last executing test programs: 12.670313024s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./export\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2\n', 0x2) close(r2) 10.731651984s ago: executing program 3 (id=22): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000600)}) 10.711511826s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='4\n', 0x2) 10.660400895s ago: executing program 3 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x6f00, @loopback}, 0x10) listen(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='udp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\n', 0x2) close(r3) 9.481172556s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000b00)="1234567800000000000000020001878300000003000000020000000000000000000000000000000000000004000000000000000100"/68, 0x38, 0x0, &(0x7f0000000a00)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) 9.329028634s ago: executing program 2 (id=27): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2faf0800}, 0x0) 8.480323712s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) close(r6) nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl(r7, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80) 8.025771223s ago: executing program 3 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl(r2, 0x40084d02, &(0x7f0000000300)="0000000000000001") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x401c6f40, &(0x7f0000000380)="ffffffff00"/28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000480)="ffffffff01000000000080000000000003000400000000007465737400"/150) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./ubifs_mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0:test\x00', &(0x7f0000000500)='./ubifs_mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./ubifs_mnt/testfile\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000640)='hello ubifs\x00', 0xb) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000740)='another file\x00', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./ubifs_mnt/testfile2\x00', 0x0) close(r6) sync() 7.840094614s ago: executing program 2 (id=30): syz_open_dev$usbfs(&(0x7f0000000400), 0xb, 0x2) 7.770237977s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4.2\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000a00)="80000070112233440000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004700"/116, 0x74, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000b00)=""/256, 0x100, 0x40, 0x0, 0x0) 6.624942956s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='4\n', 0x2) close(r2) 5.191850567s ago: executing program 2 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000400)='\n\x00', 0x1) 3.747680132s ago: executing program 1 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305029afe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502fe9a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305029bbe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502be9b00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305025b7f00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305027f5b00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502993e00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305023e9900000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305025a3f00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305023f5a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502ba7e00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305027eba00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff43050295fe00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502fe9500000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff43050294be00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502be9400000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502000000000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305027abf00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502bf7a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305027bff00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502ff7b00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502547f00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305027f5400000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502553f00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff4305023f5500000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.747605398s ago: executing program 3 (id=35): unshare(0x20000) umount2(&(0x7f0000000000)='./cgroup.cpu\x00', 0x2) 3.747448724s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./export\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2\n', 0x2) close(r2) 2.327460856s ago: executing program 0 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/mapper/control\x00', 0x2, 0x0) 2.327328258s ago: executing program 2 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x6f00, @loopback}, 0x10) listen(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='udp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\n', 0x2) close(r3) 2.311504569s ago: executing program 1 (id=39): syz_open_dev$usbfs(&(0x7f0000000400), 0xb, 0x2) 2.23003321s ago: executing program 1 (id=40): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./c241\x00', 0x81b6, 0xaf1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./c241\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./c242\x00', 0x81b6, 0xaf2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./c242\x00', 0x2, 0x0) ioctl(r1, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./c243\x00', 0x81b6, 0xaf3) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./c243\x00', 0x2, 0x0) ioctl(r2, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./c244\x00', 0x81b6, 0xaf4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./c244\x00', 0x2, 0x0) ioctl(r3, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) 2.229842971s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='2049\n', 0x5) read(r0, &(0x7f0000000200), 0x100) 969.858127ms ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='ucsi_acpi\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='pcspkr\n', 0x7) close(r3) 900.374617ms ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) ftruncate(0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r2, 0x40140921, &(0x7f00000004a0)="01000000070000000100000001000000060000") ioctl(r2, 0x400c0930, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='+8\n', 0x3) 900.172009ms ago: executing program 0 (id=44): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) close(r7) write(0xffffffffffffffff, &(0x7f0000000500)='2\n', 0x2) close(0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='3\n', 0x2) close(r8) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) 0s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1\n', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000b00)="1234567800000000000000020001878300000003000000020000000000000000000000000000000000000004000000000000000100"/68, 