7407 [ 395.919735][ T28] RSP: 002b:00007fff097b6f20 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 395.928513][ T28] RAX: ffffffffffffffda RBX: 00007fc5b4d6c880 RCX: 00007fc5b46a7407 [ 395.936867][ T28] RDX: 0000000000001000 RSI: 000056421c160880 RDI: 000000000000000c [ 395.945122][ T28] RBP: 00007fc5b47efff0 R08: 0000000000000000 R09: 0000000000000000 [ 395.953349][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 395.961358][ T28] R13: 00007fc5b47efea0 R14: 0000000000000000 R15: 000056421c13f4b0 [ 395.969699][ T28] [ 395.973022][ T28] INFO: task dhcpcd:3933 blocked for more than 144 seconds. [ 395.981296][ T28] Not tainted syzkaller #0 [ 395.986590][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.996367][ T28] task:dhcpcd state:D stack:25264 pid:3933 ppid:1 flags:0x00004002 [ 396.005844][ T28] Call Trace: [ 396.009160][ T28] [ 396.012829][ T28] __schedule+0x107f/0x4030 [ 396.017400][ T28] ? release_firmware_map_entry+0x187/0x187 [ 396.025032][ T28] ? __mutex_trylock_common+0x86/0x260 [ 396.030537][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 396.037022][ T28] schedule+0xb9/0x180 [ 396.041137][ T28] schedule_preempt_disabled+0xf/0x20 [ 396.046988][ T28] __mutex_lock+0x548/0xae0 [ 396.051784][ T28] ? __mutex_lock+0x3ba/0xae0 [ 396.056511][ T28] ? vlan_ioctl_handler+0xef/0x5c0 [ 396.061941][ T28] ? mutex_lock_nested+0x10/0x10 [ 396.066928][ T28] ? __might_fault+0xa6/0x120 [ 396.071898][ T28] ? __might_fault+0xc2/0x120 [ 396.076614][ T28] ? __might_fault+0xa6/0x120 [ 396.082143][ T28] vlan_ioctl_handler+0xef/0x5c0 [ 396.087137][ T28] ? sock_ioctl+0x21b/0x700 [ 396.091977][ T28] ? net_generic+0x240/0x240 [ 396.096613][ T28] ? do_readv+0x378/0x460 [ 396.101013][ T28] ? net_generic+0x240/0x240 [ 396.106061][ T28] sock_ioctl+0x23b/0x700 [ 396.110457][ T28] ? sock_poll+0x420/0x420 [ 396.116364][ T28] ? lock_chain_count+0x20/0x20 [ 396.121286][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 396.126994][ T28] ? security_file_ioctl+0x7c/0xa0 [ 396.133048][ T28] ? sock_poll+0x420/0x420 [ 396.137523][ T28] __se_sys_ioctl+0xfa/0x170 [ 396.142479][ T28] do_syscall_64+0x4c/0xa0 [ 396.147029][ T28] ? clear_bhb_loop+0x60/0xb0 [ 396.152816][ T28] ? clear_bhb_loop+0x60/0xb0 [ 396.157553][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.166735][ T28] RIP: 0033:0x7f2d248b8378 [ 396.171196][ T28] RSP: 002b:00007fff165aa8d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.179861][ T28] RAX: ffffffffffffffda RBX: 0000558ad9ec8860 RCX: 00007f2d248b8378 [ 396.188571][ T28] RDX: 00007fff165aa8e0 RSI: 0000000000008982 RDI: 000000000000000f [ 396.196809][ T28] RBP: 00007fff165aa8e0 R08: 1999999999999999 R09: 0000000000000000 [ 396.204900][ T28] R10: 00007f2d24932fe0 R11: 0000000000000246 R12: 0000000000000002 [ 396.212986][ T28] R13: 0000558ad9f434e0 R14: 00007fff165ab330 R15: 0000558ad9ec8860 [ 396.221013][ T28] [ 396.224231][ T28] INFO: task kworker/1:3:4278 blocked for more than 144 seconds. [ 396.232067][ T28] Not tainted syzkaller #0 [ 396.237039][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.245863][ T28] task:kworker/1:3 state:D stack:22256 pid:4278 ppid:2 flags:0x00004000 [ 396.255150][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 396.261196][ T28] Call Trace: [ 396.264724][ T28] [ 396.267691][ T28] __schedule+0x107f/0x4030 [ 396.272600][ T28] ? mark_lock+0x94/0x320 [ 396.277082][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 396.282214][ T28] ? release_firmware_map_entry+0x187/0x187 [ 396.288707][ T28] ? __mutex_trylock_common+0x86/0x260 [ 396.294383][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 396.299623][ T28] schedule+0xb9/0x180 [ 396.303810][ T28] schedule_preempt_disabled+0xf/0x20 [ 396.309237][ T28] __mutex_lock+0x548/0xae0 [ 396.313844][ T28] ? __mutex_lock+0x3ba/0xae0 [ 396.318566][ T28] ? addrconf_dad_work+0xc4/0x1500 [ 396.323786][ T28] ? mutex_lock_nested+0x10/0x10 [ 396.328778][ T28] addrconf_dad_work+0xc4/0x1500 [ 396.333818][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.339848][ T28] ? ipv6_get_saddr_eval+0xe60/0xe60 [ 396.345267][ T28] ? read_lock_is_recursive+0x10/0x10 [ 396.350701][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.356684][ T28] ? _raw_spin_unlock+0x40/0x40 [ 396.361612][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 396.366858][ T28] ? process_one_work+0x7b4/0x1160 [ 396.372554][ T28] process_one_work+0x8ab/0x1160 [ 396.377554][ T28] ? worker_detach_from_pool+0x240/0x240 [ 396.384245][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 396.390075][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 396.395871][ T28] ? wq_worker_running+0x97/0x190 [ 396.400943][ T28] worker_thread+0xaf5/0x12a0 [ 396.405918][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.412077][ T28] kthread+0x29d/0x330 [ 396.416194][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 396.421256][ T28] ? kthread_blkcg+0xd0/0xd0 [ 396.426042][ T28] ret_from_fork+0x1f/0x30 [ 396.430532][ T28] [ 396.434621][ T28] INFO: task kworker/0:5:4319 blocked for more than 144 seconds. [ 396.443210][ T28] Not tainted syzkaller #0 [ 396.448177][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.456951][ T28] task:kworker/0:5 state:D stack:20480 pid:4319 ppid:2 flags:0x00004000 [ 396.466417][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 396.472833][ T28] Call Trace: [ 396.476145][ T28] [ 396.479110][ T28] __schedule+0x107f/0x4030 [ 396.483727][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 396.489211][ T28] ? mark_lock+0x94/0x320 [ 396.494696][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 396.499771][ T28] ? release_firmware_map_entry+0x187/0x187 [ 396.505766][ T28] ? __mutex_trylock_common+0x86/0x260 [ 396.511390][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 396.516904][ T28] schedule+0xb9/0x180 [ 396.521014][ T28] schedule_preempt_disabled+0xf/0x20 [ 396.526482][ T28] __mutex_lock+0x548/0xae0 [ 396.531150][ T28] ? __mutex_lock+0x3ba/0xae0 [ 396.536707][ T28] ? addrconf_dad_work+0xc4/0x1500 [ 396.542669][ T28] ? mutex_lock_nested+0x10/0x10 [ 396.547665][ T28] addrconf_dad_work+0xc4/0x1500 [ 396.553430][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.559467][ T28] ? ipv6_get_saddr_eval+0xe60/0xe60 [ 396.565036][ T28] ? read_lock_is_recursive+0x10/0x10 [ 396.570452][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.576445][ T28] ? _raw_spin_unlock+0x40/0x40 [ 396.581475][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 396.587718][ T28] ? process_one_work+0x7b4/0x1160 [ 396.593561][ T28] process_one_work+0x8ab/0x1160 [ 396.598575][ T28] ? worker_detach_from_pool+0x240/0x240 [ 396.604363][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 396.609555][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 396.615247][ T28] ? wq_worker_running+0x97/0x190 [ 396.620500][ T28] worker_thread+0xaf5/0x12a0 [ 396.625336][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.631382][ T28] kthread+0x29d/0x330 [ 396.635561][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 396.640716][ T28] ? kthread_blkcg+0xd0/0xd0 [ 396.645429][ T28] ret_from_fork+0x1f/0x30 [ 396.650030][ T28] [ 396.653183][ T28] INFO: task kworker/1:7:4360 blocked for more than 145 seconds. [ 396.661052][ T28] Not tainted syzkaller #0 [ 396.666113][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.681299][ T28] task:kworker/1:7 state:D stack:25008 pid:4360 ppid:2 flags:0x00004000 [ 396.690588][ T28] Workqueue: events_power_efficient reg_check_chans_work [ 396.698123][ T28] Call Trace: [ 396.701436][ T28] [ 396.704457][ T28] __schedule+0x107f/0x4030 [ 396.709113][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 396.714425][ T28] ? mark_lock+0x94/0x320 [ 396.718938][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 396.724035][ T28] ? release_firmware_map_entry+0x187/0x187 [ 396.730054][ T28] ? __mutex_trylock_common+0x86/0x260 [ 396.735622][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 396.741050][ T28] schedule+0xb9/0x180 [ 396.745262][ T28] schedule_preempt_disabled+0xf/0x20 [ 396.750766][ T28] __mutex_lock+0x548/0xae0 [ 396.755667][ T28] ? __mutex_lock+0x3ba/0xae0 [ 396.760391][ T28] ? reg_check_chans_work+0x82/0xd40 [ 396.765772][ T28] ? mutex_lock_nested+0x10/0x10 [ 396.770902][ T28] ? process_one_work+0x7b4/0x1160 [ 396.776149][ T28] reg_check_chans_work+0x82/0xd40 [ 396.781382][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.787539][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 396.792753][ T28] ? reg_process_ht_flags+0xb70/0xb70 [ 396.798240][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.804614][ T28] ? _raw_spin_unlock+0x40/0x40 [ 396.809529][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 396.814831][ T28] ? process_one_work+0x7b4/0x1160 [ 396.820104][ T28] process_one_work+0x8ab/0x1160 [ 396.825150][ T28] ? worker_detach_from_pool+0x240/0x240 [ 396.830899][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 396.836263][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 396.841894][ T28] ? wq_worker_running+0x97/0x190 [ 396.847065][ T28] worker_thread+0xaf5/0x12a0 [ 396.851854][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.857825][ T28] kthread+0x29d/0x330 [ 396.862195][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 396.867264][ T28] ? kthread_blkcg+0xd0/0xd0 [ 396.871947][ T28] ret_from_fork+0x1f/0x30 [ 396.876566][ T28] [ 396.879637][ T28] INFO: task syz.6.438:6354 blocked for more than 145 seconds. [ 396.887260][ T28] Not tainted syzkaller #0 [ 396.892405][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.901193][ T28] task:syz.6.438 state:D stack:27696 pid:6354 ppid:5503 flags:0x00004004 [ 396.910512][ T28] Call Trace: [ 396.914323][ T28] [ 396.917290][ T28] __schedule+0x107f/0x4030 [ 396.922682][ T28] ? release_firmware_map_entry+0x187/0x187 [ 396.928631][ T28] ? __mutex_trylock_common+0x86/0x260 [ 396.934217][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 396.940550][ T28] schedule+0xb9/0x180 [ 396.947529][ T28] schedule_preempt_disabled+0xf/0x20 [ 396.953012][ T28] __mutex_lock+0x548/0xae0 [ 396.957615][ T28] ? __mutex_lock+0x3ba/0xae0 [ 396.962446][ T28] ? param_attr_store+0xcb/0x300 [ 396.967441][ T28] ? mutex_lock_nested+0x10/0x10 [ 396.972605][ T28] ? kernfs_fop_write_iter+0x1d8/0x520 [ 396.978110][ T28] ? read_lock_is_recursive+0x10/0x10 [ 396.983581][ T28] param_attr_store+0xcb/0x300 [ 396.988595][ T28] ? param_attr_show+0x170/0x170 [ 396.993701][ T28] ? sysfs_kf_read+0x350/0x350 [ 396.998603][ T28] module_attr_store+0x5b/0x80 [ 397.003618][ T28] kernfs_fop_write_iter+0x3a0/0x520 [ 397.008960][ T28] vfs_write+0x482/0x9a0 [ 397.013575][ T28] ? file_end_write+0x250/0x250 [ 397.018496][ T28] ? __fget_files+0x3fc/0x460 [ 397.023764][ T28] ? __fdget_pos+0x2ae/0x360 [ 397.028410][ T28] ? ksys_write+0x70/0x260 [ 397.033224][ T28] ksys_write+0x14d/0x260 [ 397.037609][ T28] ? __ia32_sys_read+0x80/0x80 [ 397.042716][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 397.047999][ T28] do_syscall_64+0x4c/0xa0 [ 397.052747][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.057471][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.062500][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.068451][ T28] RIP: 0033:0x7fc95e79e159 [ 397.073771][ T28] RSP: 002b:00007fc95f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.082448][ T28] RAX: ffffffffffffffda RBX: 00007fc95ea25fa0 RCX: 00007fc95e79e159 [ 397.090484][ T28] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 397.098750][ T28] RBP: 00007fc95e83506b R08: 0000000000000000 R09: 0000000000000000 [ 397.107291][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.116148][ T28] R13: 00007fc95ea26038 R14: 00007fc95ea25fa0 R15: 00007ffed7805e88 [ 397.124376][ T28] [ 397.127435][ T28] INFO: task syz.8.460:6467 blocked for more than 145 seconds. [ 397.135570][ T28] Not tainted syzkaller #0 [ 397.140546][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.149501][ T28] task:syz.8.460 state:D stack:27696 pid:6467 ppid:4531 flags:0x00004004 [ 397.158990][ T28] Call Trace: [ 397.162525][ T28] [ 397.165494][ T28] __schedule+0x107f/0x4030 [ 397.170058][ T28] ? release_firmware_map_entry+0x187/0x187 [ 397.176359][ T28] ? __mutex_trylock_common+0x86/0x260 [ 397.182090][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 397.188292][ T28] schedule+0xb9/0x180 [ 397.192673][ T28] schedule_preempt_disabled+0xf/0x20 [ 397.198088][ T28] __mutex_lock+0x548/0xae0 [ 397.202920][ T28] ? __mutex_lock+0x3ba/0xae0 [ 397.207731][ T28] ? param_attr_store+0xcb/0x300 [ 397.213035][ T28] ? mutex_lock_nested+0x10/0x10 [ 397.218031][ T28] ? kernfs_fop_write_iter+0x1d8/0x520 [ 397.224585][ T28] ? read_lock_is_recursive+0x10/0x10 [ 397.230045][ T28] param_attr_store+0xcb/0x300 [ 397.235148][ T28] ? param_attr_show+0x170/0x170 [ 397.240161][ T28] ? sysfs_kf_read+0x350/0x350 [ 397.245506][ T28] module_attr_store+0x5b/0x80 [ 397.250324][ T28] kernfs_fop_write_iter+0x3a0/0x520 [ 397.255950][ T28] vfs_write+0x482/0x9a0 [ 397.260248][ T28] ? file_end_write+0x250/0x250 [ 397.265417][ T28] ? __fget_files+0x3fc/0x460 [ 397.270160][ T28] ? __fdget_pos+0x2ae/0x360 [ 397.275080][ T28] ? ksys_write+0x70/0x260 [ 397.279544][ T28] ksys_write+0x14d/0x260 [ 397.284230][ T28] ? __ia32_sys_read+0x80/0x80 [ 397.289039][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 397.294523][ T28] do_syscall_64+0x4c/0xa0 [ 397.299002][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.303969][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.308783][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.315527][ T28] RIP: 0033:0x7fbfab19e159 [ 397.319992][ T28] RSP: 002b:00007fbfac015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.328718][ T28] RAX: ffffffffffffffda RBX: 00007fbfab425fa0 RCX: 00007fbfab19e159 [ 397.336945][ T28] RDX: 0000000000000011 RSI: 00002000000000c0 RDI: 0000000000000003 [ 397.345759][ T28] RBP: 00007fbfab23506b R08: 0000000000000000 R09: 0000000000000000 [ 397.354846][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.363061][ T28] R13: 00007fbfab426038 R14: 00007fbfab425fa0 R15: 00007ffe41b391a8 [ 397.371089][ T28] [ 397.374448][ T28] INFO: task syz-executor:6658 blocked for more than 145 seconds. [ 397.382536][ T28] Not tainted syzkaller #0 [ 397.387505][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.396596][ T28] task:syz-executor state:D stack:22928 pid:6658 ppid:1 flags:0x00004004 [ 397.406052][ T28] Call Trace: [ 397.409362][ T28] [ 397.412700][ T28] __schedule+0x107f/0x4030 [ 397.417277][ T28] ? release_firmware_map_entry+0x187/0x187 [ 397.423526][ T28] ? __mutex_trylock_common+0x86/0x260 [ 397.429036][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 397.435570][ T28] schedule+0xb9/0x180 [ 397.439683][ T28] schedule_preempt_disabled+0xf/0x20 [ 397.445350][ T28] __mutex_lock+0x548/0xae0 [ 397.449904][ T28] ? __mutex_lock+0x3ba/0xae0 [ 397.454932][ T28] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 397.460102][ T28] ? mutex_lock_nested+0x10/0x10 [ 397.465626][ T28] rtnetlink_rcv_msg+0x80d/0xfb0 [ 397.470611][ T28] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 397.476753][ T28] ? rtnetlink_bind+0x80/0x80 [ 397.481464][ T28] ? mark_lock+0x94/0x320 [ 397.486072][ T28] ? __lock_acquire+0x138a/0x7c40 [ 397.491156][ T28] ? __lock_acquire+0x138a/0x7c40 [ 397.496302][ T28] ? verify_lock_unused+0x140/0x140 [ 397.501815][ T28] ? verify_lock_unused+0x140/0x140 [ 397.507056][ T28] ? __alloc_skb+0xf9/0x7d0 [ 397.511653][ T28] ? verify_lock_unused+0x140/0x140 [ 397.517167][ T28] netlink_rcv_skb+0x1ef/0x440 [ 397.522028][ T28] ? rtnetlink_bind+0x80/0x80 [ 397.526737][ T28] ? netlink_ack+0x1160/0x1160 [ 397.531595][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.537478][ T28] netlink_unicast+0x7ad/0x920 [ 397.542340][ T28] netlink_sendmsg+0x8ad/0xbd0 [ 397.547143][ T28] ? netlink_getsockopt+0x550/0x550 [ 397.552687][ T28] ? apparmor_socket_sendmsg+0x8a/0x330 [ 397.558275][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 397.568402][ T28] ? security_socket_sendmsg+0x7c/0xa0 [ 397.574849][ T28] __sys_sendto+0x497/0x650 [ 397.579387][ T28] ? __ia32_sys_getpeername+0x80/0x80 [ 397.588027][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 397.594145][ T28] ? lock_chain_count+0x20/0x20 [ 397.599042][ T28] __x64_sys_sendto+0xda/0xf0 [ 397.603861][ T28] do_syscall_64+0x4c/0xa0 [ 397.608314][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.613092][ T28] ? clear_bhb_loop+0x60/0xb0 [ 397.617928][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.626244][ T28] RIP: 0033:0x7f28e355e98e [ 397.630696][ T28] RSP: 002b:00007ffea6de4d38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 397.639325][ T28] RAX: ffffffffffffffda RBX: 0000555591caa500 RCX: 00007f28e355e98e [ 397.647608][ T28] RDX: 000000000000002c RSI: 00007f28e4354670 RDI: 0000000000000003 [ 397.655704][ T28] RBP: 0000000000000001 R08: 00007ffea6de4db4 R09: 000000000000000c [ 397.663850][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 397.672025][ T28] R13: 0000000000000000 R14: 00007f28e4354670 R15: 0000000000000000 [ 397.680037][ T28] [ 397.683434][ T28] [ 397.683434][ T28] Showing all locks held in the system: [ 397.691318][ T28] 4 locks held by kworker/u4:0/9: [ 397.696436][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.706951][ T28] #1: ffffc900000e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.723253][ T28] #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 397.732813][ T28] #3: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x21/0x300 [ 397.741775][ T28] 1 lock held by rcu_tasks_kthre/12: [ 397.747098][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 397.757837][ T28] 1 lock held by rcu_tasks_trace/13: [ 397.763203][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 397.774415][ T28] 1 lock held by khungtaskd/28: [ 397.779288][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 397.789265][ T28] 3 locks held by kworker/u4:3/47: [ 397.794836][ T28] 4 locks held by udevd/3639: [ 397.799537][ T28] #0: ffff88805ff43d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 397.808414][ T28] #1: ffff8880559bd488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x59/0x410 [ 397.817921][ T28] #2: ffff888078991bd0 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 397.827612][ T28] #3: ffff88803425a0e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16e/0x320 [ 397.836703][ T28] 2 locks held by dhcpcd/3933: [ 397.841611][ T28] #0: ffffffff8dd3af68 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x21b/0x700 [ 397.850995][ T28] #1: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xef/0x5c0 [ 397.860546][ T28] 2 locks held by getty/4029: [ 397.865427][ T28] #0: ffff88814d97a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 397.875568][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 397.885802][ T28] 3 locks held by kworker/1:3/4278: [ 397.891116][ T28] #0: ffff88802ee47d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.902508][ T28] #1: ffffc90004377d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.914852][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 397.925062][ T28] 3 locks held by kworker/0:5/4319: [ 397.930299][ T28] #0: ffff88802ee47d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.941378][ T28] #1: ffffc900048c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 397.953874][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 397.963461][ T28] 4 locks held by kworker/u4:7/4339: [ 397.968866][ T28] #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 397.978920][ T28] #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 397.990511][ T28] #2: ffff8880b8e28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 398.000003][ T28] #3: ffffffff96e3cc88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 398.010606][ T28] 3 locks held by kworker/1:7/4360: [ 398.016191][ T28] #0: ffff888017471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 398.028216][ T28] #1: ffffc900049d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 398.038806][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xd40 [ 398.048601][ T28] 5 locks held by syz.1.413/6255: [ 398.053783][ T28] #0: ffff88807c20cd68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 398.063162][ T28] #1: ffff8880537a2460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 398.072254][ T28] #2: ffff8880552b9488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 398.082175][ T28] #3: ffff88801f259cb8 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 398.092322][ T28] #4: ffffffff8c9df728 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 398.101812][ T28] 5 locks held by syz.6.438/6354: [ 398.106859][ T28] #0: ffff88807a596fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 398.116540][ T28] #1: ffff88805756c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 398.126239][ T28] #2: ffff88807d20a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 398.136371][ T28] #3: ffff88801f259cb8 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 398.146458][ T28] #4: ffffffff8c9df728 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 398.155870][ T28] 5 locks held by syz.8.460/6467: [ 398.161001][ T28] #0: ffff88802032d9e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 398.170362][ T28] #1: ffff888027044460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 398.179445][ T28] #2: ffff88802c876488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 398.189380][ T28] #3: ffff88801f259cb8 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 398.199516][ T28] #4: ffffffff8c9df728 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xcb/0x300 [ 398.208882][ T28] 1 lock held by syz-executor/6658: [ 398.214133][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.223644][ T28] 6 locks held by syz-executor/6661: [ 398.228960][ T28] #0: ffff88807edbc460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 398.238239][ T28] #1: ffff888077762c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 398.248129][ T28] #2: ffff88814631a490 (kn->active#54){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 398.258255][ T28] #3: ffffffff8d669d08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x139/0x690 [ 398.268746][ T28] #4: ffff88803425a0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 398.278137][ T28] #5: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2a3/0x950 [ 398.287916][ T28] 4 locks held by syz-executor/6662: [ 398.293266][ T28] #0: ffffffff8ddb5b90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 398.301584][ T28] #1: ffffffff8ddb59a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 398.310618][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_register_hw+0x28a0/0x39f0 [ 398.320650][ T28] #3: ffffffff8c9df728 (param_lock){+.