last executing test programs: 16.497526644s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 14.58967747s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='naa.6001405123456789\x00', 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000800)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000840)={0x1}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x1c) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f00000008c0)=""/28}, &(0x7f0000000900)="5f000000000000001c00", &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) 11.876273348s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.021493322s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='1', 0x1) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 10.809847595s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='myclient / 2147483647 8192 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ed) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000500)='nfs\x00', 0x0, &(0x7f0000000540)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 10.55059007s ago: executing program 0 (id=24): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 9.057782802s ago: executing program 3 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2,timeo=1,retrans=1,retry=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 7.010259574s ago: executing program 2 (id=30): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0200080000000000000000000123456789abcdef0123456789abcdef", 0x1c, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) 6.931958883s ago: executing program 2 (id=31): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020240000007058602400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.712928048s ago: executing program 0 (id=32): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc8}}}}, 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8000a0006000500150102000000"], 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 6.573249706s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x1ff, 0x0) 6.523202987s ago: executing program 1 (id=34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x800) pwrite64(r0, &(0x7f0000001000)="444f5301", 0x4, 0x0) pwrite64(r0, &(0x7f0000001004)="00000002", 0x4, 0x400) pwrite64(r0, &(0x7f0000001008)="fffffff9", 0x4, 0x414) pwrite64(r0, &(0x7f000000100c)="00000001", 0x4, 0x538) pwrite64(r0, &(0x7f0000001010)="00000003", 0x4, 0x53c) pwrite64(r0, &(0x7f0000001014)="00000001", 0x4, 0x5fc) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) mount(&(0x7f0000004000)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./dir0\x00', &(0x7f0000005000)='affs\x00', 0x0, 0x0) 6.460298736s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='cirrus-qemu\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:01.1\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.1/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='cirrus-qemu\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:01.1\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='cirrus-qemu\x00', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='0000:00:03.0\x00', 0xd) r10 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r10, &(0x7f0000000600)='cirrus-qemu\x00', 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r11, &(0x7f0000000680)='0000:00:03.0\x00', 0xd) 6.081799105s ago: executing program 0 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x4) 5.900760178s ago: executing program 1 (id=37): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) 5.652166407s ago: executing program 1 (id=38): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b10e07700002010203010902270001010080fa0904000003ff00ff00070584030002000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x84, 0x4, &(0x7f0000000100)='\x00\x00ZZ') (async) syz_usb_ep_write(r0, 0x84, 0x4, &(0x7f0000000100)='\x00\x00ZZ') (async) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000400)="ffd80000") (async) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000500), 0x1000) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 5.555921894s ago: executing program 3 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* /tmp 2147483647 0 0 0 0 fsloc 1 127.0.0.1 /tmp\n\x00', 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/tmp\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 4.65113416s ago: executing program 3 (id=40): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x0, 0x3}}) 3.89111325s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,nr_reconnects=0\x00', 0xb1) close(r5) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) 3.031289555s ago: executing program 2 (id=42): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") read$hidraw(r1, &(0x7f0000000800), 0x9) 2.491838177s ago: executing program 3 (id=43): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000200)='\x00'/24) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000300)=""/12) syz_usb_ep_write(r0, 0x81, 0x1c, &(0x7f0000000400)='\x00'/28) syz_usb_ep_write(r0, 0x81, 0x1a, &(0x7f0000000500)="5744040000000000000057440400000000000000575a00000800") nanosleep(&(0x7f0000000600)={0x3}, 0x0) 1.979780035s ago: executing program 1 (id=44): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04203000010000000109025100010100803209040000000101000009240100013f0001000c24020101020001000000000c24020201020001000000000c24020301020001000000000924050e0301020300092403040103000e00"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000400)) 198.782µs ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/rdma_rxe/parameters/add\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='lo\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/infiniband_srp/srp-rxe0-1/add_target\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='id_ext=0000000000000000,ioc_guid=0000000000000000,dgid=00000000000000000000000000000000,pkey=ffff,service_id=0000000000000000\x00', 0x7b) 0s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:03.0\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='dwc3-pci\x00', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r9, &(0x7f0000000600)='dwc3-pci\x00', 0x8) write(r8, &(0x7f0000000500)='0000:00:03.0\x00', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62134' (ED25519) to the list of known hosts. [ 42.572448][ T5726] cgroup: Unknown subsys name 'net' [ 42.747015][ T5726] cgroup: Unknown subsys name 'cpuset' [ 42.753549][ T5726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.738468][ T5726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.694185][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.699276][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.701869][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.705181][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.708276][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.709181][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.711249][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.711488][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.714417][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.716130][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.717445][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.717801][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.723117][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.726573][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.727418][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.728804][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.729470][ T5762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.735913][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.738861][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.740775][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.334467][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.337321][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.340001][ T5746] bridge_slave_0: entered allmulticast mode [ 48.342959][ T5746] bridge_slave_0: entered promiscuous mode [ 48.347890][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.350306][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.353103][ T5746] bridge_slave_1: entered allmulticast mode [ 48.355918][ T5746] bridge_slave_1: entered promiscuous mode [ 48.373139][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.375533][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.378031][ T5755] bridge_slave_0: entered allmulticast mode [ 48.380812][ T5755] bridge_slave_0: entered promiscuous mode [ 48.428610][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.431928][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.435036][ T5755] bridge_slave_1: entered allmulticast mode [ 48.439535][ T5755] bridge_slave_1: entered promiscuous mode [ 48.489374][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.506974][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.510282][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.513030][ T5754] bridge_slave_0: entered allmulticast mode [ 48.515987][ T5754] bridge_slave_0: entered promiscuous mode [ 48.519865][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.541038][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.547918][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.551860][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.555218][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.558297][ T5754] bridge_slave_1: entered allmulticast mode [ 48.562988][ T5754] bridge_slave_1: entered promiscuous mode [ 48.576261][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.579263][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.582466][ T5745] bridge_slave_0: entered allmulticast mode [ 48.586292][ T5745] bridge_slave_0: entered promiscuous mode [ 48.616646][ T5746] team0: Port device team_slave_0 added [ 48.619264][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.622762][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.625833][ T5745] bridge_slave_1: entered allmulticast mode [ 48.629751][ T5745] bridge_slave_1: entered promiscuous mode [ 48.649528][ T5746] team0: Port device team_slave_1 added [ 48.660274][ T5755] team0: Port device team_slave_0 added [ 48.664908][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.683976][ T5755] team0: Port device team_slave_1 added [ 48.688085][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.700565][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.724821][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.727489][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.736372][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.742837][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.759133][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.762122][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.770653][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.784654][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.786896][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.795037][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.800554][ T5754] team0: Port device team_slave_0 added [ 48.804880][ T5754] team0: Port device team_slave_1 added [ 48.815505][ T5745] team0: Port device team_slave_0 added [ 48.817818][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.820567][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.828775][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.848472][ T5745] team0: Port device team_slave_1 added [ 48.881150][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.884205][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.894672][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.909699][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.912127][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.920820][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.938063][ T5746] hsr_slave_0: entered promiscuous mode [ 48.942188][ T5746] hsr_slave_1: entered promiscuous mode [ 48.946368][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.949611][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.958487][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.967912][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.970630][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.980560][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.038153][ T5755] hsr_slave_0: entered promiscuous mode [ 49.040753][ T5755] hsr_slave_1: entered promiscuous mode [ 49.042957][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 49.044828][ T5755] Cannot create hsr debugfs directory [ 49.066811][ T5754] hsr_slave_0: entered promiscuous mode [ 49.069160][ T5754] hsr_slave_1: entered promiscuous mode [ 49.071234][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 49.073566][ T5754] Cannot create hsr debugfs directory [ 49.078469][ T5745] hsr_slave_0: entered promiscuous mode [ 49.080841][ T5745] hsr_slave_1: entered promiscuous mode [ 49.082969][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 49.084708][ T5745] Cannot create hsr debugfs directory [ 