0x38, 0x0, &(0x7f0000000a00)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14017' (ED25519) to the list of known hosts. [ 32.717756][ T5692] cgroup: Unknown subsys name 'net' [ 32.847905][ T5692] cgroup: Unknown subsys name 'cpuset' [ 32.851643][ T5692] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.787932][ T5692] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.514648][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.521911][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.522578][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.524105][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.525609][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.527556][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.528054][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.528753][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.529703][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.532226][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.534053][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.534733][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.535164][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.535698][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.536649][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.537653][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.538394][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.538558][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.543309][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.547990][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.069218][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.069264][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.069321][ T5733] bridge_slave_0: entered allmulticast mode [ 38.070035][ T5733] bridge_slave_0: entered promiscuous mode [ 38.107936][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.108011][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.108073][ T5733] bridge_slave_1: entered allmulticast mode [ 38.108825][ T5733] bridge_slave_1: entered promiscuous mode [ 38.150183][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.150271][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.150334][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.150395][ T5741] bridge_slave_0: entered allmulticast mode [ 38.151629][ T5741] bridge_slave_0: entered promiscuous mode [ 38.162095][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.162138][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.162194][ T5742] bridge_slave_0: entered allmulticast mode [ 38.163013][ T5742] bridge_slave_0: entered promiscuous mode [ 38.164472][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.164511][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.164586][ T5742] bridge_slave_1: entered allmulticast mode [ 38.165385][ T5742] bridge_slave_1: entered promiscuous mode [ 38.166851][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.167386][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.167428][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.167491][ T5741] bridge_slave_1: entered allmulticast mode [ 38.168246][ T5741] bridge_slave_1: entered promiscuous mode [ 38.221212][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.223105][ T5733] team0: Port device team_slave_0 added [ 38.224478][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.226199][ T5733] team0: Port device team_slave_1 added [ 38.226279][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.226320][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.226378][ T5735] bridge_slave_0: entered allmulticast mode [ 38.227054][ T5735] bridge_slave_0: entered promiscuous mode [ 38.228990][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.229077][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.229132][ T5735] bridge_slave_1: entered allmulticast mode [ 38.229880][ T5735] bridge_slave_1: entered promiscuous mode [ 38.239696][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.247407][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.262644][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.262658][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.262674][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.297007][ T5742] team0: Port device team_slave_0 added [ 38.297279][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.297285][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.297298][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.308950][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.310804][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.311698][ T5742] team0: Port device team_slave_1 added [ 38.320392][ T5741] team0: Port device team_slave_0 added [ 38.333458][ T5735] team0: Port device team_slave_0 added [ 38.334413][ T5741] team0: Port device team_slave_1 added [ 38.335562][ T5735] team0: Port device team_slave_1 added [ 38.346989][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.346999][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.347011][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.363125][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.363139][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.363159][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.376063][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.376073][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.376085][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.379679][ T5733] hsr_slave_0: entered promiscuous mode [ 38.380144][ T5733] hsr_slave_1: entered promiscuous mode [ 38.386949][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.386959][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.386971][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.387523][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.387532][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.387544][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.388018][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.388026][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.388038][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.430173][ T5742] hsr_slave_0: entered promiscuous mode [ 38.430596][ T5742] hsr_slave_1: entered promiscuous mode [ 38.430888][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 38.430931][ T5742] Cannot create hsr debugfs directory [ 38.464026][ T5735] hsr_slave_0: entered promiscuous mode [ 38.464489][ T5735] hsr_slave_1: entered promiscuous mode [ 38.464821][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 38.464833][ T5735] Cannot create hsr debugfs directory [ 38.491959][ T5741] hsr_slave_0: entered promiscuous mode [ 38.492395][ T5741] hsr_slave_1: entered promiscuous mode [ 