last executing test programs: 1m56.419052917s ago: executing program 3 (id=234): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 1m54.313110636s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 1m54.0328287s ago: executing program 3 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x20) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) 1m52.252955504s ago: executing program 3 (id=242): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, 0x0, 0x1a0480c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) 1m47.655225611s ago: executing program 1 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000400)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000740)='loop\n', 0x5) close(0xffffffffffffffff) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r4) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r5, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 1m46.876368947s ago: executing program 1 (id=256): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/36, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 1m44.860243862s ago: executing program 1 (id=257): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 1m41.222152694s ago: executing program 1 (id=261): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000400)) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000180), 0x4) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_VOLTAGE(r6, 0x6f43, 0x0) write$proc_mixer(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 1m38.925310253s ago: executing program 3 (id=262): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 1m38.792345499s ago: executing program 1 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) 1m38.650555426s ago: executing program 3 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) setns(0xc9, 0x0) 1m37.242316952s ago: executing program 1 (id=267): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x7, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f00000002c0)={0x20, 0xc, 0x9a, {0x9a, 0x9, "26d9da24299ca28de89294a2816f00422168fb1cf0595398f2f5a72ad4e2fdbd886c0a502140164b1f23d49a557e25eef98ea615d518f6af3b84806e4735bf2969583d547965d85f8cc2c628138c4b2e5fc516c9164ff662b758205740ba9b2b6e8d3dbb1da5120dd3089b05638325ea6863f65d23978f47bc677e902f9617fb0401a868f06d0205889b401c61eddb8ce6814b60437fc34a"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xad, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="40097c0000007c06850d962d6ddfdfca359b0b21d26eb55d9c7f4273dcbeb9b6a26afeeb72cfcfbdb9a075a3d4d152c33d6886af96632b0e762bd44ec5e3cc56e88fc54a5a33f13dd908004f60c2831aa3267f7b91a25afdf88cc93fa75c9207845a89593db608ea915923c70672d8509933fceb016ed4a0618c7afc80c46083dc2f0b23dc04f3f72fb75f7bdb102c771687ba"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0105b08, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f0000001c80)=ANY=[@ANYBLOB], 0x0) 1m23.184624655s ago: executing program 32 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) setns(0xc9, 0x0) 1m20.951377171s ago: executing program 33 (id=267): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x7, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f00000002c0)={0x20, 0xc, 0x9a, {0x9a, 0x9, "26d9da24299ca28de89294a2816f00422168fb1cf0595398f2f5a72ad4e2fdbd886c0a502140164b1f23d49a557e25eef98ea615d518f6af3b84806e4735bf2969583d547965d85f8cc2c628138c4b2e5fc516c9164ff662b758205740ba9b2b6e8d3dbb1da5120dd3089b05638325ea6863f65d23978f47bc677e902f9617fb0401a868f06d0205889b401c61eddb8ce6814b60437fc34a"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xad, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="40097c0000007c06850d962d6ddfdfca359b0b21d26eb55d9c7f4273dcbeb9b6a26afeeb72cfcfbdb9a075a3d4d152c33d6886af96632b0e762bd44ec5e3cc56e88fc54a5a33f13dd908004f60c2831aa3267f7b91a25afdf88cc93fa75c9207845a89593db608ea915923c70672d8509933fceb016ed4a0618c7afc80c46083dc2f0b23dc04f3f72fb75f7bdb102c771687ba"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0105b08, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f0000001c80)=ANY=[@ANYBLOB], 0x0) 11.66819693s ago: executing program 0 (id=354): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 9.818140346s ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers_autoprobe\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/10, 0xa) 9.627424386s ago: executing program 0 (id=358): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000600)='+bond_slave_0\n', 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1}) 7.540645534s ago: executing program 2 (id=361): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000500)='\x00'/10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 6.797514899s ago: executing program 0 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 4.762600225s ago: executing program 0 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r7, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 3.509195115s ago: executing program 0 (id=364): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'\x00', &(0x7f0000000100)}) 3.244263317s ago: executing program 2 (id=365): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, 0x0) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) 1.016445772s ago: executing program 2 (id=366): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0', 0x7) 734.855486ms ago: executing program 2 (id=367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 471.520287ms ago: executing program 2 (id=368): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000600)='+bond_slave_0\n', 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1}) 0s ago: executing program 2 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='2049\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\n', 0x2) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 79.235368][ T5767] cgroup: Unknown subsys name 'net' [ 79.344529][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.213234][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.706805][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.716952][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.725867][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.735856][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.748196][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.787739][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.797207][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.805440][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.812618][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.814270][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.823223][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.837040][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.840431][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.849830][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.865739][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.874424][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.885814][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.894073][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.894263][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.907536][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.921191][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.930157][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.946055][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.954418][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.477385][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.640099][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.649965][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.658403][ T5781] bridge_slave_0: entered allmulticast mode [ 84.667836][ T5781] bridge_slave_0: entered promiscuous mode [ 84.676782][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.688925][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.696460][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.704255][ T5781] bridge_slave_1: entered allmulticast mode [ 84.711601][ T5781] bridge_slave_1: entered promiscuous mode [ 84.719339][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.818164][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.852948][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.896899][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.987486][ T5781] team0: Port device team_slave_0 added [ 85.029358][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.044103][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.056708][ T5779] bridge_slave_0: entered allmulticast mode [ 85.067833][ T5779] bridge_slave_0: entered promiscuous mode [ 85.090165][ T5781] team0: Port device team_slave_1 added [ 85.116960][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.125749][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.133150][ T5778] bridge_slave_0: entered allmulticast mode [ 85.141022][ T5778] bridge_slave_0: entered promiscuous mode [ 85.149637][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.157254][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.166054][ T5779] bridge_slave_1: entered allmulticast mode [ 85.174978][ T5779] bridge_slave_1: