last executing test programs: 12.327768991s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) nanosleep(&(0x7f0000000380)={0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='Y\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049\x00']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0x42, 0x1ff) close(r5) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) 10.472272718s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 7.368314685s ago: executing program 0 (id=19): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000600)='hello', 0x5, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000900)=""/5, 0x5, 0x0, 0x0, 0x0) 6.940363439s ago: executing program 0 (id=20): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/mtd1\x00', 0x2, 0x0) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 5.980376604s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, '', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 5.750718585s ago: executing program 3 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000240)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000280)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) close(r0) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c) 5.069564494s ago: executing program 0 (id=23): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x9, &(0x7f0000000100)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.909878568s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00', 0x6) 4.8968871s ago: executing program 0 (id=25): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x27, {"4831ff48c7c6000004004881c600010000480f38f03e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3f}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.52957168s ago: executing program 3 (id=27): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 4.315791131s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:10.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:11.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:12.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:13.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:14.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:15.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:16.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:17.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:18.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:19.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1a.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:1b.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:1c.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:1d.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:1e.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) 4.294424643s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='800\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 4.134712264s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000340), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd09, &(0x7f00000003c0)="0400000000000000000000006e010000380100000100000000000000000000000000000000000000000000006d79706f6f6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000") 3.665189406s ago: executing program 0 (id=33): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz0/node_desc\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='new_node_desc\x00', 0xe) 3.41118715s ago: executing program 0 (id=35): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902220001010080fa090400000103000000092111010001224e0007058103400001"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 3.375519284s ago: executing program 4 (id=36): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) 3.209047379s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='ep1\n', 0x4) 2.585137526s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) write(0xffffffffffffffff, &(0x7f0000000200)='777', 0x3) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000280)='0\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='512\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='255\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='1\x00', 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r6, 0x0, 0x0, 0x100000) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r8, &(0x7f00000005c0)='7340032\x00', 0x7) close(r8) 2.265275353s ago: executing program 4 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 1.513585302s ago: executing program 3 (id=40): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000001000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) 1.01803768s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="020000001000"/16, 0x10) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') 873.128852ms ago: executing program 4 (id=42): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r4 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r5 = syz_open_dev$video(&(0x7f0000000800), 0x12, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r6 = syz_open_dev$video(&(0x7f0000000800), 0x13, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) r7 = syz_open_dev$video(&(0x7f0000000800), 0x14, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 687.830158ms ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)='freeze', 0x6}], 0x1) 597.237932ms ago: executing program 3 (id=44): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001000)={0x3, 0x40, 0x0, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000002000)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 354.577675ms ago: executing program 1 (id=45): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d0000000600ff0901a101150026ff007508954009018102090191020901b102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="fe0300"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039900"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="039a00"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) 318.363207ms ago: executing program 4 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x12, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='test\x00', 0x0) ftruncate(r2, 0x10000) sendfile(r1, r2, 0x0, 0x10000) 0s ago: executing program 4 (id=47): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 73.335311][ T5580] cgroup: Unknown subsys name 'net' [ 73.577257][ T5580] cgroup: Unknown subsys name 'cpuset' [ 