38.492695][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 38.492706][ T5741] Cannot create hsr debugfs directory [ 38.702058][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.708873][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.709444][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.712437][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.716663][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.719926][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.726329][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.728942][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.756849][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.758781][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.759143][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.761460][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.762916][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.762962][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.763165][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.763208][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.767133][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.769295][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.769678][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.771677][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.836082][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.838891][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.841530][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.841617][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.841799][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.841887][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.844027][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.848264][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.848701][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.850904][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.851321][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.853067][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.890439][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.901113][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.901159][ T5741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.901256][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.901298][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.921777][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.927089][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.927935][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.931446][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.932156][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.936092][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.941722][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.944190][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.947438][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.953094][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.961291][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.964396][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.981673][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.983894][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.997478][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.006773][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.006820][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.028447][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.028532][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.066284][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.097031][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.116897][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.117757][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.123574][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.123655][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.127153][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.127196][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.130386][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.130429][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.160424][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.160471][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.196735][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.225247][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.232055][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.232141][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.233977][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.234063][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.280443][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.446661][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.478981][ T5733] veth0_vlan: entered promiscuous mode [ 39.484727][ T5733] veth1_vlan: entered promiscuous mode [ 39.492875][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.512279][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.518406][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.540680][ T5733] veth0_macvtap: entered promiscuous mode [ 39.552245][ T5733] veth1_macvtap: entered promiscuous mode [ 39.560842][ T5741] veth0_vlan: entered promiscuous mode [ 39.565702][ T5738] Bluetooth: hci0: command tx timeout [ 39.572151][ T5741] veth1_vlan: entered promiscuous mode [ 39.575719][ T5094] Bluetooth: hci1: command tx timeout [ 39.575758][ T64] Bluetooth: hci3: command tx timeout [ 39.577787][ T5738] Bluetooth: hci2: command tx timeout [ 39.585231][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.587341][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.602869][ T5742] veth0_vlan: entered promiscuous mode [ 39.611312][ T5735] veth0_vlan: entered promiscuous mode [ 39.615812][ T5550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.617176][ T5742] veth1_vlan: entered promiscuous mode [ 39.620234][ T5741] veth0_macvtap: entered promiscuous mode [ 39.628516][ T5741] veth1_macvtap: entered promiscuous mode [ 39.632894][ T5735] veth1_vlan: entered promiscuous mode [ 39.656258][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.676539][ T5735] veth0_macvtap: entered promiscuous mode [ 39.679278][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.679317][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.679334][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.689631][ T5742] veth0_macvtap: entered promiscuous mode [ 39.691545][ T5735] veth1_macvtap: entered promiscuous mode [ 39.710635][ T5742] veth1_macvtap: entered promiscuous mode [ 39.720950][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.720964][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.741204][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.742911][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.751745][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.760418][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.770123][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.780093][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.782617][ T5733] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.785585][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785612][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785630][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785648][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785665][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785683][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785700][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785718][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785735][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785753][ T5883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785770][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785787][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785805][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785822][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.785840][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.788645][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.791606][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.791618][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.814611][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.841717][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.841731][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.883070][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.883087][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.911339][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.911351][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.932826][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.932839][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.959629][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.959643][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.013251][ T5886] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 40.199514][ T5905] e1000e 0000:00:02.0 eth1: removed PHC [ 40.313663][ T5905] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 41.355479][ T5900] NFSD: Unable to initialize client recovery tracking! (-110) [ 41.355493][ T5900] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 41.355499][ T5900] NFSD: starting 90-second grace period (net f00003f8) [ 41.376541][ T5903] svc: failed to register nfsdv3 RPC service (errno 512). [ 41.376630][ T5903] svc: failed to register nfsaclv3 RPC service (errno 512). [ 41.376639][ T5903] failed to unregister tcp with rpcbind [ 41.377524][ T5903] svc: failed to register nfsdv3 RPC service (errno 97). [ 41.377534][ T5903] svc: failed to register nfsaclv3 RPC service (errno 97). [ 41.377544][ T5903] failed to unregister tcp with rpcbind [ 41.655278][ T5738] Bluetooth: hci3: command tx timeout [ 41.655300][ T5738] Bluetooth: hci2: command tx timeout [ 41.655312][ T5738] Bluetooth: hci1: command tx timeout [ 41.655324][ T5738] Bluetooth: hci0: command tx timeout [ 42.495046][ T5911] NFSD: Unable to initialize client recovery tracking! (-110) [ 42.495060][ T5911] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 42.495066][ T5911] NFSD: starting 90-second grace period (net f0000505) [ 42.585058][ T5932] NFSD: Failed to start, no listeners configured. [ 43.083722][ T5974] loop0: detected capacity change from 0 to 4096 [ 43.099264][ T5969] ftl_cs: FTL header not found. [ 43.122483][ T5969] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 43.123986][ T5975] ubi0: attaching mtd0 [ 43.125523][ T5975] ubi0: scanning is finished [ 43.125532][ T5975] ubi0: empty MTD device detected [ 43.163035][ T5980] o2cb: Local heartbeat has not been started. [ 43.163046][ T5980] o2cb: Cluster check failed. Fix errors before retrying. [ 43.163057][ T5980] (syz.3.15,5980,2):user_dlm_register:674 ERROR: status = -22 [ 43.163069][ T5980] (syz.3.15,5980,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 43.285053][ T5828] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 43.302916][ T5975] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 43.302940][ T5975] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 43.302956][ T5975] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 43.302971][ T5975] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 43.302985][ T5975] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 43.302999][ T5975] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 43.303012][ T5975] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3816020308 [ 43.303028][ T5975] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 43.303115][ T5981] ubi0: background thread "ubi_bgt0d" started, PID 5981 [ 43.448656][ T5828] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 43.452753][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.452768][ T5828] usb 7-1: Product: syz [ 43.452775][ T5828] usb 7-1: Manufacturer: syz [ 43.452782][ T5828] usb 7-1: SerialNumber: syz [ 43.725089][ T5094] Bluetooth: hci0: command tx timeout [ 43.725117][ T5094] Bluetooth: hci2: command tx timeout [ 43.725119][ T5738] Bluetooth: hci1: command tx timeout [ 43.725129][ T5094] Bluetooth: hci3: command tx timeout [ 44.155052][ T5963] NFSD: Unable to initialize client recovery tracking! (-110) [ 44.155065][ T5963] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 44.155071][ T5963] NFSD: starting 90-second grace period (net f0000421) [ 44.726755][ T5985] svc: failed to register nfsdv3 RPC service (errno 512). [ 44.726851][ T5985] svc: failed to register nfsaclv3 RPC service (errno 512). [ 44.726859][ T5985] failed to unregister udp with rpcbind [ 44.726974][ T5985] svc: failed to register nfsdv3 RPC service (errno 97). [ 44.726986][ T5985] svc: failed to register nfsaclv3 RPC service (errno 97). [ 44.726995][ T5985] failed to unregister udp with rpcbind [ 45.805136][ T5738] Bluetooth: hci3: command tx timeout [ 45.805158][ T5738] Bluetooth: hci2: command tx timeout [ 45.805158][ T64] Bluetooth: hci0: command tx timeout [ 45.805170][ T5738] Bluetooth: hci1: command tx timeout [ 45.845086][ T5990] NFSD: Unable to initialize client recovery tracking! (-110) [ 45.845100][ T5990] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 45.845106][ T5990] NFSD: starting 90-second grace period (net f00003f8) [ 46.360558][ T6015] Zero length message leads to an empty skb [ 47.445035][ T6013] NFSD: Unable to initialize client recovery tracking! (-110) [ 47.445048][ T6013] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 47.445055][ T6013] NFSD: starting 90-second grace period (net f0000421) [ 47.769065][ T5828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 47.769097][ T5828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 47.771501][ T5828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 47.771565][ T5828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 47.775451][ T5828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 47.782217][ T5828] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 47.787047][ T5828] usb 7-1: USB disconnect, device number 2 [ 48.698774][ T6041] null_blk: nullb1: using native zone append [ 48.717760][ T6041] null_blk: disk nullb1 created [ 48.734576][ T6041] nvmet: adding nsid 1 to subsystem testsubsys [ 48.768959][ T1177] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:28fd5a02-74c0-45cc-80ed-3fc7f481f8a3. [ 48.774846][ T6041] nvme nvme0: creating 4 I/O queues. [ 48.781321][ T6041] nvme nvme0: new ctrl: "testsubsys" [ 48.875210][ T6030] NFSD: Unable to initialize client recovery tracking! (-110) [ 48.875228][ T6030] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 48.875237][ T6030] NFSD: starting 90-second grace period (net f00003f8) [ 50.285088][ T6031] NFSD: Unable to initialize client recovery tracking! (-110) [ 50.285107][ T6031] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 50.285116][ T6031] NFSD: starting 90-second grace period (net f0000505) [ 50.598197][ T6063] block2mtd: error: cannot open device /dev/ram0 [ 50.652608][ T6064] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 50.653193][ T6064] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 50.654163][ T6064] UBIFS error (pid: 6064): cannot open "ubi0:test", error -19 [ 51.745100][ T6055] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.745120][ T6055] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.745128][ T6055] NFSD: starting 90-second grace period (net f0000510) [ 53.135118][ T6061] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.135131][ T6061] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.135137][ T6061] NFSD: starting 90-second grace period (net f0000421) [ 54.535162][ T6070] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.535176][ T6070] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.535182][ T6070] NFSD: starting 90-second grace period (net f0000505) [ 55.965045][ T6082] NFSD: Unable to initialize client recovery tracking! (-110) [ 55.965059][ T6082] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 55.965065][ T6082] NFSD: starting 90-second grace period (net f00003f8) [ 56.318903][ T6105] loop0: detected capacity change from 0 to 4096 [ 57.355061][ T6091] NFSD: Unable to initialize client recovery tracking! (-110) [ 57.355081][ T6091] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 57.355091][ T6091] NFSD: starting 90-second grace period (net f0000510) [ 57.674826][ T6114] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000dd: 0000 [#1] SMP KASAN NOPTI [ 57.679665][ T6114] KASAN: null-ptr-deref in range [0x00000000000006e8-0x00000000000006ef] [ 57.683258][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 57.686967][ T6114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.691018][ T6114] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 57.693232][ T6114] Code: 84 db 74 09 e8 bd 90 09 fa 49 8d 6d f0 e8 b4 90 09 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 57.700957][ T6114] RSP: 0018:ffffc90006d57b00 EFLAGS: 00010207 [ 57.703485][ T6114] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 57.706743][ T6114] RDX: 00000000000000dd RSI: ffffffff8801d11c RDI: 00000000000006ec [ 57.709947][ T6114] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 57.713238][ T6114] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888022750000 [ 57.716464][ T6114] R13: 0000000000000000 R14: ffff888022750430 R15: ffff888022750070 [ 57.719686][ T6114] FS: 0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f544db40 [ 57.723324][ T6114] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 57.725998][ T6114] CR2: 00000000f727eb36 CR3: 000000006deff000 CR4: 0000000000352ef0 [ 57.729175][ T6114] Call Trace: [ 57.730561][ T6114] [ 57.731794][ T6114] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 57.734041][ T6114] platform_probe+0x106/0x1d0 [ 57.735975][ T6114] ? __pfx_platform_probe+0x10/0x10 [ 57.738176][ T6114] really_probe+0x241/0xa60 [ 57.740032][ T6114] __driver_probe_device+0x210/0x460 [ 57.742195][ T6114] device_driver_attach+0xd1/0x220 [ 57.744195][ T6114] bind_store+0xf4/0x190 [ 57.746003][ T6114] ? __pfx_bind_store+0x10/0x10 [ 57.748028][ T6114] drv_attr_store+0x74/0xb0 [ 57.749933][ T6114] ? __pfx_drv_attr_store+0x10/0x10 [ 57.752068][ T6114] sysfs_kf_write+0xf2/0x150 [ 57.754017][ T6114] kernfs_fop_write_iter+0x3e0/0x5f0 [ 57.756186][ T6114] ? __pfx_sysfs_kf_write+0x10/0x10 [ 57.758403][ T6114] vfs_write+0x6af/0x1050 [ 57.760235][ T6114] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 57.762665][ T6114] ? __pfx_vfs_write+0x10/0x10 [ 57.764754][ T6114] ? find_held_lock+0x2b/0x80 [ 57.766732][ T6114] ksys_write+0x12a/0x250 [ 57.768613][ T6114] ? __pfx_ksys_write+0x10/0x10 [ 57.770666][ T6114] __do_fast_syscall_32+0x13a/0x8b0 [ 57.772828][ T6114] do_fast_syscall_32+0x32/0x70 [ 57.774843][ T6114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.777457][ T6114] RIP: 0023:0xf705efec [ 57.779173][ T6114] Code: Unable to access opcode bytes at 0xf705efc2. [ 57.781887][ T6114] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 57.784980][ T6114] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 57.788180][ T6114] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.790846][ T6114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.793326][ T6114] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.795695][ T6114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.798070][ T6114] [ 57.798992][ T6114] Modules linked in: [ 57.800313][ T6114] ---[ end trace 0000000000000000 ]--- [ 57.802111][ T6114] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 57.802174][ T6114] Code: 84 db 74 09 e8 bd 90 09 fa 49 8d 6d f0 e8 b4 90 09 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 57.802192][ T6114] RSP: 0018:ffffc90006d57b00 EFLAGS: 00010207 [ 57.802239][ T6114] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 57.802251][ T6114] RDX: 00000000000000dd RSI: ffffffff8801d11c RDI: 00000000000006ec [ 57.802262][ T6114] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 57.802273][ T6114] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888022750000 [ 57.802284][ T6114] R13: 0000000000000000 R14: ffff888022750430 R15: ffff888022750070 [ 57.802295][ T6114] FS: 0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f544db40 [ 57.802329][ T6114] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 57.802343][ T6114] CR2: 00000000f705f000 CR3: 000000006deff000 CR4: 0000000000352ef0 [ 57.802377][ T6114] Kernel panic - not syncing: Fatal exception [ 57.838830][ T6114] Kernel Offset: disabled [ 57.840143][ T6114] Rebooting in 86400 seconds..