entered promiscuous mode [ 85.201415][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.208893][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.216482][ T5778] bridge_slave_1: entered allmulticast mode [ 85.225406][ T5778] bridge_slave_1: entered promiscuous mode [ 85.299752][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.307476][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.334017][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.349394][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.356572][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.383228][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.422128][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.429601][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.437377][ T5780] bridge_slave_0: entered allmulticast mode [ 85.445184][ T5780] bridge_slave_0: entered promiscuous mode [ 85.456562][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.488893][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.498862][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.507582][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.515508][ T5780] bridge_slave_1: entered allmulticast mode [ 85.523135][ T5780] bridge_slave_1: entered promiscuous mode [ 85.532767][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.561533][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.610244][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.648951][ T5779] team0: Port device team_slave_0 added [ 85.673599][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.687471][ T5778] team0: Port device team_slave_0 added [ 85.699639][ T5779] team0: Port device team_slave_1 added [ 85.726732][ T5781] hsr_slave_0: entered promiscuous mode [ 85.734902][ T5781] hsr_slave_1: entered promiscuous mode [ 85.770057][ T5778] team0: Port device team_slave_1 added [ 85.807931][ T5780] team0: Port device team_slave_0 added [ 85.818033][ T5780] team0: Port device team_slave_1 added [ 85.852348][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.860212][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.888021][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.901446][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.908766][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.936117][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.947826][ T5088] Bluetooth: hci3: command tx timeout [ 85.954920][ T51] Bluetooth: hci1: command tx timeout [ 85.986238][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.996967][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.025811][ T51] Bluetooth: hci0: command tx timeout [ 86.033885][ T51] Bluetooth: hci2: command tx timeout [ 86.040784][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.057005][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.065689][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.093112][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.131002][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.138335][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.165886][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.201632][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.208940][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.236480][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.345250][ T5779] hsr_slave_0: entered promiscuous mode [ 86.352152][ T5779] hsr_slave_1: entered promiscuous mode [ 86.358610][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.366826][ T5779] Cannot create hsr debugfs directory [ 86.409350][ T5778] hsr_slave_0: entered promiscuous mode [ 86.416387][ T5778] hsr_slave_1: entered promiscuous mode [ 86.422905][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.430740][ T5778] Cannot create hsr debugfs directory [ 86.482746][ T5780] hsr_slave_0: entered promiscuous mode [ 86.495781][ T5780] hsr_slave_1: entered promiscuous mode [ 86.503066][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.511703][ T5780] Cannot create hsr debugfs directory [ 86.948435][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.978502][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.995485][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.009329][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.110784][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.135975][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.174910][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.216783][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.295962][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.316433][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.375383][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.383463][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.449897][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.530114][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.559415][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.574784][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.611655][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.637360][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.644794][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.683073][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.750448][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.758416][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.899271][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.970918][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.010884][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.018269][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.026099][ T51] Bluetooth: hci1: command tx timeout [ 88.031571][ T51] Bluetooth: hci3: command tx timeout [ 88.042250][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.069162][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.076429][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.103975][ T51] Bluetooth: hci2: command tx timeout [ 88.103994][ T5088] Bluetooth: hci0: command tx timeout [ 88.180619][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.244596][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.251954][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.268249][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.275733][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.305614][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.388495][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.452084][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.459545][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.491082][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.498626][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.602970][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.790385][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.840439][ T5781] veth0_vlan: entered promiscuous mode [ 88.879889][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.912455][ T5781] veth1_vlan: entered promiscuous mode [ 89.036016][ T5779] veth0_vlan: entered promiscuous mode [ 89.061204][ T5781] veth0_macvtap: entered promiscuous mode [ 89.102381][ T5779] veth1_vlan: entered promiscuous mode [ 89.119703][ T5781] veth1_macvtap: entered promiscuous mode [ 89.167413][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.241215][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.269252][ T5779] veth0_macvtap: entered promiscuous mode [ 89.284921][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.295992][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.312272][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.321878][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.331065][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340507][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.360970][ T5779] veth1_macvtap: entered promiscuous mode [ 89.430503][ T5780] veth0_vlan: entered promiscuous mode [ 89.447128][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.458079][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.473032][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.501540][ T5780] veth1_vlan: entered promiscuous mode [ 89.532969][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.556834][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.569789][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.631675][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.642434][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.651903][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662083][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716260][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.731285][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.750698][ T5778] veth0_vlan: entered promiscuous mode [ 89.780948][ T5778] veth1_vlan: entered promiscuous mode [ 89.871679][ T5780] veth0_macvtap: entered promiscuous mode [ 89.897912][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.913294][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.925407][ T5780] veth1_macvtap: entered promiscuous mode [ 