73.631769][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.259002][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.045638][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.057410][ T4909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.102170][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.120520][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.155350][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.161384][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.162146][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.180863][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.194346][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.195483][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.196876][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.197620][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.198026][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.200487][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.200891][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.206170][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.220795][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.223610][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.225220][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.225969][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.227722][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.230654][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.232010][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.238486][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.239379][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.322943][ T4909] Bluetooth: hci1: command tx timeout [ 81.323077][ T4909] Bluetooth: hci4: command tx timeout [ 81.323156][ T4909] Bluetooth: hci0: command tx timeout [ 81.401429][ T5600] Bluetooth: hci2: command tx timeout [ 81.401620][ T5600] Bluetooth: hci3: command tx timeout [ 81.580032][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.580998][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.581113][ T5595] bridge_slave_0: entered allmulticast mode [ 81.583799][ T5595] bridge_slave_0: entered promiscuous mode [ 81.607268][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.607377][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.612729][ T5597] bridge_slave_0: entered allmulticast mode [ 81.615175][ T5597] bridge_slave_0: entered promiscuous mode [ 81.617188][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.617300][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.617437][ T5596] bridge_slave_0: entered allmulticast mode [ 81.621128][ T5596] bridge_slave_0: entered promiscuous mode [ 81.668573][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.668669][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.669094][ T5595] bridge_slave_1: entered allmulticast mode [ 81.686128][ T5595] bridge_slave_1: entered promiscuous mode [ 81.720141][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.720250][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.720403][ T5597] bridge_slave_1: entered allmulticast mode [ 81.744319][ T5597] bridge_slave_1: entered promiscuous mode [ 81.745746][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.745847][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.746252][ T5596] bridge_slave_1: entered allmulticast mode [ 81.748343][ T5596] bridge_slave_1: entered promiscuous mode [ 81.826083][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.826177][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.826307][ T5593] bridge_slave_0: entered allmulticast mode [ 81.831898][ T5593] bridge_slave_0: entered promiscuous mode [ 81.890358][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.890487][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.890635][ T5594] bridge_slave_0: entered allmulticast mode [ 81.913535][ T5594] bridge_slave_0: entered promiscuous mode [ 81.946547][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.946656][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.946803][ T5593] bridge_slave_1: entered allmulticast mode [ 81.950078][ T5593] bridge_slave_1: entered promiscuous mode [ 81.990526][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.990614][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.990718][ T5594] bridge_slave_1: entered allmulticast mode [ 81.993747][ T5594] bridge_slave_1: entered promiscuous mode [ 82.002263][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.055366][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.058051][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.083484][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.104916][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.109069][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.155931][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.185568][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.205166][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.238980][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.240744][ T5595] team0: Port device team_slave_0 added [ 82.262970][ T5597] team0: Port device team_slave_0 added [ 82.265068][ T5596] team0: Port device team_slave_0 added [ 82.288804][ T5595] team0: Port device team_slave_1 added [ 82.305039][ T5597] team0: Port device team_slave_1 added [ 82.306583][ T5596] team0: Port device team_slave_1 added [ 82.337200][ T5593] team0: Port device team_slave_0 added [ 82.363674][ T5594] team0: Port device team_slave_0 added [ 82.378551][ T5593] team0: Port device team_slave_1 added [ 82.411904][ T5594] team0: Port device team_slave_1 added [ 