49.352719][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.363748][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.367904][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.374237][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.377657][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.384235][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.393727][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.399008][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.425904][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.432371][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.435256][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.440282][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.444017][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.448438][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.451404][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.455377][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.514259][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.518192][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.521008][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.525605][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.529197][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.533107][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.536755][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.540945][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.609782][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.614624][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.617790][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.621649][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.631769][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.636183][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.639110][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.643974][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.661825][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.696890][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.701701][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.715058][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.717717][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.728770][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.731077][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.738115][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.764112][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.766424][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.769819][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.772120][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.793563][ T5752] Bluetooth: hci1: command tx timeout [ 49.794228][ T5748] Bluetooth: hci2: command tx timeout [ 49.794269][ T5759] Bluetooth: hci3: command tx timeout [ 49.797263][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.802400][ T5748] Bluetooth: hci0: command tx timeout [ 49.831269][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.835371][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.847847][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.850333][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.864825][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.867246][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.878903][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.887696][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.890356][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.906901][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.909184][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.118681][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.139369][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.159789][ T5746] veth0_vlan: entered promiscuous mode [ 50.168030][ T5746] veth1_vlan: entered promiscuous mode [ 50.196842][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.209205][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.225245][ T5746] veth0_macvtap: entered promiscuous mode [ 50.232353][ T5745] veth0_vlan: entered promiscuous mode [ 50.235921][ T5746] veth1_macvtap: entered promiscuous mode [ 50.248076][ T5745] veth1_vlan: entered promiscuous mode [ 50.258005][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.271124][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.289736][ T5754] veth0_vlan: entered promiscuous mode [ 50.298961][ T5754] veth1_vlan: entered promiscuous mode [ 50.305430][ T5755] veth0_vlan: entered promiscuous mode [ 50.323741][ T5755] veth1_vlan: entered promiscuous mode [ 50.344603][ T5745] veth0_macvtap: entered promiscuous mode [ 50.363291][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.363575][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.367779][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.370418][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.381101][ T5745] veth1_macvtap: entered promiscuous mode [ 50.388326][ T5754] veth0_macvtap: entered promiscuous mode [ 50.406795][ T5754] veth1_macvtap: entered promiscuous mode [ 50.411181][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.414277][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.414533][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.427904][ T5755] veth0_macvtap: entered promiscuous mode [ 50.433477][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.440365][ T5755] veth1_macvtap: entered promiscuous mode [ 50.445512][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.455625][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.469625][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.479704][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.493762][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.497270][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.505411][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.512292][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.515130][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.527438][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.534882][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.537787][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.562705][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.572484][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.590546][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.597977][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.599867][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.605821][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.634874][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.638401][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.642583][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.653295][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.668985][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.672344][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.676475][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.717259][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.720803][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.725160][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.728459][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.762750][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.767667][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.771385][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.774549][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.777351][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.780093][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.830423][ T5902] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 