last executing test programs: 1m35.836530937s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:02.0', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000001010)=""/4, 0x4) read(0xffffffffffffffff, &(0x7f0000001014)=""/4, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='0000:00:02.0\x00', 0xd) 1m35.581651549s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 1m35.427936986s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='cirrus-qemu\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) 1m35.279709256s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:01.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='cirrus-qemu\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:01.1\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.1/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='cirrus-qemu\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0000:00:01.1\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='cirrus-qemu\x00', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000680)='0000:00:03.0\x00', 0xd) 1m35.110158563s ago: executing program 2 (id=9): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x49}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000800)={'lo\x00', {0x2, 0x0, @broadcast=0xff000000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='10\n\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1,retry=0,timeo=1,retrans=1,soft\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 1m32.990532761s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000001700)='tcp 204', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r1, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) 1m32.930582026s ago: executing program 1 (id=21): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, &(0x7f0000000200)={&(0x7f0000000000)='\x00'/4096, 0x1000, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={&(0x7f0000001000)='\x00'/4096, 0x1000}}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 1m32.93034132s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 4 \x00\x00\x00\x00 2147483647 /\n', 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') 1m32.858616945s ago: executing program 0 (id=23): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000140)="9101000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000180)="8401000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000001c0)="8801000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 1m31.715743884s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='devices\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='mem\n\x00', 0x4) 1m31.35065277s ago: executing program 0 (id=28): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add syz0 ::1\n', 0xd) 1m31.261213669s ago: executing program 32 (id=28): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add syz0 ::1\n', 0xd) 1m30.47131706s ago: executing program 1 (id=30): r0 = syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003000705810308001009040100010e0200000e2401011700820002000000010009240901000000000007058205000401"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000001000)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002100)={0x84, &(0x7f0000001200)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002200)={0x84, &(0x7f0000001400)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002300)={0x84, &(0x7f0000001600)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002400)={0x84, &(0x7f0000001800)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002500)={0x84, &(0x7f0000001a00)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002600)={0x84, &(0x7f0000001c00)={0x0, 0x0, 0x1a, "0000010100000000000000000000000000000000000000040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) r2 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) r3 = syz_open_dev$video(&(0x7f0000000100), 0x10, 0x2) r4 = syz_open_dev$video(&(0x7f0000000100), 0x11, 0x2) r5 = syz_open_dev$video(&(0x7f0000000100), 0x40, 0x2) r6 = syz_open_dev$video(&(0x7f0000000100), 0x41, 0x2) ioctl(r1, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) ioctl(r2, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) ioctl(r3, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) ioctl(r4, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) ioctl(r5, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) ioctl(r6, 0xc0607520, &(0x7f0000000300)="016d040a74657374000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601000800010000000100"/92) 1m29.10052s ago: executing program 1 (id=36): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040012012f10001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x100, '\x00'/128}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 1m27.979831728s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00', 0x6) 1m15.733864393s ago: executing program 33 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='devices\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='mem\n\x00', 0x4) 1m14.980783426s ago: executing program 3 (id=64): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000200)={0x1}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) 1m12.839723615s ago: executing program 34 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00', 0x6) 1m11.750452086s ago: executing program 3 (id=78): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000500)="736c31000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000600)="736c32000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000700)="736c33000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000801)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000802)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000804)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000805)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000806)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000807)=0xc0) 1m11.419807536s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) 1m11.350672639s ago: executing program 3 (id=80): syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ba23000100010000000109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100100112b09050109c00001000007250100000000090401020101020000072401010101000b2402010202100100112b09050109c00001000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x200000], [0x1]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x2b1100, 0x2b1100, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 1m11.120656864s ago: executing program 6 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 0\x00', 0x6) 1m11.120484773s ago: executing program 6 (id=84): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000040)="00000000200000fa0000000000000000000300000000007f1801020000000000", 0x20) write(r1, &(0x7f0000000080)="1400000090000000000000001000000002004e20ac14141400"/128, 0x90) write(r1, &(0x7f0000000140)="07000000100000000000000010000000", 0x10) write(r1, &(0x7f0000000180)="00000000200000fa0000000000000000100300000000007f1801020000000000", 0x20) write(r1, &(0x7f00000001c0)="150000001801000001000000e8030000100010000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac141414000"/229, 0x118) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write(r1, &(0x7f0000000300)="040000001000000001000000e8030000", 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write(r1, &(0x7f0000000340)="06000000200100"/260, 0x120) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) 1m9.910596747s ago: executing program 5 (id=93): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) 1m9.451034034s ago: executing program 6 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) 1m9.29613376s ago: executing program 5 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r2, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 4 \x00\x00\x00\x00 2147483647 /\n', 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') 1m9.295861262s ago: executing program 6 (id=98): r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) 1m9.158022186s ago: executing program 3 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\x00', 0x7) 1m9.157882926s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk', 0x4) 1m8.39085736s ago: executing program 5 (id=103): r0 = syz_usb_connect(0x2, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902530001010080fa0904000004ffffff00070581024000000705010240000007058201000201070506010002010904000104ffffff0007058102400000070501024000000705820100020107050601000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000300)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 1m7.030462292s ago: executing program 4 (id=105): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) 1m6.680435525s ago: executing program 4 (id=106): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x14) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x100) mount$nfs4(&(0x7f0000000200)='127.0.0.1:/\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)={[{'addr=127.0.0.1'}, {'clientaddr=127.0.0.1'}, {'vers=4.2'}]}) 1m6.620409103s ago: executing program 4 (id=107): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) 1m6.570964036s ago: executing program 4 (id=108): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff) 1m6.300269114s ago: executing program 4 (id=109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000500)="736c31000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000600)="736c32000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000700)="736c33000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000801)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000804)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000805)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000806)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000807)=0xc0) 