82.412887][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.412896][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.412909][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.433742][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.433756][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.433780][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.437072][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.437085][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.437108][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.504423][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.504439][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.504463][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.546711][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.546725][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.546749][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.556340][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.556355][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.556378][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.629103][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.629119][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.629143][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.647865][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.647882][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.647906][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.659379][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.659394][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.659418][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.667836][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.667850][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.667874][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.873357][ T5597] hsr_slave_0: entered promiscuous mode [ 82.874233][ T5597] hsr_slave_1: entered promiscuous mode [ 82.880932][ T5596] hsr_slave_0: entered promiscuous mode [ 82.883025][ T5596] hsr_slave_1: entered promiscuous mode [ 82.884075][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 82.884199][ T5596] Cannot create hsr debugfs directory [ 82.913164][ T5595] hsr_slave_0: entered promiscuous mode [ 82.915318][ T5595] hsr_slave_1: entered promiscuous mode [ 82.916193][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 82.916214][ T5595] Cannot create hsr debugfs directory [ 82.956999][ T5593] hsr_slave_0: entered promiscuous mode [ 82.957755][ T5593] hsr_slave_1: entered promiscuous mode [ 82.958249][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 82.958269][ T5593] Cannot create hsr debugfs directory [ 82.997827][ T5594] hsr_slave_0: entered promiscuous mode [ 82.998560][ T5594] hsr_slave_1: entered promiscuous mode [ 82.999056][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 82.999073][ T5594] Cannot create hsr debugfs directory [ 83.402681][ T4909] Bluetooth: hci0: command tx timeout [ 83.402712][ T4909] Bluetooth: hci4: command tx timeout [ 83.402730][ T4909] Bluetooth: hci1: command tx timeout [ 83.491538][ T5600] Bluetooth: hci3: command tx timeout [ 83.491570][ T5600] Bluetooth: hci2: command tx timeout [ 84.233421][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.275607][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.295316][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.320428][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.330984][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.375129][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.397495][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.436090][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.539179][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.567329][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.572125][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.615749][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.630228][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.649998][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.677438][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.704975][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.812637][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.846681][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.859297][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.885501][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.889059][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.917587][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.950392][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.975849][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.110764][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.137753][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.151824][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.184740][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.189320][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.206090][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.240200][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.277396][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.365672][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.404632][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.436023][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.441199][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.474629][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.481493][ T4909] Bluetooth: hci1: command tx timeout [ 85.481520][ T4909] Bluetooth: hci4: command tx timeout [ 85.481540][ T4909] Bluetooth: hci0: command tx timeout [ 85.484793][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.544455][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.556539][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.571455][ T4909] Bluetooth: hci3: command tx timeout [ 85.571541][ T5600] Bluetooth: hci2: command tx timeout [ 85.577532][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.626774][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.695594][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.696098][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.715727][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.769846][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.769944][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.846445][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.874614][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.897215][ T4156] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.897346][ T4156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.942818][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.942918][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.008030][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.056673][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.057259][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.078303][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.118241][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.118363][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.219824][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.266395][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.291017][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.300411][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.359826][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.359970][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.467365][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.528411][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.528622][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.687428][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.688627][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.850070][ T196] cfg80211: failed to load regulatory.db [ 87.124734][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.483883][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.539423][ T5597] veth0_vlan: entered promiscuous mode [ 87.572870][ T5603] Bluetooth: hci1: command tx timeout [ 87.572868][ T4909] Bluetooth: hci4: command tx timeout [ 87.572916][ T5600] Bluetooth: hci0: command tx timeout [ 87.651349][ T5600] Bluetooth: hci2: command tx timeout [ 87.651379][ T5600] Bluetooth: hci3: command tx timeout [ 87.653492][ T5597] veth1_vlan: entered promiscuous mode [ 87.725483][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.947695][ T5597] veth0_macvtap: entered promiscuous mode [ 87.949974][ T5595] veth0_vlan: entered promiscuous mode [ 88.028081][ T5597] veth1_macvtap: entered promiscuous mode [ 88.044999][ T5595] veth1_vlan: entered promiscuous mode [ 88.176166][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.186647][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.227432][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.342953][ T5595] veth0_macvtap: entered promiscuous mode [ 88.438846][ T5595] veth1_macvtap: entered promiscuous mode [ 88.450832][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.745131][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.786194][ T5594] veth0_vlan: entered promiscuous mode [ 88.790189][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.876363][ T5593] veth0_vlan: entered promiscuous mode [ 88.894908][ T5594] veth1_vlan: entered promiscuous mode [ 88.909080][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.909102][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.059597][ T5593] veth1_vlan: entered promiscuous mode [ 89.152985][ T5596] veth0_vlan: entered promiscuous mode [ 89.157061][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.157077][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.350865][ T5596] veth1_vlan: entered promiscuous mode [ 89.558962][ T5594] veth0_macvtap: entered promiscuous mode [ 89.631868][ T5594] veth1_macvtap: entered promiscuous mode [ 89.662328][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.662347][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.690093][ T5593] veth0_macvtap: entered promiscuous mode [ 89.759747][ T5593] veth1_macvtap: entered promiscuous mode [ 89.858757][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.869276][ T5596] veth0_macvtap: entered promiscuous mode [ 89.891519][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.891539][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.939787][ T5596] veth1_macvtap: entered promiscuous mode [ 89.954453][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.038134][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.088012][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.142185][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.293502][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.910785][ T5800] lo speed is unknown, defaulting to 1000 [ 90.991099][ T5800] lo speed is unknown, defaulting to 1000 [ 91.051956][ T5601] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.163490][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.163511][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.325516][ T5800] lo speed is unknown, defaulting to 1000 [ 91.359278][ T5800] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 91.359301][ T5800] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 91.359322][ T5800] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 91.527214][ T5601] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 91.527232][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.581035][ T5800] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.634295][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673162][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691762][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692024][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692059][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692091][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692134][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692165][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692196][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692222][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692251][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692282][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692311][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692343][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692376][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692405][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692451][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692482][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692513][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692545][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.693830][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.693843][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.753265][ T5800] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.306262][ T5800] lo speed is unknown, defaulting to 1000 [ 92.405544][ T5800] lo speed is unknown, defaulting to 1000 [ 92.407971][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.407986][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.436342][ T5601] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 92.494015][ T5800] lo speed is unknown, defaulting to 1000 [ 92.594659][ T5800] lo speed is unknown, defaulting to 1000 [ 92.653891][ T5800] lo speed is unknown, defaulting to 1000 [ 92.700257][ T5601] lg-g15 0003:046D:C222.0001: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 92.759524][ T5601] usb 1-1: USB disconnect, device number 