last executing test programs: 1m3.316952979s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_print_times\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='devices', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='freeze', 0x6) 1m3.063918596s ago: executing program 2 (id=3): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01", 0x1, 0x20d1) pwrite64(r0, &(0x7f00000010d1)="01", 0x1, 0x20cd) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100", 0xc, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00', 0x4, 0x2d50) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 1m2.706280995s ago: executing program 2 (id=7): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05b10000000000000109022200010100803209040000010300000009211101000122150007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x15, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x1, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x1, "01"}, @global=@item_012={0x1, 0x1, 0x2, '\x00'}, @global=@item_012={0x2, 0x1, 0x4, "ff00"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, '\n'}, @main=@item_012={0x1, 0x0, 0x8, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02c08120000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02000000000000000000") 1m2.469195351s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='1024\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r2, &(0x7f0000000e00)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 1m2.288149995s ago: executing program 0 (id=9): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x7ffffffffffff000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000001000), &(0x7f0000001100), 0x0) 49.002471469s ago: executing program 1 (id=10): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020020000000000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 49.002278979s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00', 0x5) 48.909339271s ago: executing program 3 (id=12): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01", 0x1, 0x20d1) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="54190100", 0x4, 0x2558) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00', 0x4, 0x2d50) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=44bsd\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 48.849166362s ago: executing program 2 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x405, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp\x00', 0x2, 0x0) 48.820855384s ago: executing program 0 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f0000000700)="110000000000000000000000000000000000000080000000000000000000000080000000", 0x24, 0x4000, 0x0, 0x0) ioctl(r0, 0x8946, &(0x7f0000000600)="65746831000000000000000000000000000700000000007f") 48.604649829s ago: executing program 1 (id=15): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000140)) 48.5490721s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10) listen(r0, 0x10) dup2(r0, 0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) 48.407920884s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 48.402391224s ago: executing program 1 (id=18): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan1\x00', {0x45, 0x1, 0x6, 0x0, 0x9, 0x100, 0x1, 0x0, 0x20}, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 48.244976108s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\n', 0x4) 48.16189042s ago: executing program 1 (id=20): r0 = io_uring_setup(0x4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {}, 0x0, 0x1000}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 48.16087209s ago: executing program 0 (id=21): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @hdata, {}, @hdata}}}) 47.969083805s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000340)="300000001d0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000003c0)="300000001f0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="30000000200001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'syzkaller0\x00', &(0x7f0000000700)=@ethtool_ringparam={0x11}}) 47.918810156s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./config\x00', &(0x7f0000003000)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000007000)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000008000)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000009000)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000a000)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f000000b000)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f000000c000), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f000000d000), 0x2, 0x0) write(r3, &(0x7f000000e000)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) nanosleep(&(0x7f000000f000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000010000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000011000)='./sys\x00', &(0x7f0000012000)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000013000)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r4, &(0x7f0000014000)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000015000)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r5, &(0x7f0000016000)='1', 0x1) nanosleep(&(0x7f0000017000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000018000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019000)='./dev\x00', &(0x7f000001a000)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000001b000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f000001c000)="060000000000000002000000010100000303000080000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f000001d000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f000001e000)="060000000000000002000000010100000303000000400000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) 26.952129053s ago: executing program 32 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./config\x00', &(0x7f0000003000)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000005000)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000007000)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000008000)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000009000)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000a000)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f000000b000)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f000000c000), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f000000d000), 0x2, 0x0) write(r3, &(0x7f000000e000)="060000000000000002000000040100000000000000000000666f6f00"/116, 0x78) (async) nanosleep(&(0x7f000000f000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000010000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000011000)='./sys\x00', &(0x7f0000012000)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000013000)='./sys/kernel/dlm/foo/event_done\x00', 0x1, 0x0) write(r4, &(0x7f0000014000)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000015000)='./sys/kernel/dlm/foo/control\x00', 0x1, 0x0) write(r5, &(0x7f0000016000)='1', 0x1) nanosleep(&(0x7f0000017000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000018000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000019000)='./dev\x00', &(0x7f000001a000)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000001b000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f000001c000)="060000000000000002000000010100000303000080000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f000001d000)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f000001e000)="060000000000000002000000010100000303000000400000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7b) 26.899848114s ago: executing program 33 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000340)="300000001d0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000003c0)="300000001f0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="30000000200001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'syzkaller0\x00', &(0x7f0000000700)=@ethtool_ringparam={0x11}}) 26.788338917s ago: executing program 34 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x405, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp\x00', 0x2, 0x0) 26.711958919s ago: executing program 35 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\n', 0x4) 9.465419172s ago: executing program 5 (id=25): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7e5, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 7.57133884s ago: executing program 7 (id=28): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b53810000010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303080008"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)={0x0, 0x3, 0x4, {0x4, 0x3, '\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x40, 0x5, 0x4, "0000105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.008766509s ago: executing program 5 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 5.699081497s ago: executing program 5 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tmpfs\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x10, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) 5.56514578s ago: executing program 6 (id=32): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) 5.436231303s ago: executing program 5 (id=33): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000314050000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000314050000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4d2, @dev={0xac, 0x14, 0x14, 0xab}}, 0x10) listen(r1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4d2, @dev={0xac, 0x14, 0x14, 0xab}}, 0x10) close(r2) close(r1) 5.412767084s ago: executing program 6 (id=34): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./vhci\x00', 0x81b6, 0xa89) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./vhci\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)="ff40", 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="38000000010001", 0x7) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 5.18104891s ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/100, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000340)=""/100, 0x64) 5.140136311s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='+tcp\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='testdomain / 2147483647 8194 0 0 0\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000480)='./mnt/file1\x00', &(0x7f00000004c0)='./mnt/file2\x00') 4.914118726s ago: executing program 4 (id=37): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x8000, 0x0, 0x0) 4.740647631s ago: executing program 4 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1043}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd9, 0x6, @broadcast}, 0x14) 4.614160244s ago: executing program 5 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='freeze\n\x00', 