last executing test programs: 6.136107731s ago: executing program 4 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pnp/devices/00:00\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/1024, 0x400) 6.115135162s ago: executing program 4 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 20000\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2\n', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000240)="112233440000000000000002000186a30000000300000000", 0x18, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000340)="112233440000000000000002000186a3000000030000000100"/40, 0x28, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 5.234275124s ago: executing program 3 (id=182): nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 5.082968801s ago: executing program 3 (id=183): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "1234567800"}, 0x10}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/16, 0x10}], 0x1}, 0x0) 4.983981375s ago: executing program 3 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\n', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180), 0x20}}, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000300)={'bridge0\x00'}) 4.915503138s ago: executing program 3 (id=186): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000c60001010203010902200001010080320904000002ff0000000705020240000007058102400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="fc61") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="fa08") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="fc61") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="fa08") nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x2) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1}) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x2) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1}) syz_open_dev$I2C(&(0x7f0000000280), 0x3, 0x2) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1}) 4.656110501s ago: executing program 4 (id=187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) 3.962294373s ago: executing program 1 (id=191): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x4218, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 3.852588388s ago: executing program 1 (id=192): syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@mgmt_frame=@action={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, @sa_query_req}, 0x1c) 3.214715509s ago: executing program 1 (id=193): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b29010001000000010902200001010080320904000002ffffff000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000640)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/usb/drivers/rtsx_usb/module\x00', 0x0, 0x0) 2.952347381s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\n', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180), 0x20}}, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000300)={'bridge0\x00'}) 2.862253525s ago: executing program 3 (id=197): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='10\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) 2.360081299s ago: executing program 4 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0x0, 0x0}]}, 0x30}}, 0x0) 2.214085486s ago: executing program 4 (id=201): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 1.548460707s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_errors_extension_mask\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='255\n\x00', 0x4) close(r0) syz_emit_ethernet(0xae, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000a0123400004011e68bac1414bbac1414aa3039d431008c0000414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141"], 0x0) 1.436111422s ago: executing program 0 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/1/cmdline\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 1.364733796s ago: executing program 0 (id=210): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x3b, {0x0, "49bf563412efbeadde00b80100000048ba00010400000000004889024c89f8488902f4"}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1b, {"49bf0000000000000000"}}, @nested_vmresume={0x130, 0x18}], 0xb6}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.279530679s ago: executing program 4 (id=211): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1.06809099s ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+4\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) close(r2) 1.0679394s ago: executing program 0 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy1/reset\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) nanosleep(&(0x7f0000000140)={0x1}, 0x0) 910.594737ms ago: executing program 1 (id=214): r0 = fanotify_init(0x8, 0x0) fanotify_mark(r0, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='.\x00') 810.705822ms ago: executing program 1 (id=215): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x0, 0x0) close(r0) 727.477696ms ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000400), 0x1000) 681.481378ms ago: executing program 1 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000580)={0x0, 0x1dcd6500}, &(0x7f00000005c0)) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, &(0x7f0000000640)) nanosleep(&(0x7f0000000680)={0x0, 0x1dcd6500}, &(0x7f00000006c0)) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, &(0x7f0000000740)) 615.326241ms ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/forward_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='3\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='1\n', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180), 0x20}}, 0x0) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000300)={'bridge0\x00'}) 516.298215ms ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/i8042\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/rtc_cmos\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/serial8250.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/alarmtimer.0.auto\x00', 0x0, 0x0) 397.837311ms ago: executing program 2 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ath9k\x00', 0x0, 0x0) 368.637913ms ago: executing program 2 (id=221): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000c60001010203010902200001010080320904000002ff0000000705020240000007058102400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x2) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r3 = syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x2) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) r4 = syz_open_dev$I2C(&(0x7f0000000280), 0x3, 0x2) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)}], 0x1}) 173.875852ms ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='none\x00', 0x4) close(r0) 0s ago: executing program 0 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-4\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. [ 63.601309][ T4260] cgroup: Unknown subsys name 'net' [ 63.742252][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.069486][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.043497][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.062419][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.072140][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.080040][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.087749][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.095182][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.104274][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.112310][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.120645][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.128227][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.131515][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.136439][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.144293][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.150900][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.157307][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.164494][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.171250][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.179224][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.185306][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.192556][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.199515][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.206344][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.220091][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.220127][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.227235][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.235161][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.273051][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.277661][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.282045][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.288510][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.590883][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 67.706305][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.714603][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.723382][ T4289] device bridge_slave_0 entered promiscuous mode [ 67.735122][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.742286][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.750429][ T4289] device bridge_slave_1 entered promiscuous mode [ 67.763775][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 67.823886][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.841387][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 67.852249][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.919669][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 67.935847][ T4289] team0: Port device team_slave_0 added [ 67.971899][ T4289] team0: Port device team_slave_1 added [ 67.979212][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.986387][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.994350][ T4273] device bridge_slave_0 entered promiscuous mode [ 68.025649][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.032958][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.040750][ T4273] device bridge_slave_1 entered promiscuous mode [ 68.052020][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 68.071120][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.078389][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.104415][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.151137][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.160180][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.186325][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.199152][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.231951][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.241287][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.248593][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.256259][ T4272] device bridge_slave_0 entered promiscuous mode [ 68.264394][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.271677][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.279881][ T4272] device bridge_slave_1 entered promiscuous mode [ 68.287495][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.294594][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.302647][ T4276] device bridge_slave_0 entered promiscuous mode [ 68.339168][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.346322][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.354235][ T4276] device bridge_slave_1 entered promiscuous mode [ 68.373880][ T4273] team0: Port device team_slave_0 added [ 68.394291][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.404770][ T4273] team0: Port device team_slave_1 added [ 68.420735][ T4289] device hsr_slave_0 entered promiscuous mode [ 68.428174][ T4289] device hsr_slave_1 entered promiscuous mode [ 68.447636][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.458369][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.468735][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.509388][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.516533][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.524635][ T4274] device bridge_slave_0 entered promiscuous mode [ 68.535542][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.542960][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.569339][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.601757][ T4276] team0: Port device team_slave_0 added [ 68.610073][ T4272] team0: Port device team_slave_0 added [ 68.616138][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.623554][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.631882][ T4274] device bridge_slave_1 entered promiscuous mode [ 68.639991][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.646971][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.673526][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.693829][ T4276] team0: Port device team_slave_1 added [ 68.700890][ T4272] team0: Port device team_slave_1 added [ 68.766968][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.774044][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.800183][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.813166][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.824338][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.831963][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.858022][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.870398][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.878066][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.906730][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.926286][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.935782][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.964441][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.977028][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.999446][ T4273] device hsr_slave_0 entered promiscuous mode [ 69.006122][ T4273] device hsr_slave_1 entered promiscuous mode [ 69.012920][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.020833][ T4273] Cannot create hsr debugfs directory [ 69.041522][ T4274] team0: Port device team_slave_0 added [ 69.073662][ T4274] team0: Port device team_slave_1 added [ 69.135604][ T4272] device hsr_slave_0 entered promiscuous mode [ 69.144719][ T4272] device hsr_slave_1 entered promiscuous mode [ 69.151431][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.159181][ T4272] Cannot create hsr debugfs directory [ 69.176260][ T4276] device hsr_slave_0 entered promiscuous mode [ 69.183227][ T4276] device hsr_slave_1 entered promiscuous mode [ 69.190147][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.197986][ T4276] Cannot create hsr debugfs directory [ 69.208028][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.214992][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.241077][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.253010][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.260006][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.286438][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.359238][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 69.365496][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 69.371921][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 69.378442][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 69.384872][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 69.388278][ T4274] device hsr_slave_0 entered promiscuous mode [ 69.400406][ T4274] device hsr_slave_1 entered promiscuous mode [ 69.407161][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.414944][ T4274] Cannot create hsr debugfs directory [ 69.572924][ T4289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.583222][ T4289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.594904][ T4289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.623481][ T4289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.692665][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.702695][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.716663][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.725821][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.814021][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.824539][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.834143][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.849843][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.859630][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.911780][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.923230][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.934174][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.953242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.963987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.974525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.981908][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.007988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.016378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.027822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.036724][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.043933][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.053345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.063434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.073455][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.083842][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.094093][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.107324][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.142833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.154658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.163724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.175069][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.184245][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.199077][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.210058][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.228132][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.244309][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.254576][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.266908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.276247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.285370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.294057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.304646][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.325550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.335119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.367258][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.393462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.408396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.427573][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.434753][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.506428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.514890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.523979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.533149][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.540328][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.548961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.557867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.570860][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.580136][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.595126][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.609413][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.635095][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.659951][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.674233][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.682784][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.709994][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.721770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.733765][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.746012][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.756998][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.769553][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.778495][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.785592][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.793434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.806952][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.815971][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.831722][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.842710][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.852113][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859266][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.867119][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.877105][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.885300][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.895696][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.914547][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.935571][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.946753][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.955891][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