89.940729][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.961188][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.018821][ T5778] veth0_macvtap: entered promiscuous mode [ 90.048124][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.065393][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.077925][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.083558][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.097670][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.109426][ T5088] Bluetooth: hci3: command tx timeout [ 90.110725][ T51] Bluetooth: hci1: command tx timeout [ 90.115100][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.134827][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.143989][ T5778] veth1_macvtap: entered promiscuous mode [ 90.172309][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.184212][ T51] Bluetooth: hci2: command tx timeout [ 90.194194][ T51] Bluetooth: hci0: command tx timeout [ 90.215511][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.228916][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.239834][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.260115][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.275842][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.285177][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294172][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.304342][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517526][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.544113][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.554792][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.567381][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.577605][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.590535][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.603453][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.645427][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.653352][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.690710][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.711502][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.722385][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.735004][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.745810][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.756890][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.781911][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.856378][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.861087][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.876612][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.885861][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.887306][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.903188][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.925687][ T5855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.146376][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.176437][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.249376][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.257816][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.301792][ T5859] UBIFS error (pid: 5859): cannot open "ubi0:test", error -19 [ 91.450637][ T5862] bonding: bo is being created... [ 91.747802][ T2946] bond0: (slave bond_slave_0): interface is now down [ 91.771191][ T2946] bond0: (slave bond_slave_1): interface is now down [ 91.884727][ T48] bond0: (slave bond_slave_0): interface is now down [ 91.891580][ T48] bond0: (slave bond_slave_1): interface is now down [ 91.978074][ T5870] CIFS: Attempting to mount //127.0.0.1/share [ 92.015577][ T2931] bond0: (slave bond_slave_0): interface is now down [ 92.022380][ T2931] bond0: (slave bond_slave_1): interface is now down [ 92.165364][ T146] bond0: (slave bond_slave_0): interface is now down [ 92.184144][ T51] Bluetooth: hci1: command tx timeout [ 92.188063][ T5088] Bluetooth: hci3: command tx timeout [ 92.204613][ T146] bond0: (slave bond_slave_1): interface is now down [ 92.237138][ T146] bond0: now running without any active interface! [ 92.266892][ T5088] Bluetooth: hci0: command tx timeout [ 92.272506][ T5088] Bluetooth: hci2: command tx timeout [ 92.448462][ T972] cfg80211: failed to load regulatory.db [ 92.476322][ T5877] bond0: option mode: unable to set because the bond device has slaves [ 92.506609][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.148750][ T5870] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 93.223183][ T5870] CIFS: VFS: cifs_mount failed w/return code = -512 [ 93.564601][ T5898] Zero length message leads to an empty skb [ 93.778064][ T5905] bonding: bo is being created... [ 93.812472][ T5906] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 93.844286][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.932531][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.956084][ T2931] bond0: (slave bond_slave_0): interface is now down [ 93.979949][ T5902] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988705][ T2931] bond0: (slave bond_slave_1): interface is now down [ 94.027791][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.039505][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.049549][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.062955][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.073247][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.083454][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.095686][ T2952] bond0: (slave bond_slave_0): interface is now down [ 94.101438][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.102462][ T2952] bond0: (slave bond_slave_1): interface is now down [ 94.168759][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.191348][ T2952] bond0: now running without any active interface! [ 94.212238][ T27] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 94.243815][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 94.254086][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.283798][ T27] usb 1-1: Product: syz [ 94.303710][ T27] usb 1-1: Manufacturer: syz [ 94.308430][ T27] usb 1-1: SerialNumber: syz [ 94.363025][ T5914] nvmet_rdma: address family 255 not supported [ 94.443891][ T5912] null_blk: disk nullb1 created [ 94.481441][ T5912] nvmet: adding nsid 1 to subsystem testsubsys [ 95.376923][ T27] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 95.751924][ T5912] nvme nvme0: creating 2 I/O queues. [ 95.881066][ T5912] nvme nvme0: new ctrl: "testsubsys" [ 96.010532][ T5931] binder: 5930:5931 ioctl 80045017 200000000400 returned -22 [ 96.075837][ T5933] overlayfs: failed to resolve './file0': -2 [ 96.548878][ T5856] usb 1-1: USB disconnect, device number 2 [ 96.613984][ T5946] bonding: bond0 is being created... [ 96.620239][ T5946] bonding: bond0 already exists [ 96.713717][ T5946] bond0: (slave bond_slave_1): Releasing backup interface [ 97.009277][ T5951] bond0: option mode: unable to set because the bond device has slaves [ 97.081671][ T5946] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 97.121512][ T5946] bond0: option slaves: unable to set because the bond device is up [ 98.047875][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.141854][ T5969] Bluetooth: MGMT ver 1.22 [ 98.240432][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.267662][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.281870][ T5856] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 98.295089][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.332590][ T5856] usb 1-1: config 0 descriptor?? [ 98.563550][ T5961] NFSD: attempt to initialize umh client tracking in a container ignored. [ 98.581915][ T5961] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 98.628303][ T5961] NFSD: Unable to initialize client recovery tracking! (-22) [ 98.655920][ T5961] NFSD: starting 90-second grace period (net f0000459) [ 98.732485][ T5985] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 98.753830][ T5985] e1000: probe of 0000:00:01.0 failed with error -5 [ 98.942264][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.951644][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.961111][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.968380][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.975781][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.983500][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 98.990709][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.002961][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.030176][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.043150][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.073816][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.081305][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.127084][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.163478][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.170913][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.214035][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.221822][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.251891][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.265043][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.438255][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.461065][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 