2 [ 92.807429][ T5806] lo speed is unknown, defaulting to 1000 [ 92.873343][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.873363][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.048349][ T5806] lo speed is unknown, defaulting to 1000 [ 93.062947][ T5812] batman_adv: batadv0: Adding interface: veth0 [ 93.062961][ T5812] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.062992][ T5812] batman_adv: batadv0: Interface activated: veth0 [ 93.065876][ T5806] lo speed is unknown, defaulting to 1000 [ 93.155323][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.155347][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.206791][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.206815][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.244355][ T5812] batman_adv: batadv0: Interface deactivated: veth0 [ 93.244379][ T5812] batman_adv: batadv0: Removing interface: veth0 [ 93.477460][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.477478][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.601130][ T5806] infiniband syz0: set active [ 93.601150][ T5806] infiniband syz0: added lo [ 93.639100][ T5806] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 93.687764][ T5806] infiniband syz0: Couldn't open port 1 [ 93.687990][ T5806] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.688032][ T5806] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.688066][ T5806] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 93.739060][ T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.739079][ T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.778059][ T5601] lo speed is unknown, defaulting to 1000 [ 94.030278][ T5814] kAFS: unable to lookup cell 'syz0' [ 94.337530][ T5806] RDS/IB: syz0: added [ 94.338318][ T5806] smc: adding ib device syz0 with port count 1 [ 94.338522][ T5806] smc: ib device syz0 port 1 has no pnetid [ 94.385328][ T5741] lo speed is unknown, defaulting to 1000 [ 94.493330][ T5806] lo speed is unknown, defaulting to 1000 [ 95.270374][ T37] audit: type=1800 audit(1785854664.156:2): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.11" name="idVendor" dev="configfs" ino=8835 res=0 errno=0 [ 95.400842][ T37] audit: type=1800 audit(1785854664.206:3): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.11" name="idProduct" dev="configfs" ino=7881 res=0 errno=0 [ 95.455848][ T5830] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.013204][ T37] audit: type=1800 audit(1785854664.946:4): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.11" name="UDC" dev="configfs" ino=7886 res=0 errno=0 [ 96.629887][ T196] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.874063][ T196] usb 1-1: not running at top speed; connect to a high speed hub [ 96.880838][ T196] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 96.880867][ T196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.880887][ T196] usb 1-1: Product: syz [ 96.880901][ T196] usb 1-1: Manufacturer: syz [ 96.880914][ T196] usb 1-1: SerialNumber: syz [ 97.136265][ T5806] lo speed is unknown, defaulting to 1000 [ 98.406514][ T5806] lo speed is unknown, defaulting to 1000 [ 99.053701][ T196] usb 1-1: 1:1: cannot get freq at ep 0x81 [ 100.140794][ T5806] lo speed is unknown, defaulting to 1000 [ 100.484887][ T5873] loop0: detected capacity change from 0 to 32768 [ 100.542061][ T196] usb 1-1: USB disconnect, device number 3 [ 100.670138][ T5873] UBIFS error (pid: 5873): cannot open "ubi0_0", error -19 [ 101.266985][ T5881] kAFS: No cell specified [ 101.638193][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.746432][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.928439][ T5806] lo speed is unknown, defaulting to 1000 [ 101.940721][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.990428][ T5874] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 101.996915][ T5884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.071447][ T5860] NFSD: Unable to initialize client recovery tracking! (-110) [ 102.071467][ T5860] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 102.071478][ T5860] NFSD: starting 90-second grace period (net f0000409) [ 102.514549][ T5866] rdma_rxe: rxe_newlink: failed to add veth1 [ 102.519656][ T5861] rdma_rxe: rxe_newlink: failed to add veth0 [ 102.669710][ T5897] siw: device registration error -23 [ 103.499401][ T5913] device-mapper: ioctl: Invalid ioctl structure: name ol, dev 6f70796d00000000 [ 103.658637][ T5915] rdma_rxe: rxe_newlink: failed to add lo [ 103.839252][ T5920] PM: hibernation: hibernation entry [ 104.119100][ T37] audit: type=1800 audit(1785854673.046:5): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="idVendor" dev="configfs" ino=9061 res=0 errno=0 [ 104.132555][ T37] audit: type=1800 audit(1785854673.066:6): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="idProduct" dev="configfs" ino=8102 res=0 errno=0 [ 104.143465][ T37] audit: type=1800 audit(1785854673.066:7): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="process_ump" dev="configfs" ino=8103 res=0 errno=0 [ 104.369413][ T37] audit: type=1800 audit(1785854673.296:8): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="direction" dev="configfs" ino=8105 res=0 errno=0 [ 104.408645][ T37] audit: type=1800 audit(1785854673.336:9): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="name" dev="configfs" ino=8106 res=0 errno=0 [ 104.452359][ T37] audit: type=1800 audit(1785854673.346:10): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="ep_name" dev="configfs" ino=8104 res=0 errno=0 [ 104.452402][ T37] audit: type=1800 audit(1785854673.386:11): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.37" name="active" dev="configfs" ino=8107 res=0 errno=0 [ 104.452479][ T5845] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.728792][ T5845] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 104.728820][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.732715][ T5920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.745394][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.324727][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.741497][ T5920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.741807][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.763137][ T5845] hid-rmi 0003:1532:011D.0002: failed to write hid report (-38) [ 105.763288][ T5845] hid-rmi 0003:1532:011D.0002: rmi_set_page: set page failed: -38. [ 105.763305][ T5845] hid-rmi 