+.}-{3:3}, at: ieee80211_init_rate_ctrl_alg+0x171/0x5e0 [ 398.331123][ T28] 1 lock held by syz-executor/6666: [ 398.336944][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.346710][ T28] 1 lock held by syz-executor/6668: [ 398.352281][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.362687][ T28] 1 lock held by syz-executor/6813: [ 398.367929][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.377436][ T28] 1 lock held by syz-executor/6819: [ 398.382721][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.392313][ T28] 1 lock held by syz-executor/6821: [ 398.397546][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.407102][ T28] 1 lock held by syz-executor/6823: [ 398.412352][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.421873][ T28] 1 lock held by syz-executor/6825: [ 398.427121][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.436685][ T28] 1 lock held by syz-executor/6828: [ 398.441967][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.451466][ T28] 1 lock held by syz-executor/6834: [ 398.457001][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.466537][ T28] 1 lock held by syz-executor/6835: [ 398.471854][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.481447][ T28] 1 lock held by syz-executor/6838: [ 398.486970][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.496515][ T28] 1 lock held by syz-executor/6840: [ 398.502032][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 398.511930][ T28] [ 398.514286][ T28] ============================================= [ 398.514286][ T28] [ 398.522838][ T28] NMI backtrace for cpu 1 [ 398.527194][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 398.534401][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.544499][ T28] Call Trace: [ 398.547796][ T28] [ 398.550729][ T28] dump_stack_lvl+0x188/0x24e [ 398.555438][ T28] ? show_regs_print_info+0x12/0x12 [ 398.560663][ T28] ? load_image+0x410/0x410 [ 398.565174][ T28] ? vprintk_emit+0x59f/0x6a0 [ 398.569877][ T28] ? printk_sprint+0x460/0x460 [ 398.574656][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 398.579605][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 398.585777][ T28] ? _printk+0xda/0x130 [ 398.589973][ T28] ? load_image+0x410/0x410 [ 398.594520][ T28] ? load_image+0x410/0x410 [ 398.599062][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 398.605163][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 398.611261][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 398.617279][ T28] watchdog+0xf0e/0xf50 [ 398.621471][ T28] ? watchdog+0x1ed/0xf50 [ 398.625867][ T28] kthread+0x29d/0x330 [ 398.629937][ T28] ? hungtask_pm_notify+0x40/0x40 [ 398.634998][ T28] ? kthread_blkcg+0xd0/0xd0 [ 398.639623][ T28] ret_from_fork+0x1f/0x30 [ 398.644115][ T28] [ 398.647625][ T28] Sending NMI from CPU 1 to CPUs 0: [ 398.652933][ C0] NMI backtrace for cpu 0 [ 398.652942][ C0] CPU: 0 PID: 3621 Comm: syslogd Not tainted syzkaller #0 [ 398.652958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.652967][ C0] RIP: 0010:trace_hardirqs_on+0x7/0x40 [ 398.652993][ C0] Code: 03 38 c1 0f 8c 66 ff ff ff 48 c7 c7 70 b6 20 8e e8 de db 4a 00 e9 55 ff ff ff 66 0f 1f 84 00 00 00 00 00 65 8b 05 71 9a 7a 7e <85> c0 74 24 65 8b 05 76 d3 79 7e a9 00 00 f0 00 75 0b 48 8b 3c 24 [ 398.653007][ C0] RSP: 0018:ffffc900032a78b8 EFLAGS: 00000006 [ 398.653020][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: 0000000000000000 [ 398.653030][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807ede31d0 [ 398.653040][ C0] RBP: ffffc900032a7958 R08: ffff88807ede31d3 R09: 1ffff1100fdbc63a [ 398.653052][ C0] R10: dffffc0000000000 R11: ffffed100fdbc63b R12: dffffc0000000000 [ 398.653064][ C0] R13: ffff88807ede31d0 R14: ffff88807ede31d0 R15: 1ffff92000654f18 [ 398.653076][ C0] FS: 00007ffbc4cdec80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 398.653090][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.653100][ C0] CR2: 000055cd8ada4000 CR3: 000000007f55a000 CR4: 00000000003506f0 [ 398.653114][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.653124][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.653133][ C0] Call Trace: [ 398.653138][ C0] [ 398.653143][ C0] _raw_spin_unlock_irqrestore+0x82/0x120 [ 398.653168][ C0] ? _raw_spin_unlock+0x40/0x40 [ 398.653191][ C0] ? memset+0x1e/0x40 [ 398.653210][ C0] __skb_try_recv_datagram+0x17d/0x4e0 [ 398.653236][ C0] ? sock_load_diag_module+0x130/0x130 [ 398.653265][ C0] __unix_dgram_recvmsg+0x22c/0xda0 [ 398.653291][ C0] ? unix_unhash+0x10/0x10 [ 398.653313][ C0] ? aa_af_perm+0x340/0x340 [ 398.653331][ C0] ? aa_file_perm+0x3ea/0xf00 [ 398.653349][ C0] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 398.653366][ C0] ? security_socket_recvmsg+0x85/0xb0 [ 398.653388][ C0] ? unix_dgram_recvmsg+0xa9/0xd0 [ 398.653413][ C0] sock_read_iter+0x2da/0x3a0 [ 398.653432][ C0] ? kernel_sock_ip_overhead+0x590/0x590 [ 398.653456][ C0] ? common_file_perm+0x171/0x1c0 [ 398.653483][ C0] vfs_read+0x471/0x960 [ 398.653509][ C0] ? kernel_read+0x1e0/0x1e0 [ 398.653531][ C0] ? rcu_is_watching+0x11/0xa0 [ 398.653556][ C0] ? lock_chain_count+0x20/0x20 [ 398.653583][ C0] ? __fdget_pos+0x1d4/0x360 [ 398.653608][ C0] ksys_read+0x14d/0x260 [ 398.653632][ C0] ? vfs_write+0x9a0/0x9a0 [ 398.653657][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 398.653680][ C0] do_syscall_64+0x4c/0xa0 [ 398.653695][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.653711][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.653727][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.653752][ C0] RIP: 0033:0x7ffbc4e2e407 [ 398.653765][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 398.653778][ C0] RSP: 002b:00007ffd5899e980 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 398.653793][ C0] RAX: ffffffffffffffda RBX: 00007ffbc4cdec80 RCX: 00007ffbc4e2e407 [ 398.653804][ C0] RDX: 00000000000000ff RSI: 000055ad919d1950 RDI: 0000000000000000 [ 398.653814][ C0] RBP: 000055ad919d1910 R08: 0000000000000000 R09: 0000000000000000 [ 398.653823][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ad919d199a [ 398.653833][ C0] R13: 0000000000000000 R14: 000055ad919d1950 R15: 000055ad6936ad98 [ 398.653857][ C0] [ 399.014473][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 399.021371][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 399.028595][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.038673][ T28] Call Trace: [ 399.041982][ T28] [ 399.044945][ T28] dump_stack_lvl+0x188/0x24e [ 399.049689][ T28] ? memcpy+0x3c/0x60 [ 399.053712][ T28] ? show_regs_print_info+0x12/0x12 [ 399.058941][ T28] ? load_image+0x410/0x410 [ 399.063493][ T28] panic+0x2d3/0x710 [ 399.067424][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 399.073096][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 399.077638][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 399.083229][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 399.089449][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 399.095644][ T28] watchdog+0xf4d/0xf50 [ 399.099839][ T28] ? watchdog+0x1ed/0xf50 [ 399.104198][ T28] kthread+0x29d/0x330 [ 399.108306][ T28] ? hungtask_pm_notify+0x40/0x40 [ 399.113353][ T28] ? kthread_blkcg+0xd0/0xd0 [ 399.117971][ T28] ret_from_fork+0x1f/0x30 [ 399.122437][ T28] [ 399.126074][ T28] Kernel Offset: disabled [ 399.130408][ T28] Rebooting in 86400 seconds..