.965153][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.974072][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.983560][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.990719][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.021709][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.032042][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.041641][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.052809][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.062091][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.075955][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.084888][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.099393][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.111917][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.119113][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.128803][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.142508][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.154182][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.171232][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.180873][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.189770][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.201516][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.212241][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.255460][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.263872][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.281051][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.285283][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.288302][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.299276][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.314575][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.325409][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.340312][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.353861][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.379975][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.396326][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.409410][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.420972][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.438004][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 71.444032][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 71.450487][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 71.456505][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 71.460096][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 71.483185][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.494886][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.511506][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.522219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.532050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.541047][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.548232][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.558563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.567705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.576518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.585738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.595353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.602461][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.612591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.621285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.630164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.637943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.698183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.719393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.729612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.753298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.763949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.791229][ T4289] device veth0_vlan entered promiscuous mode [ 71.803908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.814729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.826166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.835437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.843616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.851781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.860910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.873407][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.884740][ T4289] device veth1_vlan entered promiscuous mode [ 71.913599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.924332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.933537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.942879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.953578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.970003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.983306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.993701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.011079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.034327][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.057943][ T4273] device veth0_vlan entered promiscuous mode [ 72.064510][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.082724][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.095801][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.122708][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.132000][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.143436][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.155306][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.179461][ T4289] device veth0_macvtap entered promiscuous mode [ 72.192939][ T4289] device veth1_macvtap entered promiscuous mode [ 72.216221][ T4273] device veth1_vlan entered promiscuous mode [ 72.257957][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.270808][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.289769][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.308641][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.328087][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.335569][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.344691][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.354160][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.372710][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.390635][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.398831][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.406918][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.418071][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.433475][ T4289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.457975][ T4289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.466721][ T4289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.502592][ T4289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536310][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.546071][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.583345][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.594014][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.611215][ T4273] device veth0_macvtap entered promiscuous mode [ 72.651847][ T4273] device veth1_macvtap entered promiscuous mode [ 72.691735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.701376][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.713354][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.724003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.733582][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.741558][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.752199][ T4272] device veth0_vlan entered promiscuous mode [ 72.774558][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.788503][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.800953][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.817988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.826667][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.836505][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.844399][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.852276][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.861401][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.872186][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.894282][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.910521][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.921943][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.952003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.963917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.974321][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.982880][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.991369][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.000917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.013414][ T4272] device veth1_vlan entered promiscuous mode [ 73.034710][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.044616][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.054261][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.063086][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.084942][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.096163][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.114344][ T4276] device veth0_vlan entered promiscuous mode [ 73.122155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.131775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.141247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.157254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.168732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.206390][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.220888][ T4276] device veth1_vlan entered promiscuous mode [ 73.229571][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.234086][ T4274] device veth0_vlan entered promiscuous mode [ 73.252290][ T4272] device veth0_macvtap entered promiscuous mode [ 73.279153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.289799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.298962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.307012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.315866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.324593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.342268][ T4274] device veth1_vlan entered promiscuous mode [ 73.353608][ T4272] device veth1_macvtap entered promiscuous mode [ 73.376064][ T4276] device veth0_macvtap entered promiscuous mode [ 