0003:1532:011D.0002: failed to set page select to 0. [ 105.997811][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.058668][ T5929] ceph: No mds server is up or the cluster is laggy [ 106.065351][ T5727] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.143652][ T5920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.143763][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.316582][ T5845] hid-rmi 0003:1532:011D.0002: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 106.318927][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.465091][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.465221][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.527350][ T4909] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.647868][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.653847][ T5940] UDC core: g1: couldn't find an available UDC or it's busy [ 106.694874][ T5948] PM: suspend entry (s2idle) [ 106.694890][ T5948] PM: suspend exit [ 106.739002][ T5920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.739121][ T5920] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.832739][ T5920] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 107.015918][ T5947] lo speed is unknown, defaulting to 1000 [ 107.019454][ T5947] lo speed is unknown, defaulting to 1000 [ 107.161351][ T5582] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.313573][ T5582] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 107.313602][ T5582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.320177][ T5582] usb 2-1: config 0 descriptor?? [ 107.662968][ T56] Filesystems sync: 0.664 seconds [ 107.754252][ T5920] Freezing user space processes [ 107.801378][ T4909] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.972415][ T5582] corsair-psu 0003:1B1C:1C03.0003: hidraw1: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.1-1/input0 [ 108.201378][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.525925][ T4909] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.607275][ T4909] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.762808][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.299001][ T5920] Freezing user space processes completed (elapsed 1.544 seconds) [ 109.299374][ T5920] OOM killer disabled. [ 109.306922][ T5920] Freezing remaining freezable tasks [ 109.479550][ T56] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN PTI [ 109.479574][ T56] KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] [ 109.479600][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.479612][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.479618][ T56] Workqueue: pm pm_runtime_work [ 109.479649][ T56] RIP: 0010:rmi_driver_suspend+0x30/0x180 [ 109.479678][ T56] Code: 57 41 56 41 55 41 54 53 50 89 74 24 04 48 89 fb 48 bd 00 00 00 00 00 fc ff df e8 6b c7 5e fa 4c 8d 73 78 4c 89 f0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 f7 e8 e2 3a c8 fa 4d 8b 36 4c 89 f0 48 c1 [ 109.479692][ T56] RSP: 0018:ffffc9000122f670 EFLAGS: 00010206 [ 109.479707][ T56] RAX: 000000000000000f RBX: 0000000000000000 RCX: ffff88801ab4dd00 [ 109.479719][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.479729][ T56] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.479740][ T56] R10: dffffc0000000000 R11: ffffffff88838110 R12: dffffc0000000000 [ 109.479748][ T56] R13: 0000000000000003 R14: 0000000000000078 R15: 0000000000000000 [ 109.479754][ T56] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 109.479762][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.479769][ T56] CR2: 00007f0000000200 CR3: 000000003c264000 CR4: 00000000003526f0 [ 109.479779][ T56] Call Trace: [ 109.479783][ T56] [ 109.479789][ T56] rmi_suspend+0xa7/0xf0 [ 109.479807][ T56] hid_suspend+0x4a3/0x530 [ 109.479833][ T56] usb_suspend_both+0x285/0x1040 [ 109.479859][ T56] ? __pfx_usb_suspend_both+0x10/0x10 [ 109.479881][ T56] ? autosuspend_check+0x424/0x600 [ 109.479902][ T56] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 109.479914][ T56] usb_runtime_suspend+0x58/0x110 [ 109.479927][ T56] __rpm_callback+0x2d6/0x930 [ 109.479935][ T56] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 109.479947][ T56] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 109.479964][ T56] rpm_suspend+0x8a0/0x17a0 [ 109.479993][ T56] ? __pfx_rpm_suspend+0x10/0x10 [ 109.480013][ T56] ? rt_spin_lock+0x2ce/0x400 [ 109.480032][ T56] ? __pfx_rt_spin_lock+0x10/0x10 [ 109.480049][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 109.480065][ T56] pm_runtime_work+0x132/0x1b0 [ 109.480078][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 109.480088][ T56] process_scheduled_works+0xa8e/0x14e0 [ 109.480104][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.480119][ T56] ? assign_work+0x3cf/0x5d0 [ 109.480140][ T56] worker_thread+0xa47/0xfb0 [ 109.480166][ T56] ? __kthread_parkme+0x71/0x1f0 [ 109.480192][ T56] kthread+0x388/0x470 [ 109.480214][ T56] ? __pfx_worker_thread+0x10/0x10 [ 109.480224][ T56] ? __pfx_kthread+0x10/0x10 [ 109.480237][ T56] ret_from_fork+0x514/0xb70 [ 109.480252][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 109.480265][ T56] ? __switch_to+0xc89/0x1420 [ 109.480285][ T56] ? __pfx_kthread+0x10/0x10 [ 109.480308][ T56] ret_from_fork_asm+0x1a/0x30 [ 109.480332][ T56] [ 109.480338][ T56] Modules linked in: [ 109.480356][ T56] ---[ end trace 0000000000000000 ]--- [ 109.480369][ T56] RIP: 0010:rmi_driver_suspend+0x30/0x180 [ 109.480384][ T56] Code: 57 41 56 41 55 41 54 53 50 89 74 24 04 48 89 fb 48 bd 00 00 00 00 00 fc ff df e8 6b c7 5e fa 4c 8d 73 78 4c 89 f0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 f7 e8 e2 3a c8 fa 4d 8b 36 4c 89 f0 48 c1 [ 109.480392][ T56] RSP: 0018:ffffc9000122f670 EFLAGS: 00010206 [ 109.480399][ T56] RAX: 000000000000000f RBX: 0000000000000000 RCX: ffff88801ab4dd00 [ 109.480406][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.480411][ T56] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.480417][ T56] R10: dffffc0000000000 R11: ffffffff88838110 R12: dffffc0000000000 [ 109.480425][ T56] R13: 0000000000000003 R14: 0000000000000078 R15: 0000000000000000 [ 109.480435][ T56] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 109.480449][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.480462][ T56] CR2: 00007f0000000200 CR3: 000000003c264000 CR4: 00000000003526f0 [ 109.480479][ T56] Kernel panic - not syncing: Fatal exception [ 109.480748][ T56] Kernel Offset: disabled