0x8) 4.190730435s ago: executing program 36 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='freeze\n\x00', 0x8) 4.185411255s ago: executing program 6 (id=41): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000304), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000306)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000308), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000030a), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000030c)={0x2, 0xfa}, 0x2) 3.753529816s ago: executing program 6 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x3}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) 3.153207211s ago: executing program 7 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/thunderbolt/devices/domain0\x00', 0x0, 0x0) 3.021967884s ago: executing program 7 (id=44): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write(r0, &(0x7f0000000100)="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", 0x1a7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/dir\x00', 0x200) 2.79087509s ago: executing program 6 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0xbd, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 1.96506728s ago: executing program 7 (id=46): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 1.59749218s ago: executing program 7 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 1.138575832s ago: executing program 7 (id=48): r0 = syz_usb_connect$hid(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b1183700000100000001090222000101008032090400000103000000092111010001223e000705810308000a"], &(0x7f0000000100)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00223e000000000000000000000000000000000000000000000000000000000000000000000000000000000000002af500000000000000000000000000000000000026f900"], 0x0}, 0x0) 681.285273ms ago: executing program 4 (id=49): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x9, 0x0, 0x1000000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x20, {"4831ff48c7c600000001480f38f13e"}}], 0x20}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 93.151257ms ago: executing program 4 (id=50): syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140f30c00e300000000000109023e0002010080320904000003e00101000705810310000107058202400001070502024000010904010002e00101000705830100000107050301000001"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='mem', 0x3) 0s ago: executing program 6 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000600)=@in={0x2, 0x801, @empty}, 0x10) listen(r0, 0x10) dup2(r0, 0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000540), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 83.412001][ T5763] cgroup: Unknown subsys name 'net' [ 83.565241][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.229128][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.410035][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.424782][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.432663][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.440956][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.448861][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.456536][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.468702][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.483131][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.490789][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.499011][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.507081][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.514448][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.563696][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.571836][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.579605][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.587820][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.626771][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.636463][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.662793][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.677488][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.695111][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.706044][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.735009][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.742667][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.130351][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.290917][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 88.302518][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.359485][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.368643][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.376646][ T5776] bridge_slave_0: entered allmulticast mode [ 88.384069][ T5776] bridge_slave_0: entered promiscuous mode [ 88.408622][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.429302][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.438846][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.446134][ T5776] bridge_slave_1: entered allmulticast mode [ 88.453303][ T5776] bridge_slave_1: entered promiscuous mode [ 88.563069][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.592202][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.618468][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.626437][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.633871][ T5784] bridge_slave_0: entered allmulticast mode [ 88.641657][ T5784] bridge_slave_0: entered promiscuous mode [ 88.690401][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.697876][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.706002][ T5784] bridge_slave_1: entered allmulticast mode [ 88.713095][ T5784] bridge_slave_1: entered promiscuous mode [ 88.742117][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751567][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.759689][ T5775] bridge_slave_0: entered allmulticast mode [ 88.767415][ T5775] bridge_slave_0: entered promiscuous mode [ 88.781206][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.788465][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.796363][ T5775] bridge_slave_1: entered allmulticast mode [ 88.803767][ T5775] bridge_slave_1: entered promiscuous mode [ 88.823891][ T5776] team0: Port device team_slave_0 added [ 88.855427][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.877165][ T5776] team0: Port device team_slave_1 added [ 88.886232][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.907515][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.915146][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.922337][ T5786] bridge_slave_0: entered allmulticast mode [ 88.930330][ T5786] bridge_slave_0: entered promiscuous mode [ 88.940055][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.963475][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.973268][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.981434][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.989047][ T5786] bridge_slave_1: entered allmulticast mode [ 88.996904][ T5786] bridge_slave_1: entered promiscuous mode [ 89.075544][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.082549][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.111289][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.127436][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.137286][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.144274][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.171222][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.188195][ T5775] team0: Port device team_slave_0 added [ 89.199404][ T5784] team0: Port device team_slave_0 added [ 89.209430][ T5784] team0: Port device team_slave_1 added [ 89.230707][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.277654][ T5775] team0: Port device team_slave_1 added [ 89.326904][ T5786] team0: Port device team_slave_0 added [ 89.339872][ T5776] hsr_slave_0: entered promiscuous mode [ 89.347112][ T5776] hsr_slave_1: entered promiscuous mode [ 89.370408][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.377676][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.409005][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.422461][ T5786] team0: Port device team_slave_1 added [ 89.463110][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.473211][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.499671][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.511262][ T51] Bluetooth: hci1: command tx timeout [ 89.523290][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.530371][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.556530][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.570695][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.577804][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.603927][ T51] Bluetooth: hci0: command tx timeout [ 89.609824][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.622963][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.630013][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.656075][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.666875][ T51] Bluetooth: hci2: command tx timeout [ 89.698442][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.705798][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.732037][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.805856][ T5784] hsr_slave_0: entered promiscuous mode [ 89.812399][ T5784] hsr_slave_1: entered promiscuous mode [ 89.818858][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.827166][ T51] Bluetooth: hci3: command tx timeout [ 89.832991][ T5784] Cannot create hsr debugfs directory [ 89.877215][ T5786] hsr_slave_0: entered promiscuous mode [ 89.884022][ T5786] hsr_slave_1: entered promiscuous mode [ 89.891275][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.899016][ T5786] Cannot create hsr debugfs directory [ 89.976670][ T5775] hsr_slave_0: entered promiscuous mode [ 89.983168][ T5775] hsr_slave_1: entered promiscuous mode [ 89.989908][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.997640][ T5775] Cannot create hsr debugfs directory [ 