73.391317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.402701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.412133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.423532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.432360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.442803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.467135][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.479413][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.490323][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.501066][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.513563][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.521540][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 73.521565][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 73.527571][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 73.527607][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 73.527636][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 73.565110][ T4276] device veth1_macvtap entered promiscuous mode [ 73.576851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.587848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.595855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.607017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.615799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.629200][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.645273][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.655490][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.666715][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.681677][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.707732][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.715592][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.723580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.739913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.750031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.761416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.770555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.784448][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.800410][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.812115][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.824836][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.835987][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.846654][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.867074][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.887006][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.899185][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.909076][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926088][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.938080][ T4362] i2c i2c-0: new_device: Instantiated device hid at 0x20 [ 73.951132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.964921][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.976125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.988328][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.997181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.011174][ T4274] device veth0_macvtap entered promiscuous mode [ 74.046906][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.061469][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.075603][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.086587][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.097215][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.108039][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.119625][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.129652][ T4274] device veth1_macvtap entered promiscuous mode [ 74.136980][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 74.146815][ T49] CPU: 1 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 74.154203][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.164349][ T49] Workqueue: hci4 hci_rx_work [ 74.169073][ T49] Call Trace: [ 74.172349][ T49] [ 74.175276][ T49] dump_stack_lvl+0x188/0x24e [ 74.179954][ T49] ? show_regs_print_info+0x12/0x12 [ 74.185146][ T49] ? load_image+0x410/0x410 [ 74.189653][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 74.194763][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 74.199786][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 74.204460][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 74.209651][ T49] kobject_add_internal+0x617/0xca0 [ 74.214849][ T49] kobject_add+0x160/0x230 [ 74.219266][ T49] ? kobject_init+0x1c0/0x1c0 [ 74.223946][ T49] ? __raw_spin_lock_init+0x41/0x100 [ 74.229230][ T49] ? klist_children_get+0x50/0x50 [ 74.234245][ T49] ? get_device_parent+0x121/0x3e0 [ 74.239357][ T49] device_add+0x470/0x1050 [ 74.243778][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 74.248715][ T49] hci_sync_conn_complete_evt+0x707/0xab0 [ 74.254436][ T49] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 74.260440][ T49] hci_event_packet+0x806/0x1290 [ 74.265389][ T49] ? lock_chain_count+0x20/0x20 [ 74.270241][ T49] ? bis_list+0x280/0x280 [ 74.274563][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 74.280458][ T49] ? kcov_remote_start+0x50f/0x810 [ 74.285566][ T49] ? lockdep_hardirqs_on+0x94/0x140 [ 74.290781][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 74.295977][ T49] hci_rx_work+0x3eb/0xd40 [ 74.300392][ T49] ? _raw_spin_unlock+0x40/0x40 [ 74.305243][ T49] ? process_one_work+0x7b4/0x1160 [ 74.310352][ T49] process_one_work+0x8ab/0x1160 [ 74.315292][ T49] ? worker_detach_from_pool+0x240/0x240 [ 74.320917][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.325937][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.331477][ T49] ? wq_worker_running+0x97/0x190 [ 74.336491][ T49] worker_thread+0xaf5/0x12a0 [ 74.341187][ T49] kthread+0x29d/0x330 [ 74.345247][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 74.350267][ T49] ? kthread_blkcg+0xd0/0xd0 [ 74.354937][ T49] ret_from_fork+0x1f/0x30 [ 74.359361][ T49] [ 74.364551][ T49] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.378641][ T49] Bluetooth: hci4: failed to register connection device [ 74.418721][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.436098][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.469347][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.485425][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524657][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.540358][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.565695][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.577028][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.588097][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.598868][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.608994][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.619635][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.629902][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.642093][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.653260][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.672858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.681835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.697265][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.710590][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.721460][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.733054][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.743142][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.754443][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.764377][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.774940][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.786125][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.810440][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.824061][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.836821][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.845962][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.854128][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.862198][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871661][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881771][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.919816][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.941196][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.950466][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.968676][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.030398][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.044486][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.067644][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.100199][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.138307][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.176509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.216806][ T4371] loop0: detected capacity change from 0 to 65536 [ 75.221307][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.224447][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.233829][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.253301][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.273300][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.301110][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.467567][ T4369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.512425][ T4371] md/raid1:md0: active with 1 out of 1 mirrors [ 75.567779][ T4371] md0: detected capacity change from 0 to 2048 [ 75.601174][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 75.609610][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 75.615663][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 75.617979][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 75.622445][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 75.646069][ T4382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.670849][ T4369] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.01 [ 75.682265][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.715918][ T4369] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 75.778643][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079f54400: rx timeout, send abort [ 75.790577][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079f54400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 75.823228][ T4389] Bluetooth: MGMT ver 1.22 [ 75.936899][ T4382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.989639][ T4391] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.000540][ T4391] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.057007][ T4382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.142608][ T4395] svc: failed to register lockdv1 RPC service (errno 111). [ 76.164139][ T4395] lockd_up: makesock failed, error=-111 [ 76.173412][ T4382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.467833][ T26] audit: type=1800 audit(1790080225.309:2): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="attr_allow_any_host" dev="configfs" ino=34001 res=0 errno=0 [ 76.475036][ T4399] nvmet: adding nsid 1 to subsystem testsubsys [ 76.532360][ T26] audit: type=1800 audit(1790080225.379:3): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="device_path" dev="configfs" ino=34030 res=0 errno=0 [ 76.554072][ T26] audit: type=1800 audit(1790080225.379:4): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="buffered_io" dev="configfs" ino=34031 res=0 errno=0 [ 76.617651][ T26] audit: type=1800 audit(1790080225.379:5): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="enable" dev="configfs" ino=34032 res=0 errno=0 [ 76.676870][ T26] audit: type=1800 audit(1790080225.389:6): pid=4399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="addr_trtype" dev="configfs" ino=34038 res=0 errno=0 [ 76.727209][ T4355] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d4c31ff1-ed6f-4a20-bb9b-4eb5f2ad1b77. [ 76.752767][ T4399] nvme nvme0: creating 2 I/O queues. [ 76.764999][ T4399] nvme nvme0: new ctrl: "testsubsys" [ 76.867792][ T4413] lo speed is unknown, defaulting to 1000 [ 76.889546][ T4413] lo speed is unknown, defaulting to 1000 [ 76.931555][ T2311] pvrusb2: Failed to submit write-control URB status=-2 [ 76.936799][ T4369] usb 1-1: USB disconnect, device number 2 [ 76.948711][ T4413] lo speed is unknown, defaulting to 1000 [ 76.959655][ T2311] pvrusb2: Device being rendered inoperable [ 76.992634][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 77.023972][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 77.166854][ T4413] infiniband syz1: set active [ 77.167800][ T14] lo speed is unknown, defaulting to 1000 [ 77.172164][ T4413] infiniband syz1: added lo [ 77.212500][ T4413] RDS/IB: syz1: added [ 77.217446][ T4413] smc: adding ib device syz1 with port count 1 [ 77.223993][ T4413] smc: ib device syz1 port 1 has pnetid [ 77.231866][ T4355] lo speed is unknown, defaulting to 1000 [ 77.241496][ T4413] lo speed is unknown, defaulting to 1000 [ 77.350813][ T4413] lo speed is unknown, defaulting to 1000 [ 77.453048][ T4413] lo speed is unknown, defaulting to 1000 [ 77.583355][ T4413] lo speed is unknown, defaulting to 1000 [ 77.612431][ T4425] FAULT_INJECTION: forcing a failure. [ 77.612431][ T4425] name failslab, interval 1, probability 0, space 0, times 1 [ 77.653691][ T4425] CPU: 1 PID: 4425 Comm: syz.0.19 Not tainted syzkaller #0 [ 77.660945][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.671007][ T4425] Call Trace: [ 77.674303][ T4425] [ 77.677243][ T4425] dump_stack_lvl+0x188/0x24e [ 77.682045][ T4425] ? show_regs_print_info+0x12/0x12 [ 77.687277][ T4425] ? load_image+0x410/0x410 [ 77.691966][ T4425] ? __might_sleep+0xd0/0xd0 [ 77.696597][ T4425] ? __lock_acquire+0x7c40/0x7c40 [ 77.701666][ T4425] should_fail_ex+0x390/0x4c0 [ 77.706388][ T4425] should_failslab+0x5/0x20 [ 77.711292][ T4425] slab_pre_alloc_hook+0x59/0x300 [ 77.716358][ T4425] kmem_cache_alloc+0x56/0x2f0 [ 77.721145][ T4425] ? create_new_namespaces+0x34/0x700 [ 77.724208][ T4413] lo speed is unknown, defaulting to 1000 [ 77.726528][ T4425] create_new_namespaces+0x34/0x700 [ 77.726553][ T4425] ? apparmor_capable+0x12c/0x190 [ 77.742508][ T4425] ? bpf_lsm_capable+0x5/0x10 [ 77.747231][ T4425] ? security_capable+0x85/0xb0 [ 77.752110][ T4425] unshare_nsproxy_namespaces+0x116/0x160 [ 77.757852][ T4425] ksys_unshare+0x4f6/0x8e0 [ 77.762398][ T4425] ? sighand_ctor+0x40/0x40 [ 77.766933][ T4425] ? lock_chain_count+0x20/0x20 [ 77.771821][ T4425] ? syscall_enter_from_user_mode+0x21/0x80 [ 77.777743][ T4425] __x64_sys_unshare+0x34/0x40 [ 77.782551][ T4425] do_syscall_64+0x4c/0xa0 [ 77.786991][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 77.791688][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 77.796385][ T4425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.802308][ T4425] RIP: 0033:0x7f4fb079e159 [ 77.806751][ T4425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.826385][ T4425] RSP: 002b:00007f4fb1659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.834834][ T4425] RAX: ffffffffffffffda RBX: 00007f4fb0a25fa0 RCX: 00007f4fb079e159 [ 77.842929][ T4425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 77.850926][ T4425] RBP: 00007f4fb083506b R08: 0000000000000000 R09: 0000000000000000 [ 77.858920][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.866916][ T4425] R13: 00007f4fb0a26038 R14: 00007f4fb0a25fa0 R15: 00007ffd7fa65278 [ 77.866964][ T4413] lo speed is unknown, defaulting to 1000 [ 77.874897][ T4425] [ 77.878036][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 78.018362][ T4413] lo speed is unknown, defaulting to 1000 [ 78.021438][ T4427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 78.281602][ T4431] svc: failed to register lockdv1 RPC service (errno 111). [ 78.427620][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.541837][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.633465][ T27] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 78.643139][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.866605][ T14] smpboot: CPU 1 is now offline [ 78.936224][ T4440] x86: Booting SMP configuration: [ 78.942691][ T4440] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 79.378360][ T27] rtsx_usb: probe of 1-1:1.0 failed with error -110 [ 79.883257][ T3599] usb 1-1: USB disconnect, device number 3 [ 79.917733][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 80.357584][ T4446] NFSD: attempt to initialize umh client tracking in a container ignored. [ 80.367009][ T4446] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 80.377033][ T4446] NFSD: Unable to initialize client recovery tracking! (-22) [ 80.384979][ T4446] NFSD: starting 90-second grace period (net f00003d7) [ 81.717458][ T4450] NFSD: attempt to initialize umh client tracking in a container ignored. [ 81.737719][ T4450] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 81.746516][ T4450] NFSD: Unable to initialize client recovery tracking! (-22) [ 81.777455][ T4450] NFSD: starting 90-second grace period (net f000048d) [ 81.974888][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.983725][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.049173][ T4385] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132046][ T4403] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.199629][ T4459] rdma_rxe: already configured on lo [ 82.224320][ T4406] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.290691][ T4463] device bridge_slave_1 left promiscuous mode [ 82.297227][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.311531][ T4463] device bridge_slave_0 left promiscuous mode [ 82.318254][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.677969][ T4467] NFSD: attempt to initialize umh client tracking in a container ignored. [ 83.686740][ T4467] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 83.695742][ T4467] NFSD: Unable to initialize client recovery tracking! (-22) [ 83.704070][ T4467] NFSD: starting 90-second grace period (net f00003d7) [ 83.929367][ T4476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.942371][ T4476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.644394][ T4480] Zero length message leads to an empty skb [ 86.173452][ T4497] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.643487][ T3044] cfg80211: failed to load regulatory.db [ 86.717594][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.909014][ T4319] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.919188][ T4319] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 86.931518][ T4319] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 86.940822][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.948974][ T4319] usb 4-1: Product: syz [ 86.953178][ T4319] usb 4-1: Manufacturer: syz [ 86.957891][ T4319] usb 4-1: SerialNumber: syz [ 86.965296][ T4504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.972949][ T4504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.982290][ T4319] ums-jumpshot 4-1:1.0: USB Mass Storage device detected [ 86.994250][ T4319] ums-jumpshot 4-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 87.002798][ T4319] scsi host1: usb-storage 4-1:1.0 [ 87.802460][ T4434] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.866989][ T4456] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.011180][ T4513] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 88.057113][ T4513] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 88.081036][ T9] scsi 1:0:0:0: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 88.101212][ T4513] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 88.115719][ T9] scsi 1:0:0:1: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 88.163389][ T4513] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 88.173260][ T9] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 88.243611][ T9] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 88.298304][ T4320] smpboot: CPU 1 is now offline [ 88.534854][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.542272][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.614884][ T4533] svc: failed to register lockdv1 RPC service (errno 111). [ 88.878514][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 88.887020][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 88.899730][ T4291] Bluetooth: hci4: hardware error 0x00 [ 88.920359][ T4541] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.432763][ T4557] rtc_cmos 00:00: in use; can't configure [ 89.647097][ T49] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 89.736117][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.743481][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.759779][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.780792][ T4321] wlan1: authenticate with 08:02:11:00:00:00 [ 89.817144][ T4321] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 89.870511][ T4570] bridge0: port 3(gretap0) entered blocking state [ 89.883922][ T47] wlan1: authenticated [ 89.890871][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.915117][ T3599] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 89.932507][ T4570] bridge0: port 3(gretap0) entered disabled state [ 89.978321][ T37] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 90.012116][ T4570] device gretap0 entered promiscuous mode [ 90.019309][ T4561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.035164][ T37] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 90.086346][ T37] wlan1: associated [ 90.118948][ T4571] bridge0: port 4(erspan0) entered blocking state [ 90.150327][ T4571] bridge0: port 4(erspan0) entered disabled state [ 90.192909][ T4571] device erspan0 entered promiscuous mode [ 90.349715][ T4320] usb 4-1: USB disconnect, device number 2 [ 90.390525][ T4318] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 90.403956][ T4346] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 90.423170][ T26] audit: type=1800 audit(1790080239.269:7): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="ipv4_address" dev="configfs" ino=36131 res=0 errno=0 [ 90.450556][ T4318] sd 1:0:0:0: [sdb] Sense not available. [ 90.460068][ T4346] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 90.487892][ T4318] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 90.515436][ T4346] sd 1:0:0:1: [sdc] Sense not available. [ 90.525557][ T4318] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 90.535674][ T26] audit: type=1800 audit(1790080239.299:8): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="ipv4_port" dev="configfs" ino=36132 res=0 errno=0 [ 90.580333][ T4346] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 90.601454][ T4318] sd 1:0:0:0: [sdb] Write Protect is off [ 90.607261][ T4318] sd 1:0:0:0: [sdb] Asking for cache data failed [ 90.624252][ T4346] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 90.644630][ T4346] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 90.654651][ T4318] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 90.674866][ T26] audit: type=1800 audit(1790080239.299:9): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="num" dev="configfs" ino=36133 res=0 errno=0 [ 90.720640][ T4346] sd 1:0:0:1: [sdc] Asking for cache data failed [ 90.767852][ T4346] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 90.807457][ T4318] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 90.869951][ T4346] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 90.893193][ T26] audit: type=1800 audit(1790080239.299:10): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="local" dev="configfs" ino=36134 res=0 errno=0 [ 90.957624][ T4291] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 91.114807][ T26] audit: type=1800 audit(1790080239.319:11): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="block_bytes" dev="configfs" ino=36142 res=0 errno=0 [ 91.260542][ T4589] bond0: option mode: unable to set because the bond device has slaves [ 91.285229][ T26] audit: type=1800 audit(1790080239.319:12): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="start_block" dev="configfs" ino=36143 res=0 errno=0 [ 91.345965][ T4606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.84'. [ 91.357229][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.364531][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.405558][ T26] audit: type=1800 audit(1790080239.319:13): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="blocks" dev="configfs" ino=36144 res=0 errno=0 [ 91.611341][ T26] audit: type=1800 audit(1790080239.319:14): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="dev" dev="configfs" ino=36145 res=0 errno=0 [ 91.644874][ T4610] rtc_cmos 00:00: in use; can't configure [ 91.658271][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.696245][ T4613] rtc_cmos 00:00: in use; can't configure [ 91.744627][ T4275] udevd[4275]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 91.757962][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 91.774946][ T4594] udevd[4594]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 91.785084][ T4610] rtc_cmos 00:00: in use; can't configure [ 91.839225][ T4614] rtc_cmos 00:00: in use; can't configure [ 91.926093][ T4613] i8042 kbd 00:01: in use; can't configure [ 91.982106][ T4610] i8042 kbd 00:01: in use; can't configure [ 92.015503][ T4618] svc: failed to register nfsdv3 RPC service (errno 111). [ 92.031367][ T4610] i8042 kbd 00:01: in use; can't configure [ 92.070193][ T4618] svc: failed to register nfsaclv3 RPC service (errno 111). [ 92.080009][ T4610] i8042 kbd 00:01: in use; can't configure [ 92.105328][ T4610] i8042 aux 00:02: in use; can't configure [ 92.125772][ T4593] udevd[4593]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 92.144998][ T4286] udevd[4286]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 92.160363][ T4613] i8042 aux 00:02: in use; can't configure [ 92.180014][ T4610] i8042 aux 00:02: in use; can't configure [ 92.237848][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 92.244910][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 92.262097][ T4613] i8042 aux 00:02: in use; can't configure [ 92.308288][ T4610] serial 00:03: in use; can't configure [ 92.328416][ T4610] serial 00:03: in use; can't configure [ 92.348495][ T4610] serial 00:03: in use; can't configure [ 92.374963][ T4610] serial 00:03: in use; can't configure [ 92.540601][ T3044] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 92.634610][ T4638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 92.724442][ T4640] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.809512][ T4320] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 92.821786][ T4621] ceph: No mds server is up or the cluster is laggy [ 92.844961][ T4320] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 93.032673][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.126852][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.205051][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.348970][ T4320] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 93.358677][ T4632] ceph: No mds server is up or the cluster is laggy [ 93.427567][ T3599] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.489598][ T4626] NFSD: attempt to initialize umh client tracking in a container ignored. [ 93.519465][ T4626] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 93.546716][ T4626] NFSD: Unable to initialize client recovery tracking! (-22) [ 93.569920][ T4626] NFSD: starting 90-second grace period (net f00003d7) [ 93.631611][ T3599] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 93.642755][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.675885][ T3599] metro_usb 3-1:1.0: Metrologic USB to Serial converter detected [ 93.765397][ T3599] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 93.785179][ T4660] netlink: 56 bytes leftover after parsing attributes in process `syz.4.90'. [ 93.865717][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 93.954769][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 93.986326][ T3599] usb 3-1: USB disconnect, device number 2 [ 94.020915][ T3599] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 94.090235][ T3599] metro_usb 3-1:1.0: device disconnected [ 94.143450][ T14] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 94.410538][ T4685] svc: failed to register lockdv1 RPC service (errno 111). [ 94.429465][ T4320] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 94.437578][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.445119][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.472231][ T4687] nfs4: Bad value for 'source' [ 94.657396][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 94.662645][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 94.698852][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC6, skipping [ 94.712253][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.761154][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.779319][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.803638][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 94.814471][ T4325] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.825884][ T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.839153][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.850772][ T4325] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 94.866125][ T14] usb 4-1: config 0 descriptor?? [ 94.873369][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.886056][ T4325] usb 1-1: Product: syz [ 94.892117][ T4325] usb 1-1: Manufacturer: syz [ 94.896849][ T4325] usb 1-1: SerialNumber: syz [ 94.911260][ T4325] usb 1-1: config 0 descriptor?? [ 94.963009][ T4319] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 94.980609][ T4325] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 95.037508][ T4665] ceph: No mds server is up or the cluster is laggy [ 95.140402][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 95.156748][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.194703][ T14] usb 4-1: USB disconnect, device number 3 [ 95.200836][ T4320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.394950][ T4710] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 95.411545][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 95.438061][ T4710] netlink: 'syz.2.122': attribute type 2 has an invalid length. [ 95.450767][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 95.483044][ T4320] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 95.525425][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.552066][ T4320] usb 2-1: Product: syz [ 95.561358][ T4320] usb 2-1: Manufacturer: syz [ 95.574259][ T4320] usb 2-1: SerialNumber: syz [ 95.595786][ T4320] usb 2-1: config 0 descriptor?? [ 95.622663][ T4696] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.687134][ T4696] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.939030][ T4696] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.958642][ T4696] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 96.132616][ T4729] o2cb: Local heartbeat has not been started. [ 96.145468][ T14] usb 1-1: USB disconnect, device number 4 [ 96.171606][ T4729] o2cb: Cluster check failed. Fix errors before retrying. [ 96.191532][ T4729] (syz.3.127,4729,0):user_dlm_register:674 ERROR: status = -22 [ 96.213538][ T4729] (syz.3.127,4729,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "hb0" [ 96.815469][ T4320] Error reading MAC address [ 96.853004][ T4320] usb 2-1: USB disconnect, device number 2 [ 97.119689][ T4724] NFSD: attempt to initialize umh client tracking in a container ignored. [ 97.147987][ T4724] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 97.182938][ T4724] NFSD: Unable to initialize client recovery tracking! (-22) [ 97.210490][ T4724] NFSD: starting 90-second grace period (net f00003dc) [ 97.349554][ T4741] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.392431][ T4741] svc: failed to register nfsaclv3 RPC service (errno 111). [ 98.349819][ T4772] i8042 aux 