99.469327][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.285049][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.292660][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.300187][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.314534][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.354309][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.362115][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.423952][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.431240][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.484532][ T5856] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 100.550830][ T5856] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 100.680713][ T5856] usb 1-1: USB disconnect, device number 3 [ 100.994887][ T6003] fido_id[6003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.115238][ T6013] PM: suspend entry (s2idle) [ 101.352713][ T6013] Filesystems sync: 0.231 seconds [ 102.062717][ T6013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.069345][ T6013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.460342][ T6013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.611312][ T6013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.644956][ T6013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.700275][ T6013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.739347][ T6013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.777936][ T6013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.856098][ T6013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.939855][ T6013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.974299][ T6013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.022799][ T6013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.059774][ T6013] Freezing user space processes [ 103.195665][ T6013] Freezing user space processes completed (elapsed 0.081 seconds) [ 103.211562][ T6013] OOM killer disabled. [ 103.216625][ T6013] Freezing remaining freezable tasks [ 103.226567][ T6013] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 103.237483][ T6013] PM: suspend debug: Waiting for 0 second(s). [ 103.248139][ T6013] OOM killer enabled. [ 103.254322][ T6013] Restarting tasks ... done. [ 103.280830][ T6013] random: crng reseeded on system resumption [ 103.351705][ T6013] PM: suspend exit [ 103.389791][ T6040] binder: 6035:6040 ioctl 80045017 200000000400 returned -22 [ 103.461969][ T6043] overlayfs: failed to resolve './file0': -2 [ 103.572427][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.295782][ T6047] bond0: option mode: unable to set because the bond device has slaves [ 104.663636][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.747784][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.952846][ T28] audit: type=1804 audit(1789433107.557:2): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.68" name="/newroot/17/nfsd/portlist" dev="nfsd" ino=13 res=1 errno=0 [ 104.988440][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.670466][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.434409][ T6076] binder: 6071:6076 ioctl 80045017 200000000400 returned -22 [ 106.505490][ T6079] overlayfs: failed to resolve './file0': -2 [ 106.795981][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.852680][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.187980][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.704607][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.823306][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.902908][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.233339][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.298315][ T6109] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 109.902860][ T27] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 110.190971][ T6109] nvme nvme1: creating 2 I/O queues. [ 110.202059][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.382660][ T6109] nvme nvme1: new ctrl: "testsubsys" [ 110.756870][ T6138] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 110.768434][ T6138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.823685][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.913448][ T6111] NFSD: attempt to initialize umh client tracking in a container ignored. [ 110.927773][ T6111] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 110.940797][ T6111] NFSD: Unable to initialize client recovery tracking! (-22) [ 110.950560][ T6111] NFSD: starting 90-second grace period (net f0000459) [ 111.026162][ T27] usb 3-1: New USB device found, idVendor=3412, idProduct=7856, bcdDevice= 1.00 [ 111.041137][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.175714][ T6144] bonding: bon is being created... [ 113.172542][ C1] sched: RT throttling activated [ 113.181109][ T8] usb 3-1: USB disconnect, device number 2 [ 113.640229][ T6162] binder: 6158:6162 ioctl 80045017 200000000400 returned -22 [ 113.709884][ T6163] overlayfs: failed to resolve './file0': -2 [ 114.326907][ T6164] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 114.482870][ T6169] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.610316][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.635231][ T6177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.693042][ T27] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 114.712734][ T6177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 114.732515][ T6169] nvme nvme2: creating 2 I/O queues. [ 114.745394][ T6169] nvme nvme2: new ctrl: "testsubsys" [ 114.758118][ T6180] bonding: bond0 is being created... [ 114.773594][ T6180] bonding: bond0 already exists [ 114.792499][ T6180] bond0: (slave bond_slave_0): Releasing backup interface [ 114.866785][ T6182] bonding: bon is being created... [ 114.949993][ T6183] bond0: (slave bond_slave_1): Releasing backup interface [ 115.151977][ T6180] bond0: (slave bond_slave_0): making interface the new active one [ 115.180188][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.199973][ T6190] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 115.326854][ T6190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.109'. [ 116.158212][ T6199] binder: 6197:6199 ioctl 80045017 200000000400 returned -22 [ 116.228452][ T6201] overlayfs: failed to resolve './file0': -2 [ 116.416171][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.895519][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 116.986006][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 117.056962][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.121360][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.202697][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.216760][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.235841][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.249887][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.416041][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.445611][ T6212] bonding: bon is being created... [ 117.456586][ T48] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 117.486642][ T48] bond0: now running without any active interface! [ 117.504062][ T23] usb 2-1: usb_control_msg returned -32 [ 117.510429][ T23] usbtmc 2-1:16.0: can't read capabilities [ 117.570770][ T6217] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.582771][ T6217] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 117.855758][ T6225] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 117.936201][ T8] smpboot: CPU 1 is now offline [ 119.445652][ T5824] usb 2-1: USB disconnect, device number 2 [ 119.714090][ T48] bond0: (slave bond_slave_0): link status definitely up [ 119.761946][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.315908][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.121'. [ 121.780195][ T6234] binder: 6232:6234 ioctl 80045017 200000000400 returned -22 [ 121.823796][ T6229] bond1: (slave geneve2): making interface the new active one [ 121.840109][ T6238] overlayfs: failed to resolve './file0': -2 [ 121.879679][ T6229] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 121.945761][ T6243] bond0: option mode: unable to set because the bond device has slaves [ 122.128314][ T6236] bond0: option mode: unable to set because the bond device has slaves [ 122.416671][ T6235] bond0: ARP target 192.168.1.1 is already present [ 122.542694][ T6256] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.562603][ T6235] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 122.638737][ T6237] bond0: option mode: unable to set because the bond device has slaves [ 122.724192][ T6256] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 122.786551][ T6236] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 122.823100][ T6260] bonding: bon is being created... [ 122.908508][ T6236] bond0: option slaves: unable to set because the bond device is up [ 125.172368][ T5824] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.887727][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 125.902838][ T6266] NFSD: attempt to initialize umh client tracking in a container ignored. [ 127.657915][ T6279] binder: 6278:6279 ioctl 80045017 200000000400 returned -22 [ 127.679297][ T6282] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 127.691660][ T6266] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 127.725540][ T6280] overlayfs: failed to resolve './file0': -2 [ 127.738854][ T5824] usb 1-1: device descriptor read/all, error -71 [ 127.806545][ T6266] NFSD: Unable to initialize client recovery tracking! (-22) [ 127.863081][ T6266] NFSD: starting 90-second grace period (net f000045e) [ 127.915153][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.962642][ T6284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.135'. [ 128.166516][ T6288] bond1: (slave geneve2): making interface the new active one [ 128.244788][ T6288] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.404139][ T6295] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 128.524996][ T6295] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 128.716566][ T6301] bonding: bon is being created... [ 128.733320][ T6301] bonding: bon already exists [ 130.291681][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.879870][ T6311] binder: 6309:6311 ioctl 80045017 200000000400 returned -22 [ 131.084085][ T6311] overlayfs: failed to resolve './file0': -2 [ 131.171693][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 131.197539][ T788] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 131.230708][ T788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.301679][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.366532][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.414502][ T788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.918873][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.975124][ T146] nvme nvme1: rescanning namespaces. [ 132.980720][ T11] nvme nvme2: rescanning namespaces. [ 132.986528][ T12] nvme nvme0: rescanning namespaces. [ 133.091620][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.160976][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.259607][ T5824] nvmet: creating nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 133.417688][ T6318] nvme nvme3: creating 1 I/O queues. [ 133.456353][ T6318] nvme nvme3: new ctrl: "testsubsys" [ 133.512126][ T788] usb 2-1: usb_control_msg returned -71 [ 133.561550][ T788] usbtmc 2-1:16.0: can't read capabilities [ 133.630073][ T788] usb 2-1: USB disconnect, device number 3 [ 134.125590][ T6334] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 134.191810][ T6334] bond0: option slaves: unable to set because the bond device is up [ 134.682695][ T6344] binder: 6343:6344 ioctl 80045017 200000000400 returned -22 [ 134.771235][ T6345] overlayfs: failed to resolve './file0': -2 [ 135.072078][ T6351] bond0: option mode: unable to set because the bond device has slaves [ 135.497960][ T788] nvmet: creating nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 135.566963][ T6355] nvme nvme4: creating 1 I/O queues. [ 135.603625][ T6355] nvme nvme4: new ctrl: "testsubsys" [ 137.428186][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.671327][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 137.691302][ T788] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 137.699748][ T788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.799037][ T6376] bond0: (slave bond_slave_0): Releasing backup interface [ 137.831243][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.872351][ T6377] bond0: option slaves: invalid value (-bond_slave_1) [ 137.892345][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.960103][ T788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.014321][ T6376] bond0: ARP target 192.168.1.1 is already present [ 138.020939][ T6376] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 138.041299][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.078485][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.123373][ T6376] bond0: (slave bond_slave_0): making interface the new active one [ 138.171667][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.350272][ T788] usb 2-1: usb_control_msg returned -32 [ 138.369871][ T788] usbtmc 2-1:16.0: can't read capabilities [ 138.380677][ T6381] bond0: option mode: unable to set because the bond device has slaves [ 138.902722][ T6392] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 138.937599][ T8] nvmet: creating nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 138.986236][ T6387] nvme nvme5: creating 1 I/O queues. [ 139.006730][ T6387] nvme nvme5: new ctrl: "testsubsys" [ 139.049637][ T6392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.093253][ T6395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.173'. [ 141.404815][ T788] usb 2-1: USB disconnect, device number 4 [ 141.754661][ T6413] binder: 6408:6413 ioctl 80045017 200000000400 returned -22 [ 141.772879][ T6411] bond0: option mode: unable to set because the bond device has slaves [ 143.744277][ T6413] overlayfs: failed to resolve './file0': -2 [ 144.157429][ T6423] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 144.206195][ T6424] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.292369][ T6423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.349963][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'. [ 144.454047][ T788] nvmet: creating nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 144.530723][ T6424] nvme nvme6: creating 1 I/O queues. [ 144.582468][ T6424] nvme nvme6: new ctrl: "testsubsys" [ 144.952022][ T8] nvmet: creating nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 145.054548][ T6436] nvme nvme7: creating 1 I/O queues. [ 145.132369][ T6436] nvme nvme7: new ctrl: "testsubsys" [ 146.968104][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.043188][ T6451] bond0: option mode: unable to set because the bond device has slaves [ 147.270834][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 147.291824][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 147.333274][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.026031][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.384291][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.543535][ T6459] binder: 6457:6459 ioctl 80045017 200000000400 returned -22 [ 149.583693][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.679072][ T6459] overlayfs: failed to resolve './file0': -2 [ 149.765029][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.842918][ T6460] bond0: (slave bond_slave_0): Releasing backup interface [ 149.878927][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.024020][ T8] usb 1-1: can't set config #16, error -71 [ 150.082748][ T8] usb 1-1: USB disconnect, device number 6 [ 150.281001][ T6466] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 150.399877][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.454485][ T6468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 150.608602][ T6469] bond1: (slave geneve2): making interface the new active one [ 150.690930][ T6469] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 150.763493][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.821765][ T2966] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 150.898856][ T2966] bond0: now running without any active interface! [ 151.039132][ T6482] block device autoloading is deprecated and will be removed. [ 151.340462][ T6491] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 153.081596][ T788] nvmet: creating nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 155.283152][ T6491] nvme nvme8: creating 1 I/O queues. [ 155.312716][ T6491] nvme nvme8: new ctrl: "testsubsys" [ 155.412231][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.680313][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 155.803343][ T6507] binder: 6506:6507 ioctl 80045017 200000000400 returned -22 [ 155.814301][ T788] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 155.872895][ T788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.921403][ T6507] overlayfs: failed to resolve './file0': -2 [ 155.985607][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.000453][ T6514] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 156.089364][ T788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.221172][ T788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.305694][ T6514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.347140][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.388077][ T6518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.207'. [ 156.444487][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.550404][ T788] usb 2-1: can't set config #16, error -71 [ 156.610790][ T788] usb 2-1: USB disconnect, device number 5 [ 158.330683][ T6524] bond0: option mode: unable to set because the bond device has slaves [ 160.496795][ T6520] bond0: option mode: unable to set because the bond device has slaves [ 160.582283][ T6523] bond0: option mode: unable to set because the bond device has slaves [ 161.299398][ T6549] binder: 6547:6549 ioctl 80045017 200000000400 returned -22 [ 161.391063][ T6552] overlayfs: failed to resolve './file0': -2 [ 161.550003][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.737903][ T6559] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 161.762490][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 161.795852][ T788] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 161.817578][ T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.852732][ T6559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.863215][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.888325][ T6561] tipc: Started in network mode [ 161.902919][ T6561] tipc: Node identity 1001001, cluster identity 4711 [ 161.920071][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.935206][ T6561] tipc: Node number set to 16781313 [ 161.960802][ T788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.992124][ T6563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.221'. [ 162.036150][ T788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.099656][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.529913][ T788] usb 4-1: usb_control_msg returned -32 [ 162.565864][ T788] usbtmc 4-1:16.0: can't read capabilities [ 164.360872][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.434621][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.518765][ T8] usb 4-1: USB disconnect, device number 2 [ 166.782066][ T6582] bond0: (slave bond_slave_0): Releasing backup interface [ 166.824162][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.870608][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.887996][ T6587] bond0: option slaves: invalid value (-bond_slave_1) [ 166.928624][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.949055][ T6582] bond0: ARP target 192.168.1.1 is already present [ 166.980306][ T6582] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 166.989834][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 167.053443][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 167.083083][ T6582] bond0: (slave bond_slave_0): making interface the new active one [ 167.124276][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 167.141940][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.179708][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 167.238504][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 167.520537][ T6595] binder: 6592:6595 ioctl 80045017 200000000400 returned -22 [ 167.706587][ T6593] overlayfs: failed to resolve './file0': -2 [ 167.736960][ T6598] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 169.430830][ T6598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.601615][ T6618] block device autoloading is deprecated and will be removed. [ 175.157806][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.724460][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.245'. [ 175.799171][ T6646] bonding: bond0 is being created... [ 175.838143][ T6646] bonding: bond0 already exists [ 175.876495][ T6646] bond0: option mode: unable to set because the bond device has slaves [ 176.253104][ T6651] svc: failed to register nfsdv3 RPC service (errno 111). [ 176.307564][ T6651] svc: failed to register nfsaclv3 RPC service (errno 111). [ 176.507355][ T788] nvmet: creating nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 176.599671][ T6656] nvme nvme9: creating 1 I/O queues. [ 176.665895][ T6656] nvme nvme9: new ctrl: "testsubsys" [ 176.742241][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.760659][ T6664] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 176.792722][ T11] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 176.841675][ T11] bond0: now running without any active interface! [ 177.005671][ T788] nvmet: creating nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 177.084947][ T6664] nvme nvme10: creating 1 I/O queues. [ 177.122043][ T6664] nvme nvme10: new ctrl: "testsubsys" [ 179.027045][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.148839][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 182.404230][ T788] usb 3-1: device descriptor read/all, error -71 [ 184.732472][ T6688] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 184.771939][ T6692] binder: 6690:6692 ioctl 80045017 200000000400 returned -22 [ 184.836189][ T6696] overlayfs: failed to resolve './file0': -2 [ 184.894213][ T6688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.584161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.725287][ T6741] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 194.883981][ T6741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.935349][ T6745] binder: 6744:6745 ioctl 80045017 200000000400 returned -22 [ 195.002464][ T6748] overlayfs: failed to resolve './file0': -2 [ 200.967706][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.047801][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 204.199870][ T6780] binder: 6779:6780 ioctl 80045017 200000000400 returned -22 [ 204.269655][ T6782] overlayfs: failed to resolve './file0': -2 [ 204.486470][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.496139][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.505220][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.514768][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.522876][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.531861][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.917111][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.927785][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.936211][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.944905][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.955151][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.966937][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.186185][ T9] usb 2-1: device descriptor read/all, error -71 [ 206.832605][ T5088] Bluetooth: hci1: command tx timeout [ 207.057788][ T5088] Bluetooth: hci2: command tx timeout [ 207.284726][ T146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.898055][ T5088] Bluetooth: hci1: command tx timeout [ 209.015931][ T146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.219696][ T5088] Bluetooth: hci2: command tx timeout [ 210.982507][ T5088] Bluetooth: hci1: command tx timeout [ 211.297078][ T5088] Bluetooth: hci2: command tx timeout [ 212.926019][ T146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.057207][ T5088] Bluetooth: hci1: command tx timeout [ 214.157358][ T5088] Bluetooth: hci2: command tx timeout [ 214.641783][ T6820] binder: 6817:6820 ioctl 80045017 200000000400 returned -22 [ 214.703333][ T6822] overlayfs: failed to resolve './file0': -2 [ 214.999195][ T146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.230756][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 221.556265][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 225.401771][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.497098][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.504376][ T6786] bridge_slave_0: entered allmulticast mode [ 225.549242][ T6878] binder: 6875:6878 ioctl 80045017 200000000400 returned -22 [ 225.591628][ T6786] bridge_slave_0: entered promiscuous mode [ 225.612403][ T6880] overlayfs: failed to resolve './file0': -2 [ 225.641451][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.691858][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.738355][ T6786] bridge_slave_1: entered allmulticast mode [ 225.782510][ T6786] bridge_slave_1: entered promiscuous mode [ 227.938682][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.011201][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.170512][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.194217][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.185420][ T6790] bridge_slave_0: entered allmulticast mode [ 230.317167][ T6790] bridge_slave_0: entered promiscuous mode [ 230.514336][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.560864][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.589696][ T6790] bridge_slave_1: entered allmulticast mode [ 230.618133][ T6790] bridge_slave_1: entered promiscuous mode [ 230.809725][ T6786] team0: Port device team_slave_0 added [ 232.154997][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.491012][ T6786] team0: Port device team_slave_1 added [ 232.554033][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.165587][ T6790] team0: Port device team_slave_0 added [ 233.194358][ T6912] binder: 6910:6912 ioctl 80045017 200000000400 returned -22 [ 233.258090][ T6915] overlayfs: failed to resolve './file0': -2 [ 233.321127][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.357017][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.665901][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.197079][ T6790] team0: Port device team_slave_1 added [ 235.557328][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.091787][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.390368][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.607459][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.614471][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.809499][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.880942][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.915078][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.040896][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.180623][ T146] hsr_slave_0: left promiscuous mode [ 243.404552][ T146] hsr_slave_1: left promiscuous mode [ 243.422221][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.788107][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.821344][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.844676][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.866529][ T146] bridge_slave_1: left allmulticast mode [ 244.995446][ T146] bridge_slave_1: left promiscuous mode [ 245.002459][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.047596][ T146] bridge_slave_0: left allmulticast mode [ 245.068511][ T6957] binder: 6956:6957 ioctl 80045017 200000000400 returned -22 [ 245.077102][ T146] bridge_slave_0: left promiscuous mode [ 245.082847][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.129875][ T6959] overlayfs: failed to resolve './file0': -2 [ 245.282016][ T146] veth1_macvtap: left promiscuous mode [ 245.317903][ T146] veth0_macvtap: left promiscuous mode [ 245.332442][ T146] veth1_vlan: left promiscuous mode [ 245.358173][ T146] veth0_vlan: left promiscuous mode [ 249.691604][ T146] bond3 (unregistering): Released all slaves [ 254.766080][ T6989] binder: 6988:6989 ioctl 80045017 200000000400 returned -22 [ 254.776075][ T146] bond2 (unregistering): Released all slaves [ 254.842109][ T6991] overlayfs: failed to resolve './file0': -2 [ 254.907109][ T146] bond1 (unregistering): (slave geneve2): Releasing active interface [ 255.421970][ T146] bond1 (unregistering): Released all slaves [ 255.481551][ T146] bon (unregistering): Released all slaves [ 257.144907][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.585215][ T7011] binder: 7010:7011 ioctl 80045017 200000000400 returned -22 [ 259.650468][ T7013] overlayfs: failed to resolve './file0': -2 [ 265.565437][ T7040] binder: 7039:7040 ioctl 80045017 200000000400 returned -22 [ 265.626863][ T7046] overlayfs: failed to resolve './file0': -2 [ 266.023268][ T146] team0 (unregistering): Port device team_slave_1 removed [ 266.039376][ T7044] block device autoloading is deprecated and will be removed. [ 266.155321][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.183278][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.191875][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.200740][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.209463][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 266.217093][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.582682][ T146] team0 (unregistering): Port device team_slave_0 removed [ 268.251601][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.260973][ T5792] Bluetooth: hci4: command tx timeout [ 268.268874][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.277364][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.285186][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.294435][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 268.301740][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.344145][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.139840][ T5088] Bluetooth: hci5: command tx timeout [ 271.146240][ T51] Bluetooth: hci4: command tx timeout [ 273.835827][ T5088] Bluetooth: hci5: command tx timeout [ 273.841364][ T51] Bluetooth: hci4: command tx timeout [ 275.853891][ T51] Bluetooth: hci4: command tx timeout [ 275.859418][ T5088] Bluetooth: hci5: command tx timeout [ 276.509072][ T146] bond0 (unregistering): Released all slaves [ 276.644778][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.778957][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.898250][ T8] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 276.970851][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.060077][ T8] usb 3-1: Product: syz [ 277.130721][ T8] usb 3-1: Manufacturer: syz [ 277.168436][ T8] usb 3-1: SerialNumber: syz [ 278.834095][ T51] Bluetooth: hci5: command tx timeout [ 278.843995][ T8] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 279.042477][ T8] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 279.160076][ T8] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 279.320099][ T7116] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 279.373083][ T8] kalmia 3-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle, d6:a7:71:f3:a8:61 [ 279.881934][ T5824] nvmet: creating nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:02925a7e-6601-49f9-b5ba-37dcfb12348e. [ 279.987414][ T5929] usb 3-1: USB disconnect, device number 6 [ 280.029351][ T5929] kalmia 3-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle [ 280.081834][ T7116] nvme nvme11: creating 1 I/O queues. [ 280.147935][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 280.163762][ T7116] nvme nvme11: new ctrl: "testsubsys" [ 280.823147][ T5824] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 282.272878][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 282.901098][ T5824] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.928199][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.984211][ T5824] usb 1-1: Product: syz [ 283.013097][ T5824] usb 1-1: Manufacturer: syz [ 283.017747][ T5824] usb 1-1: SerialNumber: syz [ 283.116278][ T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.492752][ T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.696380][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.721914][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.730409][ T7052] bridge_slave_0: entered allmulticast mode [ 283.750543][ T7052] bridge_slave_0: entered promiscuous mode [ 283.819610][ T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.887083][ T5824] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 283.913759][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.921050][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.967286][ T5824] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 283.990718][ T7061] bridge_slave_0: entered allmulticast mode [ 284.010267][ T7061] bridge_slave_0: entered promiscuous mode [ 284.033929][ T5824] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 284.064281][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.078203][ T7164] ================================================================== [ 284.086363][ T7164] BUG: KASAN: slab-use-after-free in nfsd_create_serv+0x116/0x5c0 [ 284.094202][ T7164] Write of size 4 at addr ffff88802c573450 by task syz.2.369/7164 [ 284.102011][ T7164] [ 284.104353][ T7164] CPU: 0 PID: 7164 Comm: syz.2.369 Not tainted syzkaller #0 [ 284.111642][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.121823][ T7164] Call Trace: [ 284.125134][ T7164] [ 284.128181][ T7164] dump_stack_lvl+0x18c/0x250 [ 284.132907][ T7164] ? __lock_acquire+0x7d80/0x7d80 [ 284.137968][ T7164] ? show_regs_print_info+0x20/0x20 [ 284.143206][ T7164] ? load_image+0x420/0x420 [ 284.147808][ T7164] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 284.153286][ T7164] ? __virt_addr_valid+0x10c/0x380 [ 284.158410][ T7164] ? __virt_addr_valid+0x10c/0x380 [ 284.163534][ T7164] ? __virt_addr_valid+0x10c/0x380 [ 284.168662][ T7164] ? __virt_addr_valid+0x10c/0x380 [ 284.174221][ T7164] print_report+0xa8/0x210 [ 284.178834][ T7164] ? nfsd_create_serv+0x116/0x5c0 [ 284.183899][ T7164] kasan_report+0x117/0x150 [ 284.188419][ T7164] ? nfsd_create_serv+0x116/0x5c0 [ 284.193458][ T7164] kasan_check_range+0x241/0x290 [ 284.198434][ T7164] nfsd_create_serv+0x116/0x5c0 [ 284.203325][ T7164] ? nfsd+0x270/0x270 [ 284.207336][ T7164] ? nfsd_svc+0x65/0xab0 [ 284.211759][ T7164] ? __lock_acquire+0x7d80/0x7d80 [ 284.216901][ T7164] ? mutex_lock_nested+0x20/0x20 [ 284.222227][ T7164] ? net_generic+0x1e/0x240 [ 284.226773][ T7164] ? net_generic+0x1e/0x240 [ 284.231514][ T7164] nfsd_svc+0x183/0xab0 [ 284.235771][ T7164] ? qword_get+0x5a9/0x640 [ 284.240351][ T7164] write_threads+0x393/0x510 [ 284.245071][ T7164] ? write_unlock_fs+0x450/0x450 [ 284.250417][ T7164] ? __might_fault+0xaa/0x120 [ 284.255222][ T7164] ? __might_fault+0xaa/0x120 [ 284.259922][ T7164] ? simple_transaction_get+0x11d/0x140 [ 284.265498][ T7164] nfsctl_transaction_write+0x10c/0x150 [ 284.271079][ T7164] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 284.276752][ T7164] vfs_write+0x299/0x9a0 [ 284.281055][ T7164] ? file_end_write+0x250/0x250 [ 284.285947][ T7164] ? __fget_files+0x28/0x460 [ 284.290563][ T7164] ? __fget_files+0x3fc/0x460 [ 284.295265][ T7164] ? __fdget_pos+0x2a3/0x330 [ 284.299880][ T7164] ? ksys_write+0x74/0x260 [ 284.304361][ T7164] ksys_write+0x151/0x260 [ 284.308773][ T7164] ? __ia32_sys_read+0x90/0x90 [ 284.313578][ T7164] ? lockdep_hardirqs_on+0x98/0x150 [ 284.318800][ T7164] do_syscall_64+0x55/0xb0 [ 284.323268][ T7164] ? clear_bhb_loop+0x40/0x90 [ 284.327990][ T7164] ? clear_bhb_loop+0x40/0x90 [ 284.332701][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.338638][ T7164] RIP: 0033:0x7fe7f919e159 [ 284.343085][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.362711][ T7164] RSP: 