90.402909][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.416627][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.427293][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.444352][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.511220][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.532983][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.557028][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.571295][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.665528][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.690071][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.700877][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.726216][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.855766][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.871139][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.889122][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.899338][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.912663][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.948329][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.962221][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.997431][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.005126][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.017264][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.024416][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.074330][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.106834][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.139263][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.146477][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.159452][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166703][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.223067][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.280364][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.287606][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.312941][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.320179][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.353027][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.428890][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.482478][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.489701][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.532308][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.539588][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.585379][ T51] Bluetooth: hci1: command tx timeout [ 91.647698][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.660889][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.671558][ T51] Bluetooth: hci0: command tx timeout [ 91.747341][ T51] Bluetooth: hci2: command tx timeout [ 91.892449][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.905262][ T51] Bluetooth: hci3: command tx timeout [ 92.022468][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.068251][ T27] cfg80211: failed to load regulatory.db [ 92.096910][ T5776] veth0_vlan: entered promiscuous mode [ 92.171813][ T5776] veth1_vlan: entered promiscuous mode [ 92.182013][ T5786] veth0_vlan: entered promiscuous mode [ 92.197592][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.212016][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.251780][ T5786] veth1_vlan: entered promiscuous mode [ 92.311487][ T5776] veth0_macvtap: entered promiscuous mode [ 92.343949][ T5776] veth1_macvtap: entered promiscuous mode [ 92.381726][ T5784] veth0_vlan: entered promiscuous mode [ 92.397412][ T5775] veth0_vlan: entered promiscuous mode [ 92.431208][ T5784] veth1_vlan: entered promiscuous mode [ 92.440304][ T5775] veth1_vlan: entered promiscuous mode [ 92.450411][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.461757][ T5786] veth0_macvtap: entered promiscuous mode [ 92.481755][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.508357][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.519601][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.529371][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.538414][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551826][ T5786] veth1_macvtap: entered promiscuous mode [ 92.580612][ T5775] veth0_macvtap: entered promiscuous mode [ 92.612981][ T5775] veth1_macvtap: entered promiscuous mode [ 92.671841][ T5784] veth0_macvtap: entered promiscuous mode [ 92.692081][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.703002][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.717496][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.740593][ T5784] veth1_macvtap: entered promiscuous mode [ 92.759177][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.770156][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.780739][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.792493][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.804223][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.854500][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.866792][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.879746][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.892053][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901545][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911163][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920244][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.934416][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.937653][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.957904][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.967914][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968957][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.986653][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.999158][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.023553][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.038485][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.048840][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.059436][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.069603][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.081166][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.092974][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.107460][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.117980][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127957][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.137427][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168399][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.179172][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.191099][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.202954][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.212950][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.223559][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.235986][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.251579][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253613][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271738][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.279237][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288363][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.297754][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500389][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.526938][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.549558][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.569325][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.665675][ T51] Bluetooth: hci1: command tx timeout [ 93.667008][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.694827][ T28] audit: type=1800 audit(1785878545.193:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="zoned" dev="configfs" ino=6841 res=0 errno=0 [ 93.713242][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.729931][ T28] audit: type=1800 audit(1785878545.233:3): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="size" dev="configfs" ino=6848 res=0 errno=0 [ 93.753961][ T51] Bluetooth: hci0: command tx timeout [ 93.775519][ T28] audit: type=1800 audit(1785878545.253:4): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="memory_backed" dev="configfs" ino=6849 res=0 errno=0 [ 93.797591][ T28] audit: type=1800 audit(1785878545.263:5): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="power" dev="configfs" ino=7294 res=0 errno=0 [ 93.825065][ T51] Bluetooth: hci2: command tx timeout [ 93.860722][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.870498][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.908687][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.923367][ T5842] null_blk: disk nullb1 created [ 93.945580][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.990245][ T51] Bluetooth: hci3: command tx timeout [ 94.048463][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.062273][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.097258][ T5843] block device autoloading is deprecated and will be removed. [ 94.317145][ T5848] PM: suspend entry (s2idle) [ 94.455042][ T5854] syz.2.3[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.537245][ T5854] loop0: detected capacity change from 0 to 128 [ 94.562257][ T5854] syz.2.3: attempt to access beyond end of device [ 94.562257][ T5854] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 94.672274][ T5852] svc: failed to register nfsdv3 RPC service (errno 111). [ 94.728702][ T5852] svc: failed to register nfsaclv3 RPC service (errno 111). [ 94.959288][ T5848] Filesystems sync: 0.637 seconds [ 95.080548][ T5848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.086448][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.095997][ T5848] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.142917][ T5848] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.153313][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.160040][ T5848] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.171135][ T5848] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.179061][ T5848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.204795][ T5848] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.214201][ T28] audit: type=1800 audit(1785878546.683:6): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="zoned" dev="configfs" ino=7455 res=0 errno=0 [ 95.272419][ T5848] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.295424][ T5821] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 95.308614][ T5848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.315014][ T28] audit: type=1800 audit(1785878546.743:7): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="size" dev="configfs" ino=7457 res=0 errno=0 [ 95.321746][ T5864] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x59bfab05, got 0x87214e21) [ 95.343608][ T5848] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.356072][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.370074][ T5866] process 'syz.0.9' launched './file0' with NULL argv: empty string added [ 95.390257][ T28] audit: type=1800 audit(1785878546.753:8): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="memory_backed" dev="configfs" ino=7458 res=0 errno=0 [ 95.429828][ T5848] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.438782][ T28] audit: type=1800 audit(1785878546.773:9): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="power" dev="configfs" ino=7459 