last executing test programs: 3.075134784s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000500)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000002000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000003000)="00000080fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100020200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000004000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001400)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000005000)="00000078fe534d4240000000160000c001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000009000000480028004e544c4d53535000020000000000000028000000158208e2000000000000000000000000000000000000000028000000", 0x7c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000006000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000007000)="00000048fe534d4240000000000000000100010001000000000000000200000000000000000000000000000001000000000000000000000000000000000000000900010048000000", 0x4c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000008000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001800)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000009000)="00000050fe534d424000000000000000030001000100000000000000030000000000000000000000010000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000a000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001a00)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, &(0x7f000000b000)="00000050fe534d424000000000000000030001000100000000000000040000000000000000000000020000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir/test\x00', 0x1ff) 2.979159892s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x81ff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1:0\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)='0\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='active\x00', 0x6) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) 2.857102849s ago: executing program 3 (id=4): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dir0\x00', 0x1ff) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000300)='./dir0\x00', &(0x7f0000000500)='ocfs2\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)='\x00\x00\x00\x00', 0x4, 0x0) pwrite64(r0, &(0x7f0000001000)='\x00\x00\x00\x00', 0x4, 0x400) pwrite64(r0, &(0x7f0000001000)='\x00\x00\x00\x00', 0x4, 0x800) pwrite64(r0, &(0x7f0000001000)='\x00\x00\x00\x00', 0x4, 0x1000) close(r0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000300)='./dir0\x00', &(0x7f0000000500)='ocfs2\x00', 0x0, 0x0) 2.839829298s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404020002900010102030109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='A') (async) nanosleep(&(0x7f0000000200)={0x2}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x0, 0x2) 2.691099091s ago: executing program 3 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @ifru_flags=0x1011}) write(r0, &(0x7f0000001000)="4500002a000100004006f878c0a80002c0a8010204d20050000000010000000150100400e31800004141", 0x2a) 2.601464248s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="fc4e", 0x2, 0x1000) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.2\x00', 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000700)='7:0\x00', 0x4) 2.552576778s ago: executing program 3 (id=7): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="02aa", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) write(r0, &(0x7f00000001c0)="02fa", 0x2) 2.544565646s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}) 2.130247336s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200000000000109022200010100803209040000000000000009040001010000000007058401340201"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000241)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000242)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000243)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000244)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000245)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000246)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000247)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000248)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000249)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f000000024a)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f000000024b)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f000000024c)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f000000024d)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f000000024e)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f000000024f)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000250)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000251)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000252)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000253)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 930.66413ms ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='* / 2147483647 0 0 0 0 fsloc 1 1 server1 /\n\x00', 0x2b) 851.362934ms ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='Y\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='1 1 1 1\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='disk\n', 0x5) 238.611541ms ago: executing program 0 (id=12): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005", 0x19, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 120.574249ms ago: executing program 0 (id=13): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020020000000000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 120.284357ms ago: executing program 1 (id=14): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003a0)={0x15, 0x110, 0xfa00, {r2, 0xa, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0xa}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f0000000800)}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r2}}, 0x18) 299.7µs ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) 0s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='blk0\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='ep1\n', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r8, &(0x7f00000006c0)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:00.0\x00', 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10443' (ED25519) to the list of known hosts. [ 42.341115][ T5723] cgroup: Unknown subsys name 'net' [ 42.528428][ T5723] cgroup: Unknown subsys name 'cpuset' [ 42.534950][ T5723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.561999][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.950977][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.954696][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.955604][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.957888][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.958082][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.960780][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.962258][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.962397][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.963965][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.966285][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.970592][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.972294][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.974158][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.974913][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.975495][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.976799][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.977191][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.978825][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.998069][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.001074][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.659490][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.662464][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.665521][ T5740] bridge_slave_0: entered allmulticast mode [ 48.669401][ T5740] bridge_slave_0: entered promiscuous mode [ 48.681886][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.685025][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.687954][ T5740] bridge_slave_1: entered allmulticast mode [ 48.691706][ T5740] bridge_slave_1: entered promiscuous mode [ 48.758221][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.760717][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.763022][ T5755] bridge_slave_0: entered allmulticast mode [ 48.765986][ T5755] bridge_slave_0: entered promiscuous mode [ 48.770981][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.774335][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.777019][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.779296][ T5742] bridge_slave_0: entered allmulticast mode [ 48.781915][ T5742] bridge_slave_0: entered promiscuous mode [ 48.785729][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.788036][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.790299][ T5742] bridge_slave_1: entered allmulticast mode [ 48.792906][ T5742] bridge_slave_1: entered promiscuous mode [ 48.796569][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.798884][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.801118][ T5741] bridge_slave_0: entered allmulticast mode [ 48.804097][ T5741] bridge_slave_0: entered promiscuous mode [ 48.808505][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.810916][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.813471][ T5741] bridge_slave_1: entered allmulticast mode [ 48.816050][ T5741] bridge_slave_1: entered promiscuous mode [ 48.820062][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.823012][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.825489][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.827761][ T5755] bridge_slave_1: entered allmulticast mode [ 48.830837][ T5755] bridge_slave_1: entered promiscuous mode [ 48.885583][ T5740] team0: Port device team_slave_0 added [ 48.890296][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.895740][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.899940][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.905264][ T5740] team0: Port device team_slave_1 added [ 48.908397][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.912535][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.922479][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.970834][ T5741] team0: Port device team_slave_0 added [ 48.974382][ T5755] team0: Port device team_slave_0 added [ 48.976735][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.979464][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.987585][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.993597][ T5742] team0: Port device team_slave_0 added [ 48.997147][ T5741] team0: Port device team_slave_1 added [ 49.000424][ T5755] team0: Port device team_slave_1 added [ 49.002575][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.005301][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.013666][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.019521][ T5742] team0: Port device team_slave_1 added [ 49.061479][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.063732][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.072241][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.077312][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.079628][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.087655][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.100043][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.102849][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.112619][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.118028][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.120748][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.130810][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.141852][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.144728][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.154548][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.175866][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.178116][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.186187][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.198283][ T5740] hsr_slave_0: entered promiscuous mode [ 49.200679][ T5740] hsr_slave_1: entered promiscuous mode [ 49.247442][ T5741] hsr_slave_0: entered promiscuous mode [ 49.250469][ T5741] hsr_slave_1: entered promiscuous mode [ 49.254068][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 49.256421][ T5741] Cannot create hsr debugfs directory [ 49.264198][ T5742] hsr_slave_0: entered promiscuous mode [ 49.267210][ T5742] hsr_slave_1: entered promiscuous mode [ 49.269937][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.272231][ T5742] Cannot create hsr debugfs directory [ 49.279927][ T5755] hsr_slave_0: entered promiscuous mode [ 49.284088][ T5755] hsr_slave_1: entered promiscuous mode [ 49.286926][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 49.289168][ T5755] Cannot create hsr debugfs directory [ 49.601103][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.609682][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.612723][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.617495][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.621397][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.627203][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.629981][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.635365][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.678734][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.687366][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.697590][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.701664][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.704698][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.709657][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.718812][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.722532][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.776076][ T5755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.780247][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.787686][ T5755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.792373][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.806948][ T5755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.811181][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.816070][ T5755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.829993][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.879579][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.885839][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.888726][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.895057][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.898306][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.902264][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.905950][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.910405][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.918944][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.948765][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.965574][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.968214][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.972457][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.974951][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.004738][ T5752] Bluetooth: hci0: command tx timeout [ 50.004745][ T5748] Bluetooth: hci1: command tx timeout [ 50.006828][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.014446][ T5752] Bluetooth: hci2: command tx timeout [ 50.025139][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.045516][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.048023][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.062280][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.064687][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.083805][ T5752] Bluetooth: hci3: command tx timeout [ 50.108141][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.135478][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.158056][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.165435][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.174730][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.177157][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.184389][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.186771][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.194976][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.197332][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.202577][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.204918][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.401656][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.420073][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.437550][ T5742] veth0_vlan: entered promiscuous mode [ 50.476419][ T5742] veth1_vlan: entered promiscuous mode [ 50.496976][ T5740] veth0_vlan: entered promiscuous mode [ 50.509742][ T5740] veth1_vlan: entered promiscuous mode [ 50.521133][ T5742] veth0_macvtap: entered promiscuous mode [ 50.528329][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.535473][ T5742] veth1_macvtap: entered promiscuous mode [ 50.546973][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.572600][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.585312][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.589115][ T5740] veth0_macvtap: entered promiscuous mode [ 50.613384][ T5740] veth1_macvtap: entered promiscuous mode [ 50.624436][ T5576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.628611][ T5741] veth0_vlan: entered promiscuous mode [ 50.637088][ T5755] veth0_vlan: entered promiscuous mode [ 50.658285][ T5741] veth1_vlan: entered promiscuous mode [ 50.669463][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.682440][ T5755] veth1_vlan: entered promiscuous mode [ 50.686601][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.702145][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.705925][ T5576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706389][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.741737][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.744902][ T5741] veth0_macvtap: entered promiscuous mode [ 50.746328][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.754379][ T5576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.761259][ T5755] veth0_macvtap: entered promiscuous mode [ 50.767384][ T5741] veth1_macvtap: entered promiscuous mode [ 50.772017][ T5755] veth1_macvtap: entered promiscuous mode [ 50.791843][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.807033][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.813552][ T5576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.820529][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.824293][ T5576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.829921][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.829929][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.832985][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.834162][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.835346][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.845066][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.845386][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.851221][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.889492][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.893949][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.960756][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.969007][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.974887][ T5576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.984211][ T5894] CIFS: Attempting to mount //127.0.0.1/share [ 50.988971][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.994614][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.010825][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.013788][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.031527][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.035382][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.045329][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.049325][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.064723][ T5576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.065887][ T5897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.067547][ T5576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067569][ T5576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067588][ T5576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067607][ T5576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067625][ T5576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067644][ T5576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067662][ T5576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.175212][ T5902] (syz.3.4,5902,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 51.178084][ T5902] (syz.3.4,5902,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 51.184431][ T5902] (syz.3.4,5902,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 51.186910][ T5902] (syz.3.4,5902,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 51.279353][ T5897] md/raid1:md0: active with 1 out of 1 mirrors [ 51.334731][ T5911] loop0: detected capacity change from 0 to 8 [ 51.345570][ T5911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.434847][ T5744] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.597906][ T5744] usb 5-1: New USB device found, idVendor=2040, idProduct=2900, bcdDevice= 1.00 [ 51.601092][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.606140][ T5744] usb 5-1: Product: syz [ 51.607546][ T5744] usb 5-1: Manufacturer: syz [ 51.611854][ T5744] usb 5-1: SerialNumber: syz [ 51.622907][ T5744] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 51.687132][ T5828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.798809][ T5894] CIFS: VFS: cifs_mount failed w/return code = -112 [ 51.838694][ T5828] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 51.842520][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.083551][ T5827] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.083921][ T5752] Bluetooth: hci2: command tx timeout [ 52.084956][ T5760] Bluetooth: hci0: command tx timeout [ 52.085079][ T5748] Bluetooth: hci1: command tx timeout [ 52.163482][ T5752] Bluetooth: hci3: command tx timeout [ 52.235710][ T5827] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice= 0.00 [ 52.238559][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.251812][ T5827] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 52.258200][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 52.263934][ T5827] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 52.266946][ T5827] usb 7-1: media controller created [ 52.275339][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 52.315119][ T5827] DVB: Unable to find symbol mt352_attach() [ 52.317252][ T5827] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 52.321106][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input8 [ 52.332502][ T5827] dvb-usb: schedule remote query interval to 100 msecs. [ 52.335093][ T5827] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 54.608430][ T5944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 54.612232][ T5944] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 54.615134][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 54.617814][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.620960][ T5944] RIP: 0010:i915_pci_probe+0x57/0x480 [ 54.622699][ T5944] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 54.628711][ T5944] RSP: 0018:ffffc90006e9f988 EFLAGS: 00010207 [ 54.630567][ T5944] RAX: dffffc0000000000 RBX: ffff888021642000 RCX: ffffc9000c803000 [ 54.632995][ T5944] RDX: 0000000000000003 RSI: ffffffff85d66fcd RDI: ffffffff8c438898 [ 54.635449][ T5944] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 54.637848][ T5944] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c438880 [ 54.640236][ T5944] R13: 000000000000001c R14: ffffffff85d66fb0 R15: ffff888021642130 [ 54.642601][ T5944] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f53ddb40 [ 54.645354][ T5944] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 54.647381][ T5944] CR2: 00000000f720e9ea CR3: 000000006e0e4000 CR4: 0000000000352ef0 [ 54.649896][ T5944] Call Trace: [ 54.650955][ T5944] [ 54.651887][ T5944] ? __pfx_i915_pci_probe+0x10/0x10 [ 54.653524][ T5944] local_pci_probe+0xdd/0x1b0 [ 54.655015][ T5944] pci_call_probe+0x176/0x800 [ 54.656496][ T5944] ? __pfx_pci_call_probe+0x10/0x10 [ 54.658129][ T5944] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 54.660062][ T5944] ? pci_match_id+0x34d/0x3f0 [ 54.661549][ T5944] ? pci_match_device+0xb4/0x5f0 [ 54.663126][ T5944] pci_device_probe+0x1cd/0x370 [ 54.664679][ T5944] ? __pfx_pci_device_probe+0x10/0x10 [ 54.666370][ T5944] really_probe+0x241/0xa60 [ 54.667826][ T5944] __driver_probe_device+0x20e/0x450 [ 54.669518][ T5944] device_driver_attach+0xd1/0x220 [ 54.671157][ T5944] bind_store+0xf4/0x190 [ 54.672503][ T5944] ? __pfx_bind_store+0x10/0x10 [ 54.674033][ T5944] drv_attr_store+0x74/0xb0 [ 54.675469][ T5944] ? __pfx_drv_attr_store+0x10/0x10 [ 54.677099][ T5944] sysfs_kf_write+0xf2/0x150 [ 54.678543][ T5944] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.680140][ T5944] ? __pfx_sysfs_kf_write+0x10/0x10 [ 54.681705][ T5944] vfs_write+0x6ac/0x1050 [ 54.682997][ T5944] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.684766][ T5944] ? __pfx_vfs_write+0x10/0x10 [ 54.686270][ T5944] ? find_held_lock+0x2b/0x80 [ 54.687754][ T5944] ksys_write+0x12a/0x250 [ 54.689072][ T5944] ? __pfx_ksys_write+0x10/0x10 [ 54.690579][ T5944] __do_fast_syscall_32+0xe7/0x970 [ 54.692161][ T5944] do_fast_syscall_32+0x32/0x70 [ 54.693633][ T5944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.695521][ T5944] RIP: 0023:0xf6feefec [ 54.696812][ T5944] Code: Unable to access opcode bytes at 0xf6feefc2. [ 54.698887][ T5944] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 54.701509][ T5944] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 54.703976][ T5944] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 54.706468][ T5944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.708929][ T5944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.711413][ T5944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.713897][ T5944] [ 54.714895][ T5944] Modules linked in: [ 54.716655][ T5944] ---[ end trace 0000000000000000 ]--- [ 54.718693][ T5944] RIP: 0010:i915_pci_probe+0x57/0x480 [ 54.720609][ T5944] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 03 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 6c 24 18 4c 8d 6d 1c 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 03 00 00 [ 54.726803][ T5944] RSP: 0018:ffffc90006e9f988 EFLAGS: 00010207 [ 54.728767][ T5944] RAX: dffffc0000000000 RBX: ffff888021642000 RCX: ffffc9000c803000 [ 54.731274][ T5944] RDX: 0000000000000003 RSI: ffffffff85d66fcd RDI: ffffffff8c438898 [ 54.734547][ T5944] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 54.737094][ T5944] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c438880 [ 54.739654][ T5944] R13: 000000000000001c R14: ffffffff85d66fb0 R15: ffff888021642130 [ 54.742184][ T5944] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f53ddb40 [ 54.745372][ T5944] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 54.747494][ T5944] CR2: 00000000f6fef000 CR3: 000000006e0e4000 CR4: 0000000000352ef0 [ 54.750093][ T5944] Kernel panic - not syncing: Fatal exception [ 54.752637][ T5944] Kernel Offset: disabled [ 54.754006][ T5944] Rebooting in 86400 seconds..