002b:00007fe7fa005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.371233][ T7164] RAX: ffffffffffffffda RBX: 00007fe7f9425fa0 RCX: 00007fe7f919e159 [ 284.379265][ T7164] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 284.387275][ T7164] RBP: 00007fe7f923503b R08: 0000000000000000 R09: 0000000000000000 [ 284.395280][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.403290][ T7164] R13: 00007fe7f9426038 R14: 00007fe7f9425fa0 R15: 00007fff1a3cd0a8 [ 284.411299][ T7164] [ 284.414326][ T7164] [ 284.416671][ T7164] Allocated by task 7164: [ 284.421019][ T7164] kasan_set_track+0x4e/0x70 [ 284.425752][ T7164] __kasan_kmalloc+0x8f/0xa0 [ 284.430645][ T7164] __svc_create+0x60/0xbb0 [ 284.435128][ T7164] svc_create_pooled+0x66a/0x7e0 [ 284.440118][ T7164] nfsd_create_serv+0x29f/0x5c0 [ 284.445075][ T7164] write_ports+0x698/0xfa0 [ 284.449504][ T7164] nfsctl_transaction_write+0x10c/0x150 [ 284.455150][ T7164] vfs_write+0x299/0x9a0 [ 284.459440][ T7164] ksys_write+0x151/0x260 [ 284.463906][ T7164] do_syscall_64+0x55/0xb0 [ 284.468451][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.474371][ T7164] [ 284.476729][ T7164] Freed by task 7164: [ 284.480820][ T7164] kasan_set_track+0x4e/0x70 [ 284.485618][ T7164] kasan_save_free_info+0x28/0x40 [ 284.490683][ T7164] ____kasan_slab_free+0x126/0x1f0 [ 284.495810][ T7164] slab_free_freelist_hook+0x130/0x1a0 [ 284.501281][ T7164] __kmem_cache_free+0xba/0x1f0 [ 284.506172][ T7164] write_ports+0xb1a/0xfa0 [ 284.510605][ T7164] nfsctl_transaction_write+0x10c/0x150 [ 284.516172][ T7164] vfs_write+0x299/0x9a0 [ 284.520467][ T7164] ksys_write+0x151/0x260 [ 284.524815][ T7164] do_syscall_64+0x55/0xb0 [ 284.529270][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.535210][ T7164] [ 284.537543][ T7164] Last potentially related work creation: [ 284.543297][ T7164] kasan_save_stack+0x3e/0x60 [ 284.547985][ T7164] __kasan_record_aux_stack+0xaf/0xc0 [ 284.553372][ T7164] kvfree_call_rcu+0xee/0x780 [ 284.558063][ T7164] ops_init+0x311/0x640 [ 284.562244][ T7164] register_pernet_operations+0x2a7/0x610 [ 284.567991][ T7164] register_pernet_subsys+0x28/0x40 [ 284.573395][ T7164] nfnetlink_log_init+0x16/0xd0 [ 284.578267][ T7164] do_one_initcall+0x242/0x790 [ 284.583048][ T7164] do_initcall_level+0x13d/0x1f0 [ 284.587994][ T7164] do_initcalls+0x69/0xd0 [ 284.592336][ T7164] kernel_init_freeable+0x3d9/0x560 [ 284.597724][ T7164] kernel_init+0x1d/0x1c0 [ 284.602068][ T7164] ret_from_fork+0x48/0x80 [ 284.606610][ T7164] ret_from_fork_asm+0x11/0x20 [ 284.611404][ T7164] [ 284.613781][ T7164] The buggy address belongs to the object at ffff88802c573400 [ 284.613781][ T7164] which belongs to the cache kmalloc-512 of size 512 [ 284.627892][ T7164] The buggy address is located 80 bytes inside of [ 284.627892][ T7164] freed 512-byte region [ffff88802c573400, ffff88802c573600) [ 284.641635][ T7164] [ 284.643987][ T7164] The buggy address belongs to the physical page: [ 284.650437][ T7164] page:ffffea0000b15c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c570 [ 284.660950][ T7164] head:ffffea0000b15c00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 284.669938][ T7164] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 284.678296][ T7164] page_type: 0xffffffff() [ 284.682751][ T7164] raw: 00fff00000000840 ffff888017c41c80 ffffea0001778d00 dead000000000002 [ 284.691480][ T7164] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 284.700153][ T7164] page dumped because: kasan: bad access detected [ 284.706618][ T7164] page_owner tracks the page as allocated [ 284.712557][ T7164] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24007125046, free_ts 0 [ 284.732723][ T7164] post_alloc_hook+0x1c1/0x200 [ 284.737511][ T7164] get_page_from_freelist+0x2181/0x22a0 [ 284.743067][ T7164] __alloc_pages+0x1f0/0x460 [ 284.747666][ T7164] alloc_page_interleave+0x24/0x1e0 [ 284.752873][ T7164] alloc_slab_page+0x5d/0x180 [ 284.757566][ T7164] new_slab+0x87/0x2d0 [ 284.761655][ T7164] ___slab_alloc+0xc5c/0x12f0 [ 284.766361][ T7164] __kmem_cache_alloc_node+0x11f/0x250 [ 284.771839][ T7164] __kmalloc+0xa7/0x240 [ 284.776011][ T7164] ops_init+0x208/0x640 [ 284.780174][ T7164] register_pernet_operations+0x2a7/0x610 [ 284.785937][ T7164] register_pernet_subsys+0x28/0x40 [ 284.791166][ T7164] tcf_register_action+0x8f/0x650 [ 284.796224][ T7164] do_one_initcall+0x242/0x790 [ 284.801022][ T7164] do_initcall_level+0x13d/0x1f0 [ 284.806003][ T7164] do_initcalls+0x69/0xd0 [ 284.810368][ T7164] page_owner free stack trace missing [ 284.816091][ T7164] [ 284.818424][ T7164] Memory state around the buggy address: [ 284.824147][ T7164] ffff88802c573300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.832407][ T7164] ffff88802c573380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.840502][ T7164] >ffff88802c573400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.848589][ T7164] ^ [ 284.855289][ T7164] ffff88802c573480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.863705][ T7164] ffff88802c573500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.872343][ T7164] ================================================================== [ 284.883520][ T5824] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 284.895359][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.902640][ T7061] bridge_slave_1: entered allmulticast mode [ 284.909443][ T5824] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 284.926716][ T7061] bridge_slave_1: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.966063][ T5824] lan78xx: probe of 1-1:1.0 failed with error -71 [ 285.108739][ T5824] usb 1-1: USB disconnect, device number 7 [ 285.233140][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.240619][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.284339][ T7052] bridge_slave_1: entered allmulticast mode [ 285.308195][ T7052] bridge_slave_1: entered promiscuous mode [ 285.554892][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.937238][ T7164] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 285.944505][ T7164] CPU: 0 PID: 7164 Comm: syz.2.369 Not tainted syzkaller #0 [ 285.951824][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.961934][ T7164] Call Trace: [ 285.965245][ T7164] [ 285.968183][ T7164] dump_stack_lvl+0x18c/0x250 [ 285.972927][ T7164] ? show_regs_print_info+0x20/0x20 [ 285.978144][ T7164] ? load_image+0x420/0x420 [ 285.982671][ T7164] panic+0x2ca/0x720 [ 285.986644][ T7164] ? bpf_jit_dump+0xd0/0xd0 [ 285.991180][ T7164] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 285.997200][ T7164] ? _raw_spin_unlock+0x40/0x40 [ 286.002078][ T7164] ? print_memory_metadata+0x314/0x400 [ 286.007554][ T7164] ? nfsd_create_serv+0x116/0x5c0 [ 286.012630][ T7164] check_panic_on_warn+0x84/0xa0 [ 286.017582][ T7164] ? nfsd_create_serv+0x116/0x5c0 [ 286.022623][ T7164] end_report+0x6f/0x130 [ 286.026875][ T7164] kasan_report+0x128/0x150 [ 286.031391][ T7164] ? nfsd_create_serv+0x116/0x5c0 [ 286.036444][ T7164] kasan_check_range+0x241/0x290 [ 286.041405][ T7164] nfsd_create_serv+0x116/0x5c0 [ 286.046264][ T7164] ? nfsd+0x270/0x270 [ 286.050250][ T7164] ? nfsd_svc+0x65/0xab0 [ 286.054497][ T7164] ? __lock_acquire+0x7d80/0x7d80 [ 286.059552][ T7164] ? mutex_lock_nested+0x20/0x20 [ 286.064510][ T7164] ? net_generic+0x1e/0x240 [ 286.069043][ T7164] ? net_generic+0x1e/0x240 [ 286.073596][ T7164] nfsd_svc+0x183/0xab0 [ 286.077772][ T7164] ? qword_get+0x5a9/0x640 [ 286.082202][ T7164] write_threads+0x393/0x510 [ 286.086804][ T7164] ? write_unlock_fs+0x450/0x450 [ 286.091753][ T7164] ? __might_fault+0xaa/0x120 [ 286.096438][ T7164] ? __might_fault+0xaa/0x120 [ 286.101136][ T7164] ? simple_transaction_get+0x11d/0x140 [ 286.106721][ T7164] nfsctl_transaction_write+0x10c/0x150 [ 286.112288][ T7164] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 286.117931][ T7164] vfs_write+0x299/0x9a0 [ 286.122187][ T7164] ? file_end_write+0x250/0x250 [ 286.127054][ T7164] ? __fget_files+0x28/0x460 [ 286.131661][ T7164] ? __fget_files+0x3fc/0x460 [ 286.136353][ T7164] ? __fdget_pos+0x2a3/0x330 [ 286.141046][ T7164] ? ksys_write+0x74/0x260 [ 286.145491][ T7164] ksys_write+0x151/0x260 [ 286.149842][ T7164] ? __ia32_sys_read+0x90/0x90 [ 286.154618][ T7164] ? lockdep_hardirqs_on+0x98/0x150 [ 286.159822][ T7164] do_syscall_64+0x55/0xb0 [ 286.164249][ T7164] ? clear_bhb_loop+0x40/0x90 [ 286.168938][ T7164] ? clear_bhb_loop+0x40/0x90 [ 286.173627][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.179553][ T7164] RIP: 0033:0x7fe7f919e159 [ 286.183978][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.203602][ T7164] RSP: 002b:00007fe7fa005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.212039][ T7164] RAX: ffffffffffffffda RBX: 00007fe7f9425fa0 RCX: 00007fe7f919e159 [ 286.220046][ T7164] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 286.228233][ T7164] RBP: 00007fe7f923503b R08: 0000000000000000 R09: 0000000000000000 [ 286.236220][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.244197][ T7164] R13: 00007fe7f9426038 R14: 00007fe7f9425fa0 R15: 00007fff1a3cd0a8 [ 286.252181][ T7164] [ 286.255283][ T7164] Kernel Offset: disabled [ 286.259619][ T7164] Rebooting in 86400 seconds..