res=0 errno=0 [ 95.480228][ T5848] Freezing user space processes [ 95.503395][ T5848] Freezing user space processes completed (elapsed 0.014 seconds) [ 95.512765][ T5848] OOM killer disabled. [ 95.516958][ T5848] Freezing remaining freezable tasks [ 97.105323][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.184766][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.186407][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.345090][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.196277][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.265310][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.274716][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.434811][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.475185][ T5821] usbhid 3-1:1.0: can't add hid device: -32 [ 100.481539][ T5821] usbhid: probe of 3-1:1.0 failed with error -32 [ 100.492237][ T5848] Freezing remaining freezable tasks completed (elapsed 4.969 seconds) [ 100.501002][ T5848] printk: Suspending console(s) (use no_console_suspend to debug) [ 100.617912][ T5848] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 100.657357][ T5848] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 100.706276][ T5848] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 100.745866][ T5848] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 100.785867][ T5848] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 100.826914][ T5848] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 100.865836][ T5848] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 100.918608][ T5848] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 100.958668][ T5848] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 100.996466][ T5848] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 101.047329][ T5848] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 101.085789][ T5848] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 101.125779][ T5848] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 101.165739][ T5848] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 101.205827][ T5848] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 101.264697][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.276371][ T48] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 101.345695][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.345737][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.505673][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.519186][ T5848] PM: suspend debug: Waiting for 5 second(s). [ 106.975001][ T5907] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 107.145330][ T5907] usb 3-1: device descriptor read/64, error -32 [ 107.414736][ T5907] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 107.574809][ T5907] usb 3-1: device descriptor read/64, error -32 [ 107.854724][ T5907] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 107.897746][ T5907] usb 3-1: device descriptor read/8, error -32 [ 108.164725][ T5907] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 108.194982][ T5907] usb 3-1: device descriptor read/8, error -32 [ 108.363119][ T5848] OOM killer enabled. [ 108.363814][ T5848] Restarting tasks ... [ 108.372076][ T5819] usb 3-1: USB disconnect, device number 2 [ 108.413524][ T5848] done. [ 108.414154][ T5848] random: crng reseeded on system resumption [ 108.417509][ T5848] PM: suspend exit [ 108.677258][ T5978] (null): rxe_set_mtu: Set mtu to 4096 [ 108.689860][ T5979] loop0: detected capacity change from 0 to 128 [ 108.691735][ T5978] lo speed is unknown, defaulting to 1000 [ 108.701460][ T5979] syz.3.12: attempt to access beyond end of device [ 108.701460][ T5979] loop3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 108.719758][ T5978] lo speed is unknown, defaulting to 1000 [ 108.737024][ T5978] lo speed is unknown, defaulting to 1000 [ 109.008479][ T5988] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.011583][ T5988] svc: failed to register nfsaclv3 RPC service (errno 111). [ 109.139303][ T5992] x_tables: duplicate entry at hook 3 [ 109.229778][ T5978] infiniband syz0: set active [ 109.232217][ T5765] lo speed is unknown, defaulting to 1000 [ 109.262094][ T5978] infiniband syz0: added lo [ 109.340252][ T5997] PM: suspend entry (deep) [ 109.447158][ T5978] RDS/IB: syz0: added [ 109.447513][ T6003] netlink: 'syz.1.22': attribute type 5 has an invalid length. [ 109.449863][ T5978] smc: adding ib device syz0 with port count 1 [ 109.450989][ T5978] smc: ib device syz0 port 1 has pnetid [ 109.455223][ T5765] lo speed is unknown, defaulting to 1000 [ 109.488833][ T5978] lo speed is unknown, defaulting to 1000 [ 109.569644][ T5997] Filesystems sync: 0.228 seconds [ 109.589352][ T28] audit: type=1800 audit(1785878561.093:10): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="local" dev="configfs" ino=8207 res=0 errno=0 [ 109.596255][ T28] audit: type=1800 audit(1785878561.103:11): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="nodeid" dev="configfs" ino=8208 res=0 errno=0 [ 109.621488][ T6007] dlm: Using TCP for communications [ 109.636844][ T6007] dlm: foo: joining the lockspace group... [ 109.677983][ T6007] dlm: foo: group event done 0 [ 109.750741][ T5978] lo speed is unknown, defaulting to 1000 [ 109.888636][ T5978] lo speed is unknown, defaulting to 1000 [ 110.027866][ T5978] lo speed is unknown, defaulting to 1000 [ 110.112931][ T5997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.114526][ T5997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.118216][ T5997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.121161][ T5997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.124091][ T5997] Freezing user space processes [ 111.675371][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.144725][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.144798][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.145823][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.142663][ T5997] Freezing user space processes failed after 20.014 seconds (1 tasks refusing to freeze, wq_busy=0): [ 130.144506][ T5997] task:syz.0.23 state:D stack:25520 pid:6007 ppid:5776 flags:0x00004004 [ 130.146741][ T5997] Call Trace: [ 130.147459][ T5997] [ 130.147940][ T5997] __schedule+0x15ae/0x4660 [ 130.148674][ T5997] ? __irq_work_queue_local+0x13a/0x3b0 [ 130.149526][ T5997] ? asan.module_dtor+0x20/0x20 [ 130.150307][ T5997] schedule+0xbd/0x170 [ 130.150955][ T5997] schedule_timeout+0xc1/0x2d0 [ 130.151680][ T5997] ? console_conditional_schedule+0x40/0x40 [ 130.152549][ T5997] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 130.153455][ T5997] ? __lock_acquire+0x7d80/0x7d80 [ 130.154218][ T5997] ? lock_chain_count+0x20/0x20 [ 130.155094][ T5997] ? _raw_spin_lock_irq+0xbb/0xf0 [ 130.155888][ T5997] ? _raw_spin_lock_irqsave+0x100/0x100 [ 130.156739][ T5997] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.157582][ T5997] ? lockdep_hardirqs_on+0x98/0x150 [ 130.158421][ T5997] ? wait_for_completion+0x273/0x5a0 [ 130.159240][ T5997] wait_for_completion+0x2c6/0x5a0 [ 130.160058][ T5997] ? io_schedule+0xd0/0xd0 [ 130.160747][ T5997] ? kobject_uevent_env+0x368/0x890 [ 130.161572][ T5997] __dlm_new_lockspace+0x1dec/0x2360 [ 130.162417][ T5997] ? dlm_new_lockspace+0x50/0x50 [ 130.163148][ T5997] ? apparmor_capable+0x137/0x1a0 [ 130.168377][ T5997] ? bpf_lsm_capable+0x9/0x10 [ 130.173136][ T5997] ? security_capable+0x89/0xb0 [ 130.178166][ T5997] ? dlm_new_user_lockspace+0x24/0x50 [ 130.183643][ T5997] device_create_lockspace+0xc8/0x350 [ 130.189202][ T5997] ? __virt_addr_valid+0x10c/0x380 [ 130.194337][ T5997] ? device_user_deadlock+0xd0/0xd0 [ 130.199646][ T5997] ? __might_fault+0xaa/0x120 [ 130.204366][ T5997] ? _copy_from_user+0xa5/0xe0 [ 130.209246][ T5997] device_write+0x875/0xed0 [ 130.213801][ T5997] ? security_file_permission+0x79/0xa0 [ 130.219435][ T5997] ? device_read+0x1580/0x1580 [ 130.224241][ T5997] vfs_write+0x299/0x9a0 [ 130.228727][ T5997] ? file_end_write+0x250/0x250 [ 130.233643][ T5997] ? __fget_files+0x28/0x460 [ 130.238341][ T5997] ? __fget_files+0x3fc/0x460 [ 130.243069][ T5997] ? __fdget_pos+0x1d8/0x330 [ 130.247731][ T5997] ? ksys_write+0x74/0x260 [ 130.252167][ T5997] ksys_write+0x151/0x260 [ 130.256572][ T5997] ? __ia32_sys_read+0x90/0x90 [ 130.261387][ T5997] ? lockdep_hardirqs_on+0x98/0x150 [ 130.266730][ T5997] do_syscall_64+0x55/0xb0 [ 130.271217][ T5997] ? clear_bhb_loop+0x40/0x90 [ 130.275954][ T5997] ? clear_bhb_loop+0x40/0x90 [ 130.280652][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.286649][ T5997] RIP: 0033:0x7f7554b9e019 [ 130.291105][ T5997] RSP: 002b:00007f75559ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.299642][ T5997] RAX: ffffffffffffffda RBX: 00007f7554e25fa0 RCX: 00007f7554b9e019 [ 130.307819][ T5997] RDX: 0000000000000078 RSI: 000020000000e000 RDI: 0000000000000007 [ 130.315920][ T5997] RBP: 00007f7554c3500c R08: 0000000000000000 R09: 0000000000000000 [ 130.323927][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.332017][ T5997] R13: 00007f7554e26038 R14: 00007f7554e25fa0 R15: 00007ffe5b966778 [ 130.340146][ T5997] [ 130.344451][ T5997] OOM killer enabled. [ 130.348524][ T5997] Restarting tasks ... done. [ 130.388322][ T5997] random: crng reseeded on system resumption [ 130.406998][ T5997] PM: suspend exit [ 131.650350][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.662596][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.701853][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.711025][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.719049][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.726628][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.763019][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.789788][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.797782][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.834725][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.855747][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.865035][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.918944][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.929017][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.936943][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.948580][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.957710][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.965564][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.006737][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.025274][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.039823][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.052756][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.062008][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.069791][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.160433][ T5896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.292029][ T5896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.310887][ T6019] lo speed is unknown, defaulting to 1000 [ 132.381928][ T5896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.473861][ T6021] lo speed is unknown, defaulting to 1000 [ 132.514005][ T5896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.805434][ T6023] lo speed is unknown, defaulting to 1000 [ 132.831563][ T6019] chnl_net:caif_netlink_parms(): no params data found [ 133.028625][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040219][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.246362][ T6025] lo speed is unknown, defaulting to 1000 [ 133.263323][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.272428][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.280274][ T6019] bridge_slave_0: entered allmulticast mode [ 133.287823][ T6019] bridge_slave_0: entered promiscuous mode [ 133.363500][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.372179][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.394833][ T6019] bridge_slave_1: entered allmulticast mode [ 133.402319][ T6019] bridge_slave_1: entered promiscuous mode [ 133.628048][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.646960][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.788718][ T6019] team0: Port device team_slave_0 added [ 133.799546][ T6019] team0: Port device team_slave_1 added [ 133.834797][ T5782] Bluetooth: hci2: command tx timeout [ 133.905811][ T5782] Bluetooth: hci4: command tx timeout [ 133.921427][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.928646][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.954970][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.019570][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.026779][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.052915][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.065528][ T5782] Bluetooth: hci0: command tx timeout [ 134.079166][ T6021] chnl_net:caif_netlink_parms(): no params data found [ 134.150753][ T5782] Bluetooth: hci3: command tx timeout [ 134.308480][ T6019] hsr_slave_0: entered promiscuous mode [ 134.323045][ T6019] hsr_slave_1: entered promiscuous mode [ 134.340219][ T6019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.348366][ T6019] Cannot create hsr debugfs directory [ 134.450441][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 134.632081][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.648818][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.656900][ T6021] bridge_slave_0: entered allmulticast mode [ 134.664376][ T6021] bridge_slave_0: entered promiscuous mode [ 134.756899][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.764161][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.772281][ T6021] bridge_slave_1: entered allmulticast mode [ 134.779897][ T6021] bridge_slave_1: entered promiscuous mode [ 135.080782][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.088429][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.104879][ T6023] bridge_slave_0: entered allmulticast mode [ 135.112396][ T6023] bridge_slave_0: entered promiscuous mode [ 135.129107][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.144065][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.151931][ T6023] bridge_slave_1: entered allmulticast mode [ 135.165647][ T6023] bridge_slave_1: entered promiscuous mode [ 135.181261][ T5896] hsr_slave_0: left promiscuous mode [ 135.188611][ T5896] hsr_slave_1: left promiscuous mode [ 135.195242][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.202696][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.211146][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.219313][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.228106][ T5896] bridge_slave_1: left allmulticast mode [ 135.233778][ T5896] bridge_slave_1: left promiscuous mode [ 135.239749][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.252568][ T5896] bridge_slave_0: left allmulticast mode [ 135.259985][ T5896] bridge_slave_0: left promiscuous mode [ 135.266001][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.293999][ T5896] veth1_macvtap: left promiscuous mode [ 135.300051][ T5896] veth0_macvtap: left promiscuous mode [ 135.305905][ T5896] veth1_vlan: left promiscuous mode [ 135.311450][ T5896] veth0_vlan: left promiscuous mode [ 135.862861][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 135.903270][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 135.905648][ T5782] Bluetooth: hci2: command tx timeout [ 135.948378][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.987723][ T5782] Bluetooth: hci4: command tx timeout [ 135.994014][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.146710][ T5782] Bluetooth: hci0: command tx timeout [ 136.224897][ T5782] Bluetooth: hci3: command tx timeout [ 136.306755][ T5896] bond0 (unregistering): Released all slaves [ 136.431902][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.451068][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 136.496753][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.537276][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.550655][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.602289][ T6021] team0: Port device team_slave_0 added [ 136.655511][ T6021] team0: Port device team_slave_1 added [ 136.738042][ T6023] team0: Port device team_slave_0 added [ 136.746247][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.753246][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.779455][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.792592][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.799679][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.825753][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.867048][ T6023] team0: Port device team_slave_1 added [ 137.029784][ T6021] hsr_slave_0: entered promiscuous mode [ 137.036845][ T6021] hsr_slave_1: entered promiscuous mode [ 137.043068][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.051294][ T6021] Cannot create hsr debugfs directory [ 137.060491][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.069158][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.095433][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.114497][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.124076][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.134909][ T6025] bridge_slave_0: entered allmulticast mode [ 137.142122][ T6025] bridge_slave_0: entered promiscuous mode [ 137.150861][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.158442][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.165856][ T6025] bridge_slave_1: entered allmulticast mode [ 137.173430][ T6025] bridge_slave_1: entered promiscuous mode [ 137.180375][ T6019] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.219562][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.234758][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.270436][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.329636][ T6019] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.412696][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.433125][ T6019] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.446653][ T6019] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.488174][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.646822][ T6023] hsr_slave_0: entered promiscuous mode [ 137.654028][ T6023] hsr_slave_1: entered promiscuous mode [ 137.661171][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.669454][ T6023] Cannot create hsr debugfs directory [ 137.726109][ T6025] team0: Port device team_slave_0 added [ 137.781432][ T6025] team0: Port device team_slave_1 added [ 137.974327][ T5896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.985804][ T5782] Bluetooth: hci2: command tx timeout [ 138.008906][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.019856][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.050271][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.065584][ T5782] Bluetooth: hci4: command tx timeout [ 138.121489][ T5896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.137811][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.145009][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.172577][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.225962][ T5782] Bluetooth: hci0: command tx timeout [ 138.252880][ T5896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.305003][ T5782] Bluetooth: hci3: command tx timeout [ 138.372731][ T5896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.418180][ T6025] hsr_slave_0: entered promiscuous mode [ 138.432200][ T6025] hsr_slave_1: entered promiscuous mode [ 138.438610][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.446631][ T6025] Cannot create hsr debugfs directory [ 138.598005][ T6021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.653729][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.691563][ T6021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.744958][ T6021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.768904][ T6021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.844462][ T6019] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.933059][ T5896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.041317][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.048550][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.090221][ T5896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.181548][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.188829][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.246471][ T5896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.271747][ T6023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.298219][ T6023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 139.364437][ T5896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.379440][ T6023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 139.391979][ T6023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.502143][ T6025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 139.545671][ T6025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 139.563259][ T6025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 139.624916][ T6025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 139.678367][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.800358][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.865241][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.872427][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.947634][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.954976][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.067376][ T5782] Bluetooth: hci2: command tx timeout [ 140.145150][ T5782] Bluetooth: hci4: command tx timeout [ 140.305682][ T5782] Bluetooth: hci0: command tx timeout [ 140.385561][ T5782] Bluetooth: hci3: command tx timeout [ 140.391865][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.521580][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.736059][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.757075][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.882507][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.889755][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.917182][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.924364][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.184362][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.286215][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.293423][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.363995][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.371183][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.445948][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.500675][ T6023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.803843][ T6019] veth0_vlan: entered promiscuous mode [ 141.938284][ T6019] veth1_vlan: entered promiscuous mode [ 142.168828][ T6019] veth0_macvtap: entered promiscuous mode [ 142.238489][ T6019] veth1_macvtap: entered promiscuous mode [ 142.315163][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.347385][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.385013][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.414902][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.429495][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.452218][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.471049][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.560318][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.575974][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.586230][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.597113][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.607258][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.624584][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.645035][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.689944][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.732715][ T6019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.764846][ T6019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.773640][ T6019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.790911][ T6019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.839908][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.871774][ T5896] hsr_slave_0: left promiscuous mode [ 142.885586][ T5896] hsr_slave_1: left promiscuous mode [ 142.891905][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.901430][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.936715][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.944189][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.965502][ T5896] bridge_slave_1: left allmulticast mode [ 142.971223][ T5896] bridge_slave_1: left promiscuous mode [ 142.979180][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.014405][ T5896] bridge_slave_0: left allmulticast mode [ 143.045572][ T5896] bridge_slave_0: left promiscuous mode [ 143.051432][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.079909][ T5896] hsr_slave_0: left promiscuous mode [ 143.096340][ T5896] hsr_slave_1: left promiscuous mode [ 143.114411][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.128251][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.141319][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.155003][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.175341][ T5896] bridge_slave_1: left allmulticast mode [ 143.181114][ T5896] bridge_slave_1: left promiscuous mode [ 143.188268][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.199163][ T5896] bridge_slave_0: left allmulticast mode [ 143.206746][ T5896] bridge_slave_0: left promiscuous mode [ 143.212550][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.268174][ T5896] veth1_macvtap: left promiscuous mode [ 143.273860][ T5896] veth0_macvtap: left promiscuous mode [ 143.280265][ T5896] veth1_vlan: left promiscuous mode [ 143.285782][ T5896] veth0_vlan: left promiscuous mode [ 143.294410][ T5896] veth1_macvtap: left promiscuous mode [ 143.303416][ T5896] veth0_macvtap: left promiscuous mode [ 143.309225][ T5896] veth1_vlan: left promiscuous mode [ 143.315782][ T5896] veth0_vlan: left promiscuous mode [ 143.644445][ T5896] infiniband syz0: set down [ 144.069650][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 144.109393][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 144.153570][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.193734][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.500828][ T5896] bond0 (unregistering): Released all slaves [ 145.002378][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 145.042557][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 145.111474][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.156669][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.466324][ T5896] bond0 (unregistering): Released all slaves [ 145.539858][ T5895] smc: removing ib device syz0 [ 145.551505][ T6021] veth0_vlan: entered promiscuous mode [ 145.567686][ T8] lo speed is unknown, defaulting to 1000 [ 145.685866][ T6021] veth1_vlan: entered promiscuous mode [ 145.810662][ T6021] veth0_macvtap: entered promiscuous mode [ 145.938402][ T6021] veth1_macvtap: entered promiscuous mode [ 146.078499][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.113578][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.145590][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.164741][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.187787][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.309022][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.319628][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.330297][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.344466][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.356732][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.446616][ T6021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.482047][ T6021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.491086][ T6021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.509691][ T6021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.522113][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.557934][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.892822][ T6023] veth0_vlan: entered promiscuous mode [ 146.920147][ T5959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.944745][ T5959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.034345][ T6023] veth1_vlan: entered promiscuous mode [ 147.053596][ T6025] veth0_vlan: entered promiscuous mode [ 147.097684][ T5897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.118565][ T5897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.148546][ T6025] veth1_vlan: entered promiscuous mode [ 147.278047][ T6023] veth0_macvtap: entered promiscuous mode [ 147.309458][ T6023] veth1_macvtap: entered promiscuous mode [ 147.343560][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.404672][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.513704][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.538957][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.582911][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.613686][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.631383][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.642767][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.674444][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.716933][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.738094][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.751316][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.772132][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.792417][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.819897][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.840579][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.852302][ T6025] veth0_macvtap: entered promiscuous mode [ 147.877391][ T6023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.884842][ T5967] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 147.924018][ T6023] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.941303][ T6023] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.951664][ T6023] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.980492][ T6025] veth1_macvtap: entered promiscuous mode [ 148.100981][ T5967] usb 5-1: not running at top speed; connect to a high speed hub [ 148.129453][ T5967] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 148.147191][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.159594][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.179392][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.195336][ T5967] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 002 [ 148.200895][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.230886][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.243508][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.256810][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.267158][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.282433][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.301214][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.342890][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.355311][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.377017][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.388796][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.399733][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.410217][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.421166][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.442159][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.463803][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.506557][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.539873][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.568578][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.580054][ T6025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.593034][ T6204] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 148.618908][ T6025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.627139][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 148.651788][ T6025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.662451][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.663518][ T6025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.708870][ T8] usbtest 6-1:1.0: Linux gadget zero [ 148.714314][ T8] usbtest 6-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 148.854969][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.903545][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.078094][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.111488][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.219524][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.236744][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.555575][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 149.602402][ T6218] svc: failed to register nfsdv3 RPC service (errno 111). [ 149.624524][ T6218] svc: failed to register nfsaclv3 RPC service (errno 111). [ 149.760952][ T23] usb 7-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 149.793275][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.811916][ T23] usb 7-1: Product: syz [ 149.822083][ T23] usb 7-1: Manufacturer: syz [ 149.833835][ T23] usb 7-1: SerialNumber: syz [ 150.244870][ T5967] (null): failure setting delay to 10us [ 150.250736][ T5967] i2c-tiny-usb: probe of 5-1:1.0 failed with error -5 [ 150.294813][ T5821] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 150.501188][ T5821] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00 [ 150.532967][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.546145][ T5967] usb 5-1: USB disconnect, device number 2 [ 150.557903][ T5821] usb 8-1: Product: syz [ 150.562177][ T5821] usb 8-1: Manufacturer: syz [ 150.578054][ T5821] usb 8-1: SerialNumber: syz [ 150.970935][ T5821] r8152-cfgselector 8-1: reset high-speed USB device number 2 using dummy_hcd [ 151.166171][ T5821] r8152-cfgselector 8-1: device descriptor read/64, error -71 [ 151.180427][ T8] usb 7-1: USB disconnect, device number 2 [ 151.230508][ T6238] loop4: detected capacity change from 0 to 32768 [ 151.356774][ T6238] JBD2: Ignoring recovery information on journal [ 151.424458][ T5823] usb 6-1: USB disconnect, device number 2 [ 151.475009][ T5821] r8152-cfgselector 8-1: reset high-speed USB device number 2 using dummy_hcd [ 151.567123][ T6238] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.578379][ T6253] syz.5.30: attempt to access beyond end of device [ 151.578379][ T6253] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 151.675627][ T5821] r8152-cfgselector 8-1: device descriptor read/64, error -71 [ 151.736032][ T6238] ocfs2: Unmounting device (7,4) on (node local) [ 151.810127][ T6257] syz.4.29: attempt to access beyond end of device [ 151.810127][ T6257] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.877136][ T6257] (syz.4.29,6257,1):ocfs2_get_sector:1770 ERROR: status = -5 [ 151.938329][ T6257] (syz.4.29,6257,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 151.954687][ T5821] r8152-cfgselector 8-1: reset high-speed USB device number 2 using dummy_hcd [ 152.007441][ T5821] r8152-cfgselector 8-1: device descriptor read/8, error -71 [ 152.024729][ T6257] (syz.4.29,6257,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 152.045245][ T6257] (syz.4.29,6257,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 152.103771][ T6264] Bluetooth: MGMT ver 1.22 [ 152.306060][ T5821] r8152-cfgselector 8-1: reset high-speed USB device number 2 using dummy_hcd [ 152.347216][ T5821] r8152-cfgselector 8-1: device descriptor read/8, error -71 [ 152.360427][ T6268] svc: failed to register nfsdv3 RPC service (errno 111). [ 152.371021][ T6268] svc: failed to register nfsaclv3 RPC service (errno 111). [ 152.504733][ T5821] r8152 8-1:1.0: USB reset failed, errno=-19 [ 152.550657][ T5821] r8152-cfgselector 8-1: Unknown version 0x0000 [ 152.579988][ T5821] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 152.779429][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 152.814323][ T5959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.946912][ T5821] usb 8-1: device descriptor read/64, error -71 [ 153.225042][ T5821] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 153.764860][ T28] audit: type=1800 audit(1785878605.263:12): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.42" name="attr_allow_any_host" dev="configfs" ino=10051 res=0 errno=0 [ 153.791180][ T6296] nvmet: adding nsid 1 to subsystem testnqn [ 153.830448][ T28] audit: type=1800 audit(1785878605.313:13): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.42" name="device_path" dev="configfs" ino=10053 res=0 errno=0 [ 153.872472][ T28] audit: type=1800 audit(1785878605.313:14): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.42" name="buffered_io" dev="configfs" ino=10054 res=0 errno=0 [ 153.898676][ T28] audit: type=1800 audit(1785878605.313:15): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.42" name="enable" dev="configfs" ino=10055 res=0 errno=0 [ 153.962208][ T28] audit: type=1800 audit(1785878605.353:16): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.42" name="addr_trtype" dev="configfs" ino=10061 res=0 errno=0 [ 154.049699][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.058293][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.083254][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.117448][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.131378][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.149348][ T5967] nvmet: creating nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:af11e62a-20f3-42ba-9727-e486b622c77d. [ 154.149367][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.288282][ T6296] nvme nvme0: creating 2 I/O queues. [ 154.303110][ T6296] nvme nvme0: new ctrl: "testnqn" [ 154.969609][ T5821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 155.183355][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 155.194779][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 155.205537][ T5821] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 155.257759][ T5821] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 155.280608][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.289512][ T5821] usb 7-1: Product: syz [ 155.293741][ T5821] usb 7-1: Manufacturer: syz [ 155.299063][ T5821] usb 7-1: SerialNumber: syz [ 155.320314][ T6309] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 155.339542][ T6309] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 155.360252][ T6309] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 155.466312][ T6311] loop0: detected capacity change from 0 to 32768 [ 155.739777][ T6311] UBIFS error (pid: 6311): cannot open "ubi0_0", error -19 [ 156.062952][ T6314] svc: failed to register nfsdv3 RPC service (errno 111). [ 156.092558][ T6314] svc: failed to register nfsaclv3 RPC service (errno 111). [ 156.234869][ T5782] Bluetooth: hci4: command tx timeout [ 156.413211][ T5959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.624768][ T5967] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 156.684386][ T5959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.794306][ T5821] redrat3 7-1:1.0: Problem fetching firmware ID [ 156.829520][ T5959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.842462][ T5821] redrat3 7-1:1.0: Failed to read timeout from hardware [ 156.843798][ T6320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 156.877176][ T5967] usb 8-1: not running at top speed; connect to a high speed hub [ 156.902819][ T5967] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 1.00 [ 156.926027][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.084772][ T5821] rc_core: IR keymap rc-hauppauge not found [ 157.090779][ T5821] Registered IR keymap rc-empty [ 157.157116][ T5821] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/rc/rc0 [ 157.207030][ T5821] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/rc/rc0/input7 [ 157.262112][ T5821] redrat3 7-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 157.287691][ T5821] redrat3 7-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 157.296579][ T5821] redrat3 7-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 157.343423][ T5821] redrat3: probe of 7-1:1.0 failed with error -5 [ 157.394176][ T5967] usbhid 8-1:1.0: can't add hid device: -71 [ 157.421275][ T5967] usbhid: probe of 8-1:1.0 failed with error -71 [ 157.450324][ T5821] usb 7-1: USB disconnect, device number 3 [ 157.463423][ T5967] usb 8-1: USB disconnect, device number 5 [ 157.528989][ T6334] PM: suspend entry (deep) [ 157.544349][ T5142] ================================================================== [ 157.552492][ T5142] BUG: KASAN: slab-use-after-free in string+0x204/0x290 [ 157.559477][ T5142] Read of size 1 at addr ffff88807cbee760 by task udevd/5142 [ 157.566882][ T5142] [ 157.569248][ T5142] CPU: 1 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 157.576220][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.586300][ T5142] Call Trace: [ 157.589607][ T5142] [ 157.592571][ T5142] dump_stack_lvl+0x18c/0x250 [ 157.597292][ T5142] ? __lock_acquire+0x7d80/0x7d80 [ 157.602366][ T5142] ? show_regs_print_info+0x20/0x20 [ 157.607604][ T5142] ? load_image+0x420/0x420 [ 157.612152][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 157.617307][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 157.622467][ T5142] ? __virt_addr_valid+0x10c/0x380 [ 157.627624][ T5142] print_report+0xa8/0x210 [ 157.632081][ T5142] ? string+0x204/0x290 [ 157.636286][ T5142] kasan_report+0x117/0x150 [ 157.640833][ T5142] ? string+0x204/0x290 [ 157.645040][ T5142] string+0x204/0x290 [ 157.649069][ T5142] vsnprintf+0xf72/0x1ba0 [ 157.653433][ T5142] add_uevent_var+0x1d1/0x460 [ 157.658145][ T5142] ? vfs_read+0x486/0x990 [ 157.662502][ T5142] ? kobject_uevent_env+0x890/0x890 [ 157.667729][ T5142] rc_dev_uevent+0x15f/0x190 [ 157.672345][ T5142] dev_uevent+0x53a/0x7c0 [ 157.676700][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 157.681492][ T5142] uevent_show+0x196/0x300 [ 157.685935][ T5142] dev_attr_show+0x54/0xc0 [ 157.690371][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 157.695335][ T5142] ? device_get_ownership+0xb0/0xb0 [ 157.700560][ T5142] seq_read_iter+0x464/0xc50 [ 157.705177][ T5142] ? common_file_perm+0x198/0x1f0 [ 157.710221][ T5142] vfs_read+0x486/0x990 [ 157.714402][ T5142] ? kernel_read+0x1e0/0x1e0 [ 157.719025][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 157.724248][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 157.729123][ T5142] ? __fdget_pos+0x2ba/0x330 [ 157.733739][ T5142] ksys_read+0x151/0x260 [ 157.738014][ T5142] ? vfs_write+0x9a0/0x9a0 [ 157.742459][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 157.747690][ T5142] do_syscall_64+0x55/0xb0 [ 157.752131][ T5142] ? clear_bhb_loop+0x40/0x90 [ 157.756826][ T5142] ? clear_bhb_loop+0x40/0x90 [ 157.761522][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.767439][ T5142] RIP: 0033:0x7fa6bc7ce407 [ 157.771869][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.791494][ T5142] RSP: 002b:00007ffe0214fe50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 157.799927][ T5142] RAX: ffffffffffffffda RBX: 00007fa6bc742880 RCX: 00007fa6bc7ce407 [ 157.807921][ T5142] RDX: 0000000000001000 RSI: 0000561dda6b2800 RDI: 000000000000000c [ 157.815914][ T5142] RBP: 00007fa6bc916ff0 R08: 0000000000000000 R09: 0000000000000000 [ 157.823899][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 157.831885][ T5142] R13: 00007fa6bc916ea0 R14: 0000000000000000 R15: 0000561dda6890d0 [ 157.839883][ T5142] [ 157.842920][ T5142] [ 157.845288][ T5142] Allocated by task 5821: [ 157.849626][ T5142] kasan_set_track+0x4e/0x70 [ 157.854242][ T5142] __kasan_kmalloc+0x8f/0xa0 [ 157.858848][ T5142] redrat3_dev_probe+0x3f9/0x23d0 [ 157.863900][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 157.869029][ T5142] really_probe+0x247/0xae0 [ 157.873543][ T5142] __driver_probe_device+0x1f5/0x390 [ 157.878855][ T5142] driver_probe_device+0x4f/0x420 [ 157.883906][ T5142] __device_attach_driver+0x2ca/0x510 [ 157.889310][ T5142] bus_for_each_drv+0x252/0x2e0 [ 157.894194][ T5142] __device_attach+0x2c1/0x420 [ 157.898980][ T5142] bus_probe_device+0x180/0x260 [ 157.903857][ T5142] device_add+0x87c/0xc40 [ 157.908217][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 157.913703][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 157.919198][ T5142] usb_probe_device+0x12a/0x260 [ 157.924094][ T5142] really_probe+0x247/0xae0 [ 157.928616][ T5142] __driver_probe_device+0x1f5/0x390 [ 157.933937][ T5142] driver_probe_device+0x4f/0x420 [ 157.938990][ T5142] __device_attach_driver+0x2ca/0x510 [ 157.944385][ T5142] bus_for_each_drv+0x252/0x2e0 [ 157.949256][ T5142] __device_attach+0x2c1/0x420 [ 157.954192][ T5142] bus_probe_device+0x180/0x260 [ 157.959076][ T5142] device_add+0x87c/0xc40 [ 157.963444][ T5142] usb_new_device+0x995/0x1550 [ 157.968222][ T5142] hub_event+0x29d5/0x4a80 [ 157.972661][ T5142] process_scheduled_works+0xa60/0x1600 [ 157.978229][ T5142] worker_thread+0xa5e/0xfe0 [ 157.982847][ T5142] kthread+0x2fa/0x390 [ 157.986952][ T5142] ret_from_fork+0x48/0x80 [ 157.991390][ T5142] ret_from_fork_asm+0x11/0x20 [ 157.996192][ T5142] [ 157.998544][ T5142] Freed by task 5821: [ 158.002550][ T5142] kasan_set_track+0x4e/0x70 [ 158.007164][ T5142] kasan_save_free_info+0x28/0x40 [ 158.012219][ T5142] ____kasan_slab_free+0x126/0x1f0 [ 158.017359][ T5142] slab_free_freelist_hook+0x130/0x1a0 [ 158.022852][ T5142] __kmem_cache_free+0xba/0x1f0 [ 158.027734][ T5142] redrat3_dev_probe+0x1b73/0x23d0 [ 158.032869][ T5142] usb_probe_interface+0x5c2/0xaf0 [ 158.038011][ T5142] really_probe+0x247/0xae0 [ 158.042533][ T5142] __driver_probe_device+0x1f5/0x390 [ 158.047853][ T5142] driver_probe_device+0x4f/0x420 [ 158.052906][ T5142] __device_attach_driver+0x2ca/0x510 [ 158.058309][ T5142] bus_for_each_drv+0x252/0x2e0 [ 158.063190][ T5142] __device_attach+0x2c1/0x420 [ 158.067980][ T5142] bus_probe_device+0x180/0x260 [ 158.072856][ T5142] device_add+0x87c/0xc40 [ 158.077198][ T5142] usb_set_configuration+0x1ad0/0x2150 [ 158.082688][ T5142] usb_generic_driver_probe+0x8d/0x150 [ 158.088171][ T5142] usb_probe_device+0x12a/0x260 [ 158.093045][ T5142] really_probe+0x247/0xae0 [ 158.097569][ T5142] __driver_probe_device+0x1f5/0x390 [ 158.102881][ T5142] driver_probe_device+0x4f/0x420 [ 158.107933][ T5142] __device_attach_driver+0x2ca/0x510 [ 158.113340][ T5142] bus_for_each_drv+0x252/0x2e0 [ 158.118211][ T5142] __device_attach+0x2c1/0x420 [ 158.122998][ T5142] bus_probe_device+0x180/0x260 [ 158.127870][ T5142] device_add+0x87c/0xc40 [ 158.132225][ T5142] usb_new_device+0x995/0x1550 [ 158.137001][ T5142] hub_event+0x29d5/0x4a80 [ 158.141437][ T5142] process_scheduled_works+0xa60/0x1600 [ 158.147001][ T5142] worker_thread+0xa5e/0xfe0 [ 158.151609][ T5142] kthread+0x2fa/0x390 [ 158.155692][ T5142] ret_from_fork+0x48/0x80 [ 158.160127][ T5142] ret_from_fork_asm+0x11/0x20 [ 158.164955][ T5142] [ 158.167302][ T5142] The buggy address belongs to the object at ffff88807cbee000 [ 158.167302][ T5142] which belongs to the cache kmalloc-2k of size 2048 [ 158.181368][ T5142] The buggy address is located 1888 bytes inside of [ 158.181368][ T5142] freed 2048-byte region [ffff88807cbee000, ffff88807cbee800) [ 158.195356][ T5142] [ 158.197709][ T5142] The buggy address belongs to the physical page: [ 158.204143][ T5142] page:ffffea0001f2fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cbe8 [ 158.214349][ T5142] head:ffffea0001f2fa00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.223297][ T5142] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 158.231292][ T5142] page_type: 0xffffffff() [ 158.235643][ T5142] raw: 00fff00000000840 ffff888017c42000 ffffea00007ab200 dead000000000002 [ 158.244243][ T5142] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 158.252836][ T5142] page dumped because: kasan: bad access detected [ 158.259273][ T5142] page_owner tracks the page as allocated [ 158.265008][ T5142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6023, tgid 6023 (syz-executor), ts 142478984965, free_ts 141546442444 [ 158.287946][ T5142] post_alloc_hook+0x1c1/0x200 [ 158.292732][ T5142] get_page_from_freelist+0x2181/0x22a0 [ 158.298310][ T5142] __alloc_pages+0x1f0/0x460 [ 158.302913][ T5142] alloc_slab_page+0x5d/0x180 [ 158.307596][ T5142] new_slab+0x87/0x2d0 [ 158.311681][ T5142] ___slab_alloc+0xc5c/0x12f0 [ 158.316377][ T5142] __kmem_cache_alloc_node+0x11f/0x250 [ 158.321862][ T5142] kmalloc_trace+0x2a/0xe0 [ 158.326302][ T5142] rtnl_newlink+0x10d/0x2170 [ 158.330920][ T5142] rtnetlink_rcv_msg+0x843/0xf90 [ 158.335879][ T5142] netlink_rcv_skb+0x235/0x4c0 [ 158.340667][ T5142] netlink_unicast+0x7b1/0x930 [ 158.345454][ T5142] netlink_sendmsg+0x8d0/0xbf0 [ 158.350234][ T5142] __sys_sendto+0x4a9/0x6b0 [ 158.354762][ T5142] __x64_sys_sendto+0xde/0xf0 [ 158.359449][ T5142] do_syscall_64+0x55/0xb0 [ 158.363881][ T5142] page last free stack trace: [ 158.368571][ T5142] free_unref_page_prepare+0x7d7/0x8f0 [ 158.374046][ T5142] free_unref_page+0x32/0x2e0 [ 158.378733][ T5142] __unfreeze_partials+0x1cf/0x210 [ 158.383859][ T5142] put_cpu_partial+0x17c/0x250 [ 158.388634][ T5142] __slab_free+0x319/0x400 [ 158.393074][ T5142] qlist_free_all+0x75/0xd0 [ 158.397686][ T5142] kasan_quarantine_reduce+0x143/0x160 [ 158.403167][ T5142] __kasan_slab_alloc+0x22/0x80 [ 158.408036][ T5142] slab_post_alloc_hook+0x6a/0x4d0 [ 158.413171][ T5142] __kmem_cache_alloc_node+0x194/0x250 [ 158.418658][ T5142] kmalloc_trace+0x2a/0xe0 [ 158.423096][ T5142] kobject_uevent_env+0x27c/0x890 [ 158.428143][ T5142] device_del+0x769/0x910 [ 158.432488][ T5142] wiphy_unregister+0x3f0/0xa80 [ 158.437358][ T5142] ieee80211_unregister_hw+0x1c6/0x2a0 [ 158.442832][ T5142] mac80211_hwsim_del_radio+0x289/0x480 [ 158.448397][ T5142] [ 158.450736][ T5142] Memory state around the buggy address: [ 158.456382][ T5142] ffff88807cbee600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.464456][ T5142] ffff88807cbee680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.472530][ T5142] >ffff88807cbee700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.480596][ T5142] ^ [ 158.487800][ T5142] ffff88807cbee780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.495875][ T5142] ffff88807cbee800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.503950][ T5142] ================================================================== [ 158.525014][ T5782] Bluetooth: hci4: command tx timeout [ 158.531428][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.538664][ T5142] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0 [ 158.545633][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.555726][ T5142] Call Trace: [ 158.559035][ T5142] [ 158.561995][ T5142] dump_stack_lvl+0x18c/0x250 [ 158.566722][ T5142] ? show_regs_print_info+0x20/0x20 [ 158.571963][ T5142] ? load_image+0x420/0x420 [ 158.576527][ T5142] panic+0x2ca/0x720 [ 158.580468][ T5142] ? bpf_jit_dump+0xd0/0xd0 [ 158.585017][ T5142] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 158.591048][ T5142] ? _raw_spin_unlock+0x40/0x40 [ 158.595958][ T5142] ? print_memory_metadata+0x314/0x400 [ 158.601480][ T5142] ? string+0x204/0x290 [ 158.605676][ T5142] check_panic_on_warn+0x84/0xa0 [ 158.610653][ T5142] ? string+0x204/0x290 [ 158.614850][ T5142] end_report+0x6f/0x130 [ 158.619148][ T5142] kasan_report+0x128/0x150 [ 158.623700][ T5142] ? string+0x204/0x290 [ 158.627897][ T5142] string+0x204/0x290 [ 158.631928][ T5142] vsnprintf+0xf72/0x1ba0 [ 158.636315][ T5142] add_uevent_var+0x1d1/0x460 [ 158.641042][ T5142] ? vfs_read+0x486/0x990 [ 158.645441][ T5142] ? kobject_uevent_env+0x890/0x890 [ 158.650713][ T5142] rc_dev_uevent+0x15f/0x190 [ 158.655342][ T5142] dev_uevent+0x53a/0x7c0 [ 158.659714][ T5142] ? dev_uevent_name+0xa0/0xa0 [ 158.664526][ T5142] uevent_show+0x196/0x300 [ 158.668978][ T5142] dev_attr_show+0x54/0xc0 [ 158.673429][ T5142] sysfs_kf_seq_show+0x34d/0x4c0 [ 158.678391][ T5142] ? device_get_ownership+0xb0/0xb0 [ 158.683630][ T5142] seq_read_iter+0x464/0xc50 [ 158.688247][ T5142] ? common_file_perm+0x198/0x1f0 [ 158.693292][ T5142] vfs_read+0x486/0x990 [ 158.697471][ T5142] ? kernel_read+0x1e0/0x1e0 [ 158.702092][ T5142] ? __x64_sys_newfstat+0x1c4/0x250 [ 158.707322][ T5142] ? do_sys_openat2+0x170/0x1d0 [ 158.712201][ T5142] ? __fdget_pos+0x2ba/0x330 [ 158.716822][ T5142] ksys_read+0x151/0x260 [ 158.721158][ T5142] ? vfs_write+0x9a0/0x9a0 [ 158.725602][ T5142] ? lockdep_hardirqs_on+0x98/0x150 [ 158.730832][ T5142] do_syscall_64+0x55/0xb0 [ 158.735272][ T5142] ? clear_bhb_loop+0x40/0x90 [ 158.739970][ T5142] ? clear_bhb_loop+0x40/0x90 [ 158.744699][ T5142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.750620][ T5142] RIP: 0033:0x7fa6bc7ce407 [ 158.755050][ T5142] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 158.774677][ T5142] RSP: 002b:00007ffe0214fe50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 158.783218][ T5142] RAX: ffffffffffffffda RBX: 00007fa6bc742880 RCX: 00007fa6bc7ce407 [ 158.791217][ T5142] RDX: 0000000000001000 RSI: 0000561dda6b2800 RDI: 000000000000000c [ 158.799213][ T5142] RBP: 00007fa6bc916ff0 R08: 0000000000000000 R09: 0000000000000000 [ 158.807206][ T5142] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 158.815207][ T5142] R13: 00007fa6bc916ea0 R14: 0000000000000000 R15: 0000561dda6890d0 [ 158.823210][ T5142] [ 158.826821][ T5142] Kernel Offset: disabled [ 158.831157][ T5142] Rebooting in 86400 seconds..