51.816213][ T42] audit: type=1800 audit(1785863722.263:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="attr_allow_any_host" dev="configfs" ino=9517 res=0 errno=0 [ 51.826548][ T5918] nvmet: adding nsid 1 to subsystem testnqn [ 51.834424][ T42] audit: type=1800 audit(1785863722.273:3): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="device_path" dev="configfs" ino=9519 res=0 errno=0 [ 51.844910][ T42] audit: type=1800 audit(1785863722.283:4): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="enable" dev="configfs" ino=10927 res=0 errno=0 [ 51.853265][ T42] audit: type=1800 audit(1785863722.293:5): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="addr_trtype" dev="configfs" ino=9521 res=0 errno=0 [ 51.859973][ T5918] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 51.861136][ T42] audit: type=1800 audit(1785863722.293:6): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="addr_adrfam" dev="configfs" ino=9522 res=0 errno=0 [ 51.871240][ T42] audit: type=1800 audit(1785863722.313:7): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="addr_traddr" dev="configfs" ino=9523 res=0 errno=0 [ 51.882997][ T5897] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.887104][ T5897] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.893961][ T5897] NFSD: starting 10-second grace period (net f00003f7) [ 51.899385][ T42] audit: type=1800 audit(1785863722.313:8): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="addr_trsvcid" dev="configfs" ino=9524 res=0 errno=0 [ 51.900520][ T5748] Bluetooth: hci1: command tx timeout [ 51.905285][ T5759] Bluetooth: hci2: command tx timeout [ 51.905316][ T5759] Bluetooth: hci3: command tx timeout [ 51.905431][ T5752] Bluetooth: hci0: command tx timeout [ 51.946629][ T5922] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 51.952872][ T5922] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 51.959721][ T5922] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 51.967356][ T5922] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.978359][ T5922] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 52.045542][ T5925] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 52.050844][ T5925] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 52.057856][ T5925] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 52.068825][ T5925] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.109315][ T5928] Zero length message leads to an empty skb [ 52.402188][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.556546][ T50] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 52.559597][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.562134][ T50] usb 8-1: Product: syz [ 52.563434][ T50] usb 8-1: Manufacturer: syz [ 52.564901][ T50] usb 8-1: SerialNumber: syz [ 52.794358][ T5904] svc: failed to register nfsdv3 RPC service (errno 512). [ 52.796896][ T5904] svc: failed to register nfsaclv3 RPC service (errno 512). [ 52.799290][ T5904] failed to unregister tcp with rpcbind [ 52.801122][ T5904] svc: failed to register nfsdv3 RPC service (errno 97). [ 52.803587][ T5904] svc: failed to register nfsaclv3 RPC service (errno 97). [ 52.805834][ T5904] failed to unregister tcp with rpcbind [ 53.043519][ C2] usb 8-1: received EP1 urb->status = -2 [ 53.045429][ T50] usb 8-1: unable to init card! (ret=-110) [ 53.048978][ T50] snd-usb-caiaq 8-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 53.922097][ T5935] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.925166][ T5935] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.928944][ T5935] NFSD: starting 90-second grace period (net f000047d) [ 53.952161][ T5748] Bluetooth: hci0: command tx timeout [ 53.952584][ T5752] Bluetooth: hci2: command tx timeout [ 53.952657][ T5760] Bluetooth: hci3: command tx timeout [ 53.962058][ T5752] Bluetooth: hci1: command tx timeout [ 54.333639][ T42] audit: type=1800 audit(1785863724.783:9): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="enable" dev="configfs" ino=10965 res=0 errno=0 [ 54.336929][ T5944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.341284][ T42] audit: type=1800 audit(1785863724.783:10): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="idVendor" dev="configfs" ino=8586 res=0 errno=0 [ 54.343294][ T5945] se_device not configured yet, cannot port link [ 54.352980][ T42] audit: type=1800 audit(1785863724.783:11): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="idProduct" dev="configfs" ino=8587 res=0 errno=0 [ 54.421136][ T5950] loop1: detected capacity change from 0 to 2048 [ 54.443927][ T5950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.525720][ T5950] md: invalid superblock checksum on loop1 [ 54.528803][ T5950] md: loop1 does not have a valid v1.1 superblock, not importing! [ 54.832427][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.983298][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.986666][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 54.989796][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 54.995331][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.999350][ T29] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 55.002588][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.008377][ T5953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.014678][ T5953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.017283][ T5953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.021314][ T5953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.029589][ T5958] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 55.033986][ T5958] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 55.452075][ T29] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 55.606983][ T61] usb 8-1: USB disconnect, device number 2 [ 55.623902][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 55.636554][ T29] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 55.639385][ T29] usb 5-1: config 0 has no interface number 0 [ 55.641368][ T29] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 55.645372][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.653570][ T29] usb 5-1: config 0 descriptor?? [ 55.654894][ T5964] kAFS: unable to lookup cell 'syz0' [ 55.773178][ T29] viperboard 5-1:0.143: version 0.00 found at bus 005 address 002 [ 55.807350][ T29] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 55.812777][ T29] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 55.884131][ T5973] sl0: header compression turned on [ 55.944563][ T29] usb 5-1: USB disconnect, device number 2 [ 56.032288][ T5752] Bluetooth: hci3: command tx timeout [ 56.034159][ T5752] Bluetooth: hci2: command tx timeout [ 56.036683][ T5752] Bluetooth: hci1: command tx timeout [ 56.043790][ T5752] Bluetooth: hci0: command tx timeout [ 56.162071][ T5957] NFSD: Unable to initialize client recovery tracking! (-110) [ 56.164604][ T5957] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 