00:02: in use; can't configure [ 98.356122][ T4772] i8042 aux 00:02: in use; can't configure [ 98.364515][ T4772] i8042 aux 00:02: in use; can't configure [ 98.371850][ T4772] i8042 aux 00:02: in use; can't configure [ 98.564855][ T4779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 98.706286][ T4783] tipc: Started in network mode [ 98.712051][ T4783] tipc: Node identity 7aa6bb352eca, cluster identity 4711 [ 98.719580][ T4764] NFSD: attempt to initialize umh client tracking in a container ignored. [ 98.732617][ T4783] tipc: Enabled bearer , priority 0 [ 98.739724][ T4764] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 98.753487][ T4783] tipc: Disabling bearer [ 98.760608][ T4764] NFSD: Unable to initialize client recovery tracking! (-22) [ 98.773180][ T4764] NFSD: starting 90-second grace period (net f000048d) [ 98.994758][ T4790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.159510][ T4796] infiniband syz0: set active [ 99.164464][ T4796] infiniband syz0: added syz_tun [ 99.194146][ T4796] RDS/IB: syz0: added [ 99.198697][ T4796] smc: adding ib device syz0 with port count 1 [ 99.204959][ T4796] smc: ib device syz0 port 1 has pnetid [ 100.087611][ T4769] NFSD: attempt to initialize umh client tracking in a container ignored. [ 100.106475][ T4769] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 100.126546][ T4769] NFSD: Unable to initialize client recovery tracking! (-22) [ 100.163628][ T4769] NFSD: starting 90-second grace period (net f00003dc) [ 100.217571][ T3044] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.419202][ T3044] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice= 1.00 [ 100.431601][ T3044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.450785][ T3044] gspca_main: spca505-2.14.0 probing 0733:0430 [ 101.430880][ T4794] NFSD: attempt to initialize umh client tracking in a container ignored. [ 101.440943][ T4794] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 101.453648][ T4794] NFSD: Unable to initialize client recovery tracking! (-22) [ 101.461653][ T4794] NFSD: starting 90-second grace period (net f00003d7) [ 102.798393][ T4829] NFSD: attempt to initialize umh client tracking in a container ignored. [ 102.810820][ T4829] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 102.820039][ T4829] NFSD: Unable to initialize client recovery tracking! (-22) [ 102.830750][ T4829] NFSD: starting 90-second grace period (net f0000538) [ 103.435915][ T4325] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 103.569939][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.599126][ T3599] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.698246][ T14] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PREFIX) [ 103.760497][ T4320] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.773712][ T4320] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.784025][ T4320] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.01 [ 103.796160][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.812796][ T3599] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice= 0.00 [ 103.823999][ T4849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.836662][ T4849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.846046][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.157536][ T3599] usb 2-1: selecting invalid altsetting 1 [ 104.165469][ T3599] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 104.165562][ T3599] dvb_usb_lmedm04: probe of 2-1:1.0 failed with error -22 [ 104.190669][ T3599] usb 2-1: USB disconnect, device number 3 [ 104.218100][ T14] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 104.258094][ T4855] ceph: No mds server is up or the cluster is laggy [ 104.772036][ T4875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.819928][ T4862] NFSD: attempt to initialize umh client tracking in a container ignored. [ 104.833829][ T4862] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 104.846044][ T4862] NFSD: Unable to initialize client recovery tracking! (-22) [ 104.855349][ T4862] NFSD: starting 90-second grace period (net f00003dc) [ 104.996830][ T3044] gspca_spca505: reg write: error -71 [ 105.022280][ T3044] spca505: probe of 3-1:1.0 failed with error -5 [ 105.066931][ T3044] usb 3-1: USB disconnect, device number 3 [ 105.078260][ T4325] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.282029][ T4325] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 105.296847][ T4325] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.312473][ T4325] usb 4-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00 [ 105.330552][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.346414][ T4325] usb 4-1: Product: syz [ 105.372488][ T4325] usb 4-1: Manufacturer: syz [ 105.383645][ T4325] usb 4-1: SerialNumber: syz [ 105.407650][ T4877] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 105.425174][ T4877] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 105.445870][ T4325] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 105.479338][ T3044] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.493384][ T4325] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.529771][ T4325] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 105.550321][ T4325] usb 4-1: media controller created [ 105.602523][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.663106][ T4325] usb 4-1: selecting invalid altsetting 1 [ 105.686324][ T4325] set interface failed [ 105.690698][ T3044] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 105.710675][ T4325] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 105.733957][ T4891] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 105.742827][ T4325] error writing reg: 0xff, val: 0x00 [ 105.753922][ T3044] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.779418][ T4891] error writing reg: 0x1a, val: 0x1e [ 105.785538][ T4891] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 105.850148][ T3044] usb 3-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00 [ 105.865015][ T4891] error writing reg: 0x1a, val: 0x1e [ 105.866040][ T4894] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 105.888758][ T3044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.903018][ T4896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.913487][ T4894] error writing reg: 0x1a, val: 0x1e [ 105.913557][ T3044] usb 3-1: Product: syz [ 105.930273][ T3044] usb 3-1: Manufacturer: syz [ 105.935042][ T3044] usb 3-1: SerialNumber: syz [ 105.952230][ T4882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.963631][ T4882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.973736][ T3044] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 105.993854][ T3044] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.008960][ T3044] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 106.016907][ T3044] usb 3-1: media controller created [ 106.034146][ T3044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.054166][ T3044] usb 3-1: selecting invalid altsetting 1 [ 106.064066][ T4320] ch9200: probe of 1-1:1.0 failed with error -71 [ 106.073693][ T3044] set interface failed [ 106.074645][ T3044] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 106.096314][ T4320] usb 1-1: USB disconnect, device number 5 [ 106.105614][ T3044] error writing reg: 0xff, val: 0x00 [ 106.126915][ T3044] dvb_usb_mxl111sf: probe of 3-1:1.0 failed with error -71 [ 106.165058][ T4325] dvb_usb_mxl111sf: probe of 4-1:1.0 failed with error -71 [ 106.212083][ T4325] usb 4-1: USB disconnect, device number 4 [ 106.726141][ T4320] usb 3-1: USB disconnect, device number 4 [ 106.757561][ T4325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.847518][ T3599] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 106.960680][ T4325] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 106.972443][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.107921][ T4320] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 107.167419][ T3599] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.197597][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 107.204793][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 107.339959][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 107.349143][ T3599] usb 4-1: Using ep0 maxpacket: 16 [ 107.367278][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.411874][ T3599] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.481290][ T3599] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.519902][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.576598][ T3599] usb 4-1: config 0 descriptor?? [ 107.629650][ T3044] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 107.666209][ T3044] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 107.712337][ T4325] rtsx_usb: probe of 2-1:1.0 failed with error -110 [ 107.948949][ T4325] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 108.193340][ T4325] usb 2-1: USB disconnect, device number 4 [ 108.450753][ T4926] ceph: No mds server is up or the cluster is laggy [ 108.495904][ T3044] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 108.682243][ T4950] svc: failed to register lockdv1 RPC service (errno 111). [ 108.719476][ T4325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.803547][ T4320] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 108.925774][ T4325] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 108.955235][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.000549][ T4325] usb 5-1: Product: syz [ 109.015862][ T4325] usb 5-1: Manufacturer: syz [ 109.035716][ T4325] usb 5-1: SerialNumber: syz [ 109.105446][ T4961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.182743][ T4961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.240105][ T4325] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 109.256345][ T4961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.531436][ T4325] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 109.553163][ T4325] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 109.608155][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.696112][ T4976] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.706528][ T4976] svc: failed to register nfsaclv3 RPC service (errno 111). [ 109.756554][ T4976] ================================================================== [ 109.764675][ T4976] BUG: KASAN: use-after-free in nfsd_svc+0x996/0xab0 [ 109.771355][ T4976] Read of size 4 at addr ffff88802f345c54 by task syz.0.223/4976 [ 109.779066][ T4976] [ 109.781374][ T4976] CPU: 0 PID: 4976 Comm: syz.0.223 Not tainted syzkaller #0 [ 109.788636][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.798682][ T4976] Call Trace: [ 109.801960][ T4976] [ 109.804875][ T4976] dump_stack_lvl+0x188/0x24e [ 109.809575][ T4976] ? __lock_acquire+0x7c40/0x7c40 [ 109.814687][ T4976] ? show_regs_print_info+0x12/0x12 [ 109.819885][ T4976] ? load_image+0x410/0x410 [ 109.824401][ T4976] ? __virt_addr_valid+0x467/0x540 [ 109.829514][ T4976] ? nfsd_svc+0x996/0xab0 [ 109.833826][ T4976] print_report+0xa8/0x210 [ 109.838227][ T4976] kasan_report+0x10b/0x140 [ 109.842713][ T4976] ? nfsd_svc+0x996/0xab0 [ 109.847032][ T4976] nfsd_svc+0x996/0xab0 [ 109.851171][ T4976] write_threads+0x2ea/0x350 [ 109.855741][ T4976] ? write_unlock_fs+0x1f0/0x1f0 [ 109.860659][ T4976] ? __might_fault+0xc2/0x120 [ 109.865319][ T4976] ? _copy_from_user+0x10b/0x170 [ 109.870243][ T4976] ? simple_transaction_get+0x119/0x140 [ 109.875784][ T4976] nfsctl_transaction_write+0x105/0x150 [ 109.881346][ T4976] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 109.886993][ T4976] vfs_write+0x2dc/0x9a0 [ 109.891226][ T4976] ? file_end_write+0x250/0x250 [ 109.896063][ T4976] ? __fget_files+0x28/0x460 [ 109.900635][ T4976] ? __fget_files+0x3fc/0x460 [ 109.905312][ T4976] ? __fdget_pos+0x2ae/0x360 [ 109.909884][ T4976] ? ksys_write+0x70/0x260 [ 109.914298][ T4976] ksys_write+0x14d/0x260 [ 109.918700][ T4976] ? __ia32_sys_read+0x80/0x80 [ 109.923444][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 109.928632][ T4976] do_syscall_64+0x4c/0xa0 [ 109.933047][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 109.937700][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 109.942354][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.948230][ T4976] RIP: 0033:0x7f4fb079e159 [ 109.952627][ T4976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.972236][ T4976] RSP: 002b:00007f4fb1659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.980724][ T4976] RAX: ffffffffffffffda RBX: 00007f4fb0a25fa0 RCX: 00007f4fb079e159 [ 109.988679][ T4976] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 109.996632][ T4976] RBP: 00007f4fb083506b R08: 0000000000000000 R09: 0000000000000000 [ 110.004601][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.012566][ T4976] R13: 00007f4fb0a26038 R14: 00007f4fb0a25fa0 R15: 00007ffd7fa65278 [ 110.020527][ T4976] [ 110.023525][ T4976] [ 110.025824][ T4976] Allocated by task 4976: [ 110.030146][ T4976] kasan_set_track+0x4b/0x70 [ 110.034725][ T4976] __kasan_kmalloc+0x8e/0xa0 [ 110.039303][ T4976] __svc_create+0x60/0x9d0 [ 110.043699][ T4976] svc_create_pooled+0x71f/0x8c0 [ 110.048618][ T4976] nfsd_create_serv+0x2f9/0x700 [ 110.053447][ T4976] nfsd_svc+0x17f/0xab0 [ 110.057585][ T4976] write_threads+0x2ea/0x350 [ 110.062156][ T4976] nfsctl_transaction_write+0x105/0x150 [ 110.067706][ T4976] vfs_write+0x2dc/0x9a0 [ 110.071929][ T4976] ksys_write+0x14d/0x260 [ 110.076239][ T4976] do_syscall_64+0x4c/0xa0 [ 110.080655][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.086532][ T4976] [ 110.088831][ T4976] Freed by task 4976: [ 110.092785][ T4976] kasan_set_track+0x4b/0x70 [ 110.097370][ T4976] kasan_save_free_info+0x27/0x40 [ 110.102368][ T4976] ____kasan_slab_free+0x126/0x1f0 [ 110.107457][ T4976] slab_free_freelist_hook+0x133/0x1b0 [ 110.112921][ T4976] __kmem_cache_free+0xb6/0x200 [ 110.117770][ T4976] nfsd_svc+0x75e/0xab0 [ 110.121920][ T4976] write_threads+0x2ea/0x350 [ 110.126489][ T4976] nfsctl_transaction_write+0x105/0x150 [ 110.132011][ T4976] vfs_write+0x2dc/0x9a0 [ 110.136252][ T4976] ksys_write+0x14d/0x260 [ 110.140571][ T4976] do_syscall_64+0x4c/0xa0 [ 110.144964][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.150840][ T4976] [ 110.153141][ T4976] Last potentially related work creation: [ 110.158829][ T4976] kasan_save_stack+0x3a/0x60 [ 110.163483][ T4976] __kasan_record_aux_stack+0xb2/0xc0 [ 110.168833][ T4976] insert_work+0x54/0x3c0 [ 110.173153][ T4976] __queue_work+0xae2/0xee0 [ 110.177635][ T4976] call_timer_fn+0x1ac/0x670 [ 110.182199][ T4976] __run_timers+0x598/0x810 [ 110.186677][ T4976] run_timer_softirq+0x63/0xf0 [ 110.191416][ T4976] handle_softirqs+0x291/0x910 [ 110.196154][ T4976] __irq_exit_rcu+0x13b/0x230 [ 110.200806][ T4976] irq_exit_rcu+0x5/0x20 [ 110.205050][ T4976] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 110.210673][ T4976] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 110.216633][ T4976] [ 110.218950][ T4976] Second to last potentially related work creation: [ 110.225517][ T4976] kasan_save_stack+0x3a/0x60 [ 110.230176][ T4976] __kasan_record_aux_stack+0xb2/0xc0 [ 110.235524][ T4976] kvfree_call_rcu+0x103/0x890 [ 110.240267][ T4976] ep_eventpoll_release+0x44/0x50 [ 110.245269][ T4976] __fput+0x20a/0x8b0 [ 110.249229][ T4976] task_work_run+0x1d0/0x260 [ 110.253797][ T4976] exit_to_user_mode_loop+0xe6/0x110 [ 110.259075][ T4976] exit_to_user_mode_prepare+0xee/0x180 [ 110.264609][ T4976] syscall_exit_to_user_mode+0x16/0x40 [ 110.270063][ T4976] do_syscall_64+0x58/0xa0 [ 110.274477][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.280366][ T4976] [ 110.282683][ T4976] The buggy address belongs to the object at ffff88802f345c00 [ 110.282683][ T4976] which belongs to the cache kmalloc-512 of size 512 [ 110.296711][ T4976] The buggy address is located 84 bytes inside of [ 110.296711][ T4976] 512-byte region [ffff88802f345c00, ffff88802f345e00) [ 110.309871][ T4976] [ 110.312186][ T4976] The buggy address belongs to the physical page: [ 110.318766][ T4976] page:ffffea0000bcd100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f344 [ 110.328890][ T4976] head:ffffea0000bcd100 order:2 compound_mapcount:0 compound_pincount:0 [ 110.337188][ T4976] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 110.345160][ T4976] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 110.353733][ T4976] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 110.362287][ T4976] page dumped because: kasan: bad access detected [ 110.368686][ T4976] page_owner tracks the page as allocated [ 110.374392][ T4976] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19755272289, free_ts 0 [ 110.394096][ T4976] post_alloc_hook+0x173/0x1a0 [ 110.398866][ T4976] get_page_from_freelist+0x206b/0x2180 [ 110.404399][ T4976] __alloc_pages+0x1ec/0x4f0 [ 110.409076][ T4976] alloc_page_interleave+0x24/0x1e0 [ 110.414281][ T4976] alloc_slab_page+0x5d/0x180 [ 110.419021][ T4976] new_slab+0x87/0x2d0 [ 110.423073][ T4976] ___slab_alloc+0xbc5/0x1240 [ 110.427724][ T4976] __kmem_cache_alloc_node+0x126/0x270 [ 110.433246][ T4976] __kmalloc_node_track_caller+0xa0/0x240 [ 110.438946][ T4976] __alloc_skb+0x226/0x7d0 [ 110.443335][ T4976] alloc_uevent_skb+0x7d/0x230 [ 110.448092][ T4976] kobject_uevent_net_broadcast+0x17e/0x530 [ 110.453973][ T4976] kobject_uevent_env+0x555/0x890 [ 110.458973][ T4976] net_rx_queue_update_kobjects+0x244/0x4d0 [ 110.464844][ T4976] netdev_register_kobject+0x231/0x320 [ 110.470282][ T4976] register_netdevice+0x133a/0x1b80 [ 110.475460][ T4976] page_owner free stack trace missing [ 110.480816][ T4976] [ 110.483130][ T4976] Memory state around the buggy address: [ 110.488768][ T4976] ffff88802f345b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.496827][ T4976] ffff88802f345b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.504869][ T4976] >ffff88802f345c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.512919][ T4976] ^ [ 110.519593][ T4976] ffff88802f345c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.527647][ T4976] ffff88802f345d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.535682][ T4976] ================================================================== [ 110.546067][ T4910] ceph: No mds server is up or the cluster is laggy [ 110.560331][ T3044] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 111.068270][ T4325] usb 5-1: firmware upload failed (-110). [ 111.093778][ T14] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 111.110478][ T4976] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.117702][ T4976] CPU: 0 PID: 4976 Comm: syz.0.223 Not tainted syzkaller #0 [ 111.124984][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.135034][ T4976] Call Trace: [ 111.138401][ T4976] [ 111.141330][ T4976] dump_stack_lvl+0x188/0x24e [ 111.145995][ T4976] ? memcpy+0x3c/0x60 [ 111.149960][ T4976] ? show_regs_print_info+0x12/0x12 [ 111.155192][ T4976] ? load_image+0x410/0x410 [ 111.159882][ T4976] panic+0x2d3/0x710 [ 111.163767][ T4976] ? bpf_jit_dump+0xd0/0xd0 [ 111.168251][ T4976] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 111.174299][ T4976] ? _raw_spin_unlock+0x40/0x40 [ 111.179130][ T4976] ? print_memory_metadata+0x314/0x400 [ 111.184587][ T4976] check_panic_on_warn+0x80/0xa0 [ 111.189525][ T4976] ? nfsd_svc+0x996/0xab0 [ 111.193839][ T4976] end_report+0x66/0x110 [ 111.198069][ T4976] kasan_report+0x118/0x140 [ 111.202578][ T4976] ? nfsd_svc+0x996/0xab0 [ 111.206921][ T4976] nfsd_svc+0x996/0xab0 [ 111.211139][ T4976] write_threads+0x2ea/0x350 [ 111.215738][ T4976] ? write_unlock_fs+0x1f0/0x1f0 [ 111.220691][ T4976] ? __might_fault+0xc2/0x120 [ 111.225353][ T4976] ? _copy_from_user+0x10b/0x170 [ 111.230269][ T4976] ? simple_transaction_get+0x119/0x140 [ 111.235809][ T4976] nfsctl_transaction_write+0x105/0x150 [ 111.241362][ T4976] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 111.246996][ T4976] vfs_write+0x2dc/0x9a0 [ 111.251248][ T4976] ? file_end_write+0x250/0x250 [ 111.256111][ T4976] ? __fget_files+0x28/0x460 [ 111.260697][ T4976] ? __fget_files+0x3fc/0x460 [ 111.265357][ T4976] ? __fdget_pos+0x2ae/0x360 [ 111.269927][ T4976] ? ksys_write+0x70/0x260 [ 111.274352][ T4976] ksys_write+0x14d/0x260 [ 111.278677][ T4976] ? __ia32_sys_read+0x80/0x80 [ 111.283457][ T4976] ? lockdep_hardirqs_on+0x94/0x140 [ 111.288645][ T4976] do_syscall_64+0x4c/0xa0 [ 111.293054][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 111.297731][ T4976] ? clear_bhb_loop+0x60/0xb0 [ 111.302415][ T4976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.308308][ T4976] RIP: 0033:0x7f4fb079e159 [ 111.312708][ T4976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.332297][ T4976] RSP: 002b:00007f4fb1659028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.340690][ T4976] RAX: ffffffffffffffda RBX: 00007f4fb0a25fa0 RCX: 00007f4fb079e159 [ 111.348675][ T4976] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 111.356838][ T4976] RBP: 00007f4fb083506b R08: 0000000000000000 R09: 0000000000000000 [ 111.364890][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.372848][ T4976] R13: 00007f4fb0a26038 R14: 00007f4fb0a25fa0 R15: 00007ffd7fa65278 [ 111.380909][ T4976] [ 111.383962][ T4976] Kernel Offset: disabled [ 111.388294][ T4976] Rebooting in 86400 seconds..