56.167380][ T5957] NFSD: starting 90-second grace period (net f000047c) [ 56.235728][ T40] usb 7-1: USB disconnect, device number 2 [ 56.732154][ T5480] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.796884][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.836500][ T50] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 56.839687][ T50] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 56.883957][ T5480] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 56.887167][ T5480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.952600][ T41] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 57.062256][ T41] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 57.172155][ T48] wlan1: authentication with 08:02:11:00:00:00 timed out [ 57.712081][ T5998] NFSD: Unable to initialize client recovery tracking! (-110) [ 57.714415][ T5998] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 57.717057][ T5998] NFSD: starting 10-second grace period (net f000058b) [ 58.006739][ T6015] vivid-000: unregistering video7 [ 58.013071][ T6015] vivid-000: unregistering video8 [ 58.019327][ T6015] vivid-000: unregistering vbi0 [ 58.034556][ T6015] vivid-000: unregistering vbi1 [ 58.038933][ T6015] vivid-000: unregistering swradio0 [ 58.049013][ T6015] vivid-000: unregistering radio0 [ 58.065658][ T6015] vivid-000: unregistering radio1 [ 58.077354][ T6015] vivid-000: unregistering video9 [ 58.088245][ T6015] vivid-000: unregistering video10 [ 58.107172][ T6017] vim2m vim2m.0: Removing vim2m [ 58.107669][ T6015] vivid-000: unregistering v4l-touch0 [ 58.124047][ T6017] vicodec vicodec.0: Removing vicodec [ 58.190473][ T6015] vivid-001: unregistering video11 [ 58.200486][ T6015] vivid-001: unregistering video12 [ 58.217598][ T6015] vivid-001: unregistering vbi2 [ 58.224189][ T6015] vivid-001: unregistering vbi3 [ 58.246131][ T6015] vivid-001: unregistering swradio1 [ 58.253377][ T6015] vivid-001: unregistering radio2 [ 58.262864][ T6015] vivid-001: unregistering radio3 [ 58.266880][ T6015] vivid-001: unregistering video13 [ 58.269898][ T6015] vivid-001: unregistering video14 [ 58.274919][ T6015] vivid-001: unregistering v4l-touch1 [ 58.315382][ T6015] vivid-002: unregistering video15 [ 58.318151][ T6015] vivid-002: unregistering video16 [ 58.320728][ T6015] vivid-002: unregistering vbi4 [ 58.329890][ T6015] vivid-002: unregistering vbi5 [ 58.341728][ T6015] vivid-002: unregistering swradio2 [ 58.361813][ T6015] vivid-002: unregistering radio4 [ 58.366598][ T6015] vivid-002: unregistering radio5 [ 58.371042][ T6015] vivid-002: unregistering video17 [ 58.374979][ T6015] vivid-002: unregistering video18 [ 58.383317][ T6015] vivid-002: unregistering v4l-touch2 [ 58.412909][ T846] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.423280][ T6015] vivid-003: unregistering video19 [ 58.425853][ T6015] vivid-003: unregistering video20 [ 58.429991][ T6015] vivid-003: unregistering vbi6 [ 58.438178][ T6015] vivid-003: unregistering vbi7 [ 58.442817][ T6015] vivid-003: unregistering swradio3 [ 58.451790][ T6015] vivid-003: unregistering radio6 [ 58.456628][ T6015] vivid-003: unregistering radio7 [ 58.460903][ T6015] vivid-003: unregistering video21 [ 58.464808][ T6015] vivid-003: unregistering video22 [ 58.467767][ T6015] vivid-003: unregistering v4l-touch3 [ 58.501660][ T6015] vivid-004: unregistering video23 [ 58.505604][ T6015] vivid-004: unregistering video24 [ 58.508936][ T6015] vivid-004: unregistering vbi8 [ 58.517204][ T6015] vivid-004: unregistering vbi9 [ 58.526658][ T6015] vivid-004: unregistering swradio4 [ 58.557981][ T6015] vivid-004: unregistering radio8 [ 58.570500][ T6015] vivid-004: unregistering radio9 [ 58.573782][ T6015] vivid-004: unregistering video25 [ 58.576776][ T6015] vivid-004: unregistering video26 [ 58.580431][ T6015] vivid-004: unregistering v4l-touch4 [ 58.585018][ T846] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 58.597770][ T846] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 58.601634][ T846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.605719][ T846] usb 6-1: Product: syz [ 58.607331][ T846] usb 6-1: Manufacturer: syz [ 58.609121][ T846] usb 6-1: SerialNumber: syz [ 58.613384][ T6021] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 58.617932][ T846] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 58.623616][ T6015] vivid-005: unregistering video27 [ 58.623864][ T846] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb6/6-1/input/input5 [ 58.626024][ T6015] vivid-005: unregistering video28 [ 58.631072][ T6015] vivid-005: unregistering vbi10 [ 58.643532][ T6015] vivid-005: unregistering vbi11 [ 58.651308][ T6015] vivid-005: unregistering swradio5 [ 58.670600][ T6015] vivid-005: unregistering radio10 [ 58.676387][ T6015] vivid-005: unregistering radio11 [ 58.680111][ T6015] vivid-005: unregistering video29 [ 58.684327][ T6015] vivid-005: unregistering video30 [ 58.693930][ T6015] vivid-005: unregistering v4l-touch5 [ 58.734574][ T6015] vivid-006: unregistering video31 [ 58.738093][ T6015] vivid-006: unregistering video32 [ 58.741794][ T6015] vivid-006: unregistering vbi12 [ 58.746798][ T6015] vivid-006: unregistering vbi13 [ 58.756973][ T6015] vivid-006: unregistering swradio6 [ 58.759550][ T6015] vivid-006: unregistering radio12 [ 58.764809][ T6015] vivid-006: unregistering radio13 [ 58.767802][ T6015] vivid-006: unregistering video33 [ 58.772659][ T6015] vivid-006: unregistering video34 [ 58.775004][ T6015] vivid-006: unregistering v4l-touch6 [ 58.805813][ T6015] vivid-007: unregistering video35 [ 58.808215][ T6015] vivid-007: unregistering video36 [ 58.811917][ T6015] vivid-007: unregistering vbi14 [ 58.815531][ T6015] vivid-007: unregistering vbi15 [ 58.820999][ T6015] vivid-007: unregistering swradio7 [ 58.834895][ T6015] vivid-007: unregistering radio14 [ 58.839116][ T6015] vivid-007: unregistering radio15 [ 58.845645][ T6015] vivid-007: unregistering video37 [ 58.848006][ T6015] vivid-007: unregistering video38 [ 58.850375][ T6015] vivid-007: unregistering v4l-touch7 [ 58.878220][ T6015] vivid-008: unregistering video39 [ 58.881314][ T6015] vivid-008: unregistering video40 [ 58.888391][ T6015] vivid-008: unregistering vbi16 [ 58.899662][ T6015] vivid-008: unregistering vbi17 [ 58.906256][ T6015] vivid-008: unregistering swradio8 [ 58.916876][ T6015] vivid-008: unregistering radio16 [ 58.920222][ T6015] vivid-008: unregistering radio17 [ 58.923534][ T6015] vivid-008: unregistering video41 [ 58.926538][ T6015] vivid-008: unregistering video42 [ 58.930439][ T6015] vivid-008: unregistering v4l-touch8 [ 58.958210][ T6015] vivid-009: unregistering video43 [ 58.962102][ T6015] vivid-009: unregistering video44 [ 58.964848][ T6015] vivid-009: unregistering vbi18 [ 58.969347][ T6015] vivid-009: unregistering vbi19 [ 58.976878][ T6015] vivid-009: unregistering swradio9 [ 58.983874][ T6015] vivid-009: unregistering radio18 [ 58.989062][ T6015] vivid-009: unregistering radio19 [ 58.993491][ T6015] vivid-009: unregistering video45 [ 59.002061][ T6015] vivid-009: unregistering video46 [ 59.004801][ T6015] vivid-009: unregistering v4l-touch9 [ 59.032153][ T6015] vivid-010: unregistering video47 [ 59.034555][ T6015] vivid-010: unregistering video48 [ 59.037967][ T6015] vivid-010: unregistering vbi20 [ 59.045926][ T6015] vivid-010: unregistering vbi21 [ 59.054108][ T6015] vivid-010: unregistering swradio10 [ 59.063856][ T6015] vivid-010: unregistering radio20 [ 59.071563][ T6015] vivid-010: unregistering radio21 [ 59.077324][ T6015] vivid-010: unregistering video49 [ 59.080363][ T6015] vivid-010: unregistering video50 [ 59.084074][ T6015] vivid-010: unregistering v4l-touch10 [ 59.108003][ T6015] vivid-011: unregistering video51 [ 59.110329][ T6015] vivid-011: unregistering video52 [ 59.112902][ T6015] vivid-011: unregistering vbi22 [ 59.116623][ T6015] vivid-011: unregistering vbi23 [ 59.119223][ T6015] vivid-011: unregistering swradio11 [ 59.122675][ T6015] vivid-011: unregistering radio22 [ 59.131251][ T6015] vivid-011: unregistering radio23 [ 59.135842][ T6015] vivid-011: unregistering video53 [ 59.138435][ T6015] vivid-011: unregistering video54 [ 59.141678][ T6015] vivid-011: unregistering v4l-touch11 [ 59.169297][ T6015] vivid-012: unregistering video55 [ 59.172023][ T6015] vivid-012: unregistering video56 [ 59.175796][ T6015] vivid-012: unregistering vbi24 [ 59.179524][ T6015] vivid-012: unregistering vbi25 [ 59.183911][ T6015] vivid-012: unregistering swradio12 [ 59.192626][ T6015] vivid-012: unregistering radio24 [ 59.201371][ T6015] vivid-012: unregistering radio25 [ 59.204770][ T6015] vivid-012: unregistering video57 [ 59.207097][ T6015] vivid-012: unregistering video58 [ 59.211507][ T6015] vivid-012: unregistering v4l-touch12 [ 59.214280][ T6010] NFSD: Unable to initialize client recovery tracking! (-110) [ 59.217128][ T6010] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 59.220459][ T6010] NFSD: starting 90-second grace period (net f000047d) [ 59.247953][ T6015] vivid-013: unregistering video59 [ 59.250824][ T6015] vivid-013: unregistering video60 [ 59.254203][ T6015] vivid-013: unregistering vbi26 [ 59.261401][ T6015] vivid-013: unregistering vbi27 [ 59.265381][ T6015] vivid-013: unregistering swradio13 [ 59.268646][ T6015] vivid-013: unregistering radio26 [ 59.271672][ T6015] vivid-013: unregistering radio27 [ 59.274777][ T6015] vivid-013: unregistering video61 [ 59.277314][ T6015] vivid-013: unregistering video62 [ 59.281238][ T6015] vivid-013: unregistering v4l-touch13 [ 59.325808][ T6015] vivid-014: unregistering video63 [ 59.328762][ T6015] vivid-014: unregistering video64 [ 59.332950][ T6015] vivid-014: unregistering vbi28 [ 59.338915][ T6015] vivid-014: unregistering vbi29 [ 59.341696][ T6015] vivid-014: unregistering swradio14 [ 59.347949][ T6015] vivid-014: unregistering radio28 [ 59.352683][ T6015] vivid-014: unregistering radio29 [ 59.356343][ T6015] vivid-014: unregistering video65 [ 59.358829][ T6015] vivid-014: unregistering video66 [ 59.361897][ T6015] vivid-014: unregistering v4l-touch14 [ 59.394540][ T6015] vivid-015: unregistering video67 [ 59.397659][ T6015] vivid-015: unregistering video68 [ 59.401083][ T6015] vivid-015: unregistering vbi30 [ 59.410838][ T6015] vivid-015: unregistering vbi31 [ 59.415077][ T6015] vivid-015: unregistering swradio15 [ 59.418612][ T6015] vivid-015: unregistering radio30 [ 59.421473][ T6015] vivid-015: unregistering radio31 [ 59.423956][ T6015] vivid-015: unregistering video69 [ 59.426365][ T6015] vivid-015: unregistering video70 [ 59.429271][ T6015] vivid-015: unregistering v4l-touch15 [ 59.457823][ T6015] vivid-016: unregistering video71 [ 59.460511][ T6015] vivid-016: unregistering video72 [ 59.465797][ T6015] vivid-016: unregistering vbi32 [ 59.470219][ T6015] vivid-016: unregistering vbi33 [ 59.473250][ T6015] vivid-016: unregistering swradio16 [ 59.477063][ T6015] vivid-016: unregistering radio32 [ 59.480715][ T6015] vivid-016: unregistering radio33 [ 59.483844][ T6015] vivid-016: unregistering video73 [ 59.486204][ T6015] vivid-016: unregistering video74 [ 59.489674][ T6015] vivid-016: unregistering v4l-touch16 [ 59.518046][ T6015] vivid-017: unregistering video75 [ 59.520431][ T6015] vivid-017: unregistering video76 [ 59.523227][ T6015] vivid-017: unregistering vbi34 [ 59.529603][ T6015] vivid-017: unregistering vbi35 [ 59.533840][ T6015] vivid-017: unregistering swradio17 [ 59.540158][ T6015] vivid-017: unregistering radio34 [ 59.543407][ T6015] vivid-017: unregistering radio35 [ 59.545770][ T6015] vivid-017: unregistering video77 [ 59.548032][ T6015] vivid-017: unregistering video78 [ 59.551130][ T6015] vivid-017: unregistering v4l-touch17 [ 59.573918][ T6015] vivid-018: unregistering video79 [ 59.576482][ T6015] vivid-018: unregistering video80 [ 59.580375][ T6015] vivid-018: unregistering vbi36 [ 59.586564][ T6015] vivid-018: unregistering vbi37 [ 59.592677][ T6015] vivid-018: unregistering swradio18 [ 59.595175][ T6015] vivid-018: unregistering radio36 [ 59.597487][ T6015] vivid-018: unregistering radio37 [ 59.599989][ T6015] vivid-018: unregistering video81 [ 59.603020][ T6015] vivid-018: unregistering video82 [ 59.605920][ T6015] vivid-018: unregistering v4l-touch18 [ 59.626364][ T6015] vivid-019: unregistering video83 [ 59.628770][ T6015] vivid-019: unregistering video84 [ 59.633184][ T6015] vivid-019: unregistering vbi38 [ 59.637588][ T6015] vivid-019: unregistering vbi39 [ 59.640974][ T6015] vivid-019: unregistering swradio19 [ 59.647132][ T6015] vivid-019: unregistering radio38 [ 59.651292][ T6015] vivid-019: unregistering radio39 [ 59.656968][ T6015] vivid-019: unregistering video85 [ 59.660223][ T6015] vivid-019: unregistering video86 [ 59.664160][ T6015] vivid-019: unregistering v4l-touch19 [ 59.696272][ T6015] vivid-020: unregistering video87 [ 59.699501][ T6015] vivid-020: unregistering video88 [ 59.704187][ T6015] vivid-020: unregistering vbi40 [ 59.710224][ T6015] vivid-020: unregistering vbi41 [ 59.712791][ T6015] vivid-020: unregistering swradio20 [ 59.715611][ T6015] vivid-020: unregistering radio40 [ 59.718713][ T6015] vivid-020: unregistering radio41 [ 59.724272][ T6015] vivid-020: unregistering video89 [ 59.727584][ T6015] vivid-020: unregistering video90 [ 59.731865][ T6015] vivid-020: unregistering v4l-touch20 [ 59.762607][ T6015] vivid-021: unregistering video91 [ 59.765901][ T6015] vivid-021: unregistering video92 [ 59.770336][ T6015] vivid-021: unregistering vbi42 [ 59.777332][ T6015] vivid-021: unregistering vbi43 [ 59.782261][ T6015] vivid-021: unregistering swradio21 [ 59.788598][ T6015] vivid-021: unregistering radio42 [ 59.792761][ T6015] vivid-021: unregistering radio43 [ 59.800340][ T6015] vivid-021: unregistering video93 [ 59.808023][ T6015] vivid-021: unregistering video94 [ 59.810561][ T6015] vivid-021: unregistering v4l-touch21 [ 59.830722][ T6031] rdma_rxe: rxe_newlink: failed to add syz_tun [ 59.846878][ T6015] vivid-022: unregistering video95 [ 59.849495][ T6015] vivid-022: unregistering video96 [ 59.851889][ T6015] vivid-022: unregistering vbi44 [ 59.856936][ T6015] vivid-022: unregistering vbi45 [ 59.859742][ T6015] vivid-022: unregistering swradio22 [ 59.863192][ T6015] vivid-022: unregistering radio44 [ 59.866674][ T6015] vivid-022: unregistering radio45 [ 59.869068][ T6015] vivid-022: unregistering video97 [ 59.871512][ T6015] vivid-022: unregistering video98 [ 59.874221][ T6015] vivid-022: unregistering v4l-touch22 [ 59.890632][ T6015] vivid-023: unregistering video99 [ 59.894124][ T6015] vivid-023: unregistering video100 [ 59.897777][ T6015] vivid-023: unregistering vbi46 [ 59.901585][ T6015] vivid-023: unregistering vbi47 [ 59.904942][ T6015] vivid-023: unregistering swradio23 [ 59.907581][ T6015] vivid-023: unregistering radio46 [ 59.910047][ T6015] vivid-023: unregistering radio47 [ 59.912497][ T6015] vivid-023: unregistering video101 [ 59.915857][ T6015] vivid-023: unregistering video102 [ 59.918336][ T6015] vivid-023: unregistering v4l-touch23 [ 59.966479][ T29] usb 6-1: USB disconnect, device number 2 [ 60.344313][ T5480] usbhid 5-1:1.0: can't add hid device: -71 [ 60.349550][ T5480] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 60.357520][ T5480] usb 5-1: USB disconnect, device number 3 [ 60.371097][ T5752] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 60.374607][ T5752] CPU: 3 UID: 0 PID: 5752 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 60.374624][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.374633][ T5752] Workqueue: hci1 hci_rx_work [ 60.374652][ T5752] Call Trace: [ 60.374676][ T5752] [ 60.374681][ T5752] dump_stack_lvl+0x100/0x190 [ 60.374697][ T5752] sysfs_warn_dup.cold+0x1c/0x28 [ 60.374716][ T5752] sysfs_create_dir_ns+0x24b/0x2b0 [ 60.374733][ T5752] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 60.374749][ T5752] ? find_held_lock+0x2b/0x80 [ 60.374769][ T5752] ? kobject_add_internal+0x25f/0x930 [ 60.374781][ T5752] ? kobject_add_internal+0x25f/0x930 [ 60.374794][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.374809][ T5752] kobject_add_internal+0x2c8/0x930 [ 60.374822][ T5752] kobject_add+0x16a/0x1e0 [ 60.374834][ T5752] ? __pfx_kobject_add+0x10/0x10 [ 60.374844][ T5752] ? class_to_subsys+0x10f/0x150 [ 60.374858][ T5752] ? kobject_put+0xb9/0x640 [ 60.374874][ T5752] ? _raw_spin_unlock+0x28/0x50 [ 60.374889][ T5752] device_add+0x294/0x1970 [ 60.374900][ T5752] ? __pfx_dev_set_name+0x10/0x10 [ 60.374913][ T5752] ? __pfx_device_add+0x10/0x10 [ 60.374923][ T5752] ? mgmt_send_event_skb+0x2fb/0x460 [ 60.374941][ T5752] hci_conn_add_sysfs+0x1a3/0x260 [ 60.374957][ T5752] le_conn_complete_evt+0x11eb/0x1f60 [ 60.374975][ T5752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 60.374987][ T5752] ? hci_event_packet+0x186/0xcd0 [ 60.375004][ T5752] hci_le_conn_complete_evt+0x23c/0x3a0 [ 60.375018][ T5752] ? skb_pull_data+0x15f/0x1e0 [ 60.375031][ T5752] hci_le_meta_evt+0x34a/0x5f0 [ 60.375047][ T5752] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 60.375062][ T5752] hci_event_packet+0x51c/0xcd0 [ 60.375075][ T5752] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 60.375090][ T5752] ? __pfx_hci_event_packet+0x10/0x10 [ 60.375105][ T5752] ? kcov_remote_start+0x384/0x670 [ 60.375121][ T5752] ? lockdep_hardirqs_on+0x78/0x100 [ 60.375140][ T5752] hci_rx_work+0x451/0xfc0 [ 60.375156][ T5752] process_one_work+0xa23/0x1940 [ 60.375178][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 60.375198][ T5752] ? __pfx_hci_rx_work+0x10/0x10 [ 60.375212][ T5752] worker_thread+0x5ef/0xe50 [ 60.375232][ T5752] ? kthread+0x13a/0x450 [ 60.375245][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 60.375260][ T5752] kthread+0x370/0x450 [ 60.375273][ T5752] ? __pfx_kthread+0x10/0x10 [ 60.375288][ T5752] ret_from_fork+0x72b/0xd50 [ 60.375303][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 60.375316][ T5752] ? __switch_to+0x800/0x10f0 [ 60.375334][ T5752] ? __pfx_kthread+0x10/0x10 [ 60.375360][ T5752] ret_from_fork_asm+0x1a/0x30 [ 60.375381][ T5752] [ 60.375396][ T5752] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.461552][ T5752] Bluetooth: hci1: failed to register connection device [ 60.568164][ T6049] loop0: detected capacity change from 0 to 4 [ 60.576983][ T6049] affs: No valid root block on device loop1 [ 60.719351][ T6051] cirrus-qemu 0000:00:01.0: vgaarb: deactivate vga console [ 60.734619][ T6051] cirrus-qemu 0000:00:01.0: probe with driver cirrus-qemu failed with error -12 [ 60.754324][ T6051] e1000e 0000:00:02.0 eth1: removed PHC [ 60.865837][ T6051] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 60.942085][ T6029] NFSD: Unable to initialize client recovery tracking! (-110) [ 60.952103][ T6029] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 60.954912][ T6029] NFSD: starting 10-second grace period (net f000058b) [ 60.971826][ T6064] PM: suspend entry (deep) [ 61.002422][ T6058] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:03.0 on minor 2 [ 61.013279][ T12] Filesystems sync: 0.034 seconds [ 61.027569][ T6058] cirrus-qemu 0000:00:03.0: [drm] fb1: cirrus-qemudrmf frame buffer device [ 61.069750][ T6055] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:02.0 on minor 3 [ 61.081331][ T6055] cirrus-qemu 0000:00:02.0: [drm] fb2: cirrus-qemudrmf frame buffer device [ 61.624264][ T2323] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.783967][ T2323] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 61.790580][ T2323] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 61.794269][ T2323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.796858][ T6064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.797514][ T2323] usb 6-1: Product: syz [ 61.797532][ T2323] usb 6-1: Manufacturer: syz [ 61.799718][ T6064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.801300][ T2323] usb 6-1: SerialNumber: syz [ 61.815647][ T6064] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.816491][ T2323] go7007 6-1:1.0: Direct firmware load for go7007/go7007fw.bin failed with error -2 [ 61.823304][ T2323] go7007 6-1:1.0: Falling back to sysfs fallback for: go7007/go7007fw.bin [ 62.652070][ T5839] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.803677][ T5839] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 62.807269][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.072089][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.146488][ T6107] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 63.151915][ T6107] nvme_fabrics: unknown parameter or missing value 'nr_reconnects=0' in ctrl creation request [ 63.876372][ T6064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.878477][ T6064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.884238][ T5752] Bluetooth: hci1: command 0x2016 tx timeout [ 63.887600][ T6064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.892342][ T6064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.894750][ T6064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.896769][ T6064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.900259][ T6064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.903723][ T6064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.905591][ T6064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.908756][ T6064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.021081][ T5839] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 64.026427][ T5839] usb 8-1: 2:0: failed to get current value for ch 0 (-22) [ 64.035720][ T5839] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.038069][ T5839] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 64.040910][ T5839] usb 8-1: [2] FU [PCM Playback Volume] ch = 2, val = 0/1/1 [ 64.074198][ T5839] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.088573][ T5839] usb 8-1: USB disconnect, device number 3 [ 64.802065][ T5480] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.954951][ T5480] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 64.957964][ T5480] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.960496][ T5480] usb 8-1: Product: syz [ 64.961831][ T5480] usb 8-1: Manufacturer: syz [ 64.963446][ T5480] usb 8-1: SerialNumber: syz [ 65.153238][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.783138][ T5480] kalmia 8-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.3-1, Samsung Kalmia LTE USB dongle, ce:75:55:31:b3:4f [ 65.952309][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.962072][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.962755][ T5760] Bluetooth: hci1: command 0x2016 tx timeout [ 67.206113][ T6132] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 67.209968][ T6132] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 67.212790][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT(full) [ 67.215666][ T6132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.218901][ T6132] RIP: 0010:software_node_register+0x2c/0x350 [ 67.220860][ T6132] Code: 1e fa 41 57 41 56 41 55 41 54 49 89 fc 55 4d 8d 7c 24 08 53 e8 35 cf ab fb 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 f2 02 00 00 4d 8b 74 24 08 4d 85 f6 0f 84 0e 02 [ 67.226969][ T6132] RSP: 0018:ffffc900010e7828 EFLAGS: 00010202 [ 67.229170][ T6132] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d5c2000 [ 67.231691][ T6132] RDX: 0000000000000001 RSI: ffffffff865de1cb RDI: 0000000000000000 [ 67.232050][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.234207][ T6132] RBP: ffff88802120a000 R08: 0000000000000007 R09: fffffffffffff000 [ 67.234218][ T6132] R10: ffff88802105f010 R11: 0000000000000000 R12: 0000000000000000 [ 67.234226][ T6132] R13: ffff8880242bd010 R14: ffff88802120a0d0 R15: 0000000000000008 [ 67.234234][ T6132] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f549db40 [ 67.234259][ T6132] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 67.234269][ T6132] CR2: 00000000f72ce9ea CR3: 0000000000746000 CR4: 0000000000352ef0 [ 67.234277][ T6132] Call Trace: [ 67.234282][ T6132] [ 67.234289][ T6132] device_add_software_node+0x35d/0x3f0 [ 67.255702][ T6132] dwc3_pci_probe+0x3cd/0xbf0 [ 67.257302][ T6132] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 67.259165][ T6132] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.261021][ T6132] ? lockdep_hardirqs_on+0x78/0x100 [ 67.262712][ T6132] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.264579][ T6132] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 67.266238][ T6132] local_pci_probe+0xdd/0x1b0 [ 67.267768][ T6132] pci_call_probe+0x176/0x800 [ 67.269305][ T6132] ? __pfx_pci_call_probe+0x10/0x10 [ 67.270970][ T6132] ? find_held_lock+0x2b/0x80 [ 67.272509][ T6132] ? pci_match_device+0x450/0x5f0 [ 67.274126][ T6132] ? pci_match_device+0x450/0x5f0 [ 67.275765][ T6132] ? pci_match_id+0x34d/0x3f0 [ 67.277280][ T6132] ? pci_match_device+0xb4/0x5f0 [ 67.279050][ T6132] pci_device_probe+0x1cd/0x370 [ 67.280627][ T6132] ? __pfx_pci_device_probe+0x10/0x10 [ 67.282360][ T6132] really_probe+0x241/0xa60 [ 67.283842][ T6132] __driver_probe_device+0x20e/0x450 [ 67.285539][ T6132] device_driver_attach+0xd1/0x220 [ 67.287206][ T6132] bind_store+0xf4/0x190 [ 67.288599][ T6132] ? __pfx_bind_store+0x10/0x10 [ 67.290221][ T6132] drv_attr_store+0x74/0xb0 [ 67.291680][ T6132] ? __pfx_drv_attr_store+0x10/0x10 [ 67.293330][ T6132] sysfs_kf_write+0xf2/0x150 [ 67.294856][ T6132] kernfs_fop_write_iter+0x3e0/0x5f0 [ 67.296544][ T6132] ? __pfx_sysfs_kf_write+0x10/0x10 [ 67.298348][ T6132] vfs_write+0x6ac/0x1050 [ 67.299743][ T6132] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 67.301622][ T6132] ? __pfx_vfs_write+0x10/0x10 [ 67.303194][ T6132] ? find_held_lock+0x2b/0x80 [ 67.304709][ T6132] ksys_write+0x12a/0x250 [ 67.306131][ T6132] ? __pfx_ksys_write+0x10/0x10 [ 67.307741][ T6132] __do_fast_syscall_32+0xe7/0x970 [ 67.309662][ T6132] do_fast_syscall_32+0x32/0x70 [ 67.311223][ T6132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.313241][ T6132] RIP: 0023:0xf70aefec [ 67.314562][ T6132] Code: Unable to access opcode bytes at 0xf70aefc2. [ 67.316683][ T6132] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 67.319432][ T6132] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000400 [ 67.321926][ T6132] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 67.324427][ T6132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.326936][ T6132] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.329461][ T6132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.331985][ T6132] [ 67.333001][ T6132] Modules linked in: [ 67.334642][ T6132] ---[ end trace 0000000000000000 ]--- [ 67.336681][ T6132] RIP: 0010:software_node_register+0x2c/0x350 [ 67.338748][ T6132] Code: 1e fa 41 57 41 56 41 55 41 54 49 89 fc 55 4d 8d 7c 24 08 53 e8 35 cf ab fb 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 f2 02 00 00 4d 8b 74 24 08 4d 85 f6 0f 84 0e 02 [ 67.344899][ T6132] RSP: 0018:ffffc900010e7828 EFLAGS: 00010202 [ 67.346871][ T6132] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d5c2000 [ 67.349494][ T6132] RDX: 0000000000000001 RSI: ffffffff865de1cb RDI: 0000000000000000 [ 67.352791][ T6132] RBP: ffff88802120a000 R08: 0000000000000007 R09: fffffffffffff000 [ 67.355398][ T6132] R10: ffff88802105f010 R11: 0000000000000000 R12: 0000000000000000 [ 67.357933][ T6132] R13: ffff8880242bd010 R14: ffff88802120a0d0 R15: 0000000000000008 [ 67.360425][ T6132] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f549db40 [ 67.363340][ T6132] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 67.365464][ T6132] CR2: 00000000f70af000 CR3: 0000000000746000 CR4: 0000000000352ef0 [ 67.368082][ T6132] Kernel panic - not syncing: Fatal exception [ 67.370752][ T6132] Kernel Offset: disabled [ 67.372159][ T6132] Rebooting in 86400 seconds..