1m6.198009369s ago: executing program 6 (id=110): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 1m5.969121763s ago: executing program 4 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r2, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 4 \x00\x00\x00\x00 2147483647 /\n', 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') 1m5.329778316s ago: executing program 5 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cg/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+memory\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cg/test/memory.max\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='4096', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cg/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0', 0x1) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000010000/0x10000)=nil, 0x10000) 1m5.28103528s ago: executing program 5 (id=113): r0 = io_uring_setup(0x1, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)={&(0x7f0000001000)='\x00'/4096, 0x1000}, &(0x7f00000001c0)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000200), 0x0) 1m5.280801511s ago: executing program 5 (id=114): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) 45.210577472s ago: executing program 35 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r2, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 4 \x00\x00\x00\x00 2147483647 /\n', 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') 45.157139558s ago: executing program 36 (id=110): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 45.149650069s ago: executing program 37 (id=114): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) 45.132965481s ago: executing program 38 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk', 0x4) 1.868908169s ago: executing program 8 (id=116): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) 1.769585554s ago: executing program 8 (id=119): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000500)="736c31000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000600)="736c32000000000000000000000000000100"/40) ioctl(r2, 0x8914, &(0x7f0000000700)="736c33000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000800)=0x70) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000804)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000805)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000806)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000807)=0xc0) 1.769472167s ago: executing program 7 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 0\x00', 0x6) 1.650658676s ago: executing program 7 (id=120): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x3}}) 1.450662487s ago: executing program 8 (id=121): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 1.363623109s ago: executing program 0 (id=118): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)="0101", 0x2) write(r0, &(0x7f00000000c0)='\x00\x00', 0x2) write(r0, &(0x7f0000000100)="02fa", 0x2) write(r0, &(0x7f0000000140)="0200", 0x2) write(r0, &(0x7f0000000180)="0200", 0x2) write(r0, &(0x7f00000001c0)="02fa", 0x2) write(r0, &(0x7f0000000200)="0200", 0x2) write(r0, &(0x7f0000000240)="0200", 0x2) write(r0, &(0x7f0000000280)="02fa", 0x2) 1.185122231s ago: executing program 9 (id=117): r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000200)={&(0x7f0000001000), 0x1000, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 1.089964673s ago: executing program 9 (id=122): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8801") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 165.587µs ago: executing program 0 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='e1000e\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}}) 0s ago: executing program 7 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000100)=""/2, 0x2, 0x4) pwrite64(r0, &(0x7f0000000140)="0604", 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000000)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31130' (ED25519) to the list of known hosts. [ 42.475388][ T5730] cgroup: Unknown subsys name 'net' [ 42.642836][ T5730] cgroup: Unknown subsys name 'cpuset' [ 42.647420][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.556135][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.462433][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.471589][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.476024][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.479400][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.481121][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.483634][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.484806][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.485144][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.485462][ T5756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.490134][ T5763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.493097][ T5761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.494679][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.494915][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.497089][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.499808][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.500119][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.500696][ T5763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.510144][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.512306][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.515754][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.101555][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.104817][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.110155][ T5746] bridge_slave_0: entered allmulticast mode [ 48.114006][ T5746] bridge_slave_0: entered promiscuous mode [ 48.150842][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.153396][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.155961][ T5746] bridge_slave_1: entered allmulticast mode [ 48.160050][ T5746] bridge_slave_1: entered promiscuous mode [ 48.172782][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.175216][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.177637][ T5745] bridge_slave_0: entered allmulticast mode [ 48.180382][ T5745] bridge_slave_0: entered promiscuous mode [ 48.215941][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.218256][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.220706][ T5745] bridge_slave_1: entered allmulticast mode [ 48.224668][ T5745] bridge_slave_1: entered promiscuous mode [ 48.279980][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.299017][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.305000][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.314453][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.318497][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.320858][ T5747] bridge_slave_0: entered allmulticast mode [ 48.323512][ T5747] bridge_slave_0: entered promiscuous mode [ 48.327471][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.329889][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.332160][ T5747] bridge_slave_1: entered allmulticast mode [ 48.334818][ T5747] bridge_slave_1: entered promiscuous mode [ 48.340335][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.408152][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.411501][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.415625][ T5751] bridge_slave_0: entered allmulticast mode [ 48.419902][ T5751] bridge_slave_0: entered promiscuous mode [ 48.425025][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.428441][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.431633][ T5751] bridge_slave_1: entered allmulticast mode [ 48.436320][ T5751] bridge_slave_1: entered promiscuous mode [ 48.464828][ T5746] team0: Port device team_slave_0 added [ 48.480553][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.486259][ T5745] team0: Port device team_slave_0 added [ 48.490882][ T5746] team0: Port device team_slave_1 added [ 48.504511][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.518599][ T5745] team0: Port device team_slave_1 added [ 48.544101][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.557657][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.572620][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.575993][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.584256][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.589625][ T5747] team0: Port device team_slave_0 added [ 48.598632][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.600851][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.609044][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.612906][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.615640][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.623729][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.628486][ T5747] team0: Port device team_slave_1 added [ 48.638922][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.641130][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.650237][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.668999][ T5751] team0: Port device team_slave_0 added [ 48.676541][ T5751] team0: Port device team_slave_1 added [ 48.688556][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.691201][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.700443][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.717502][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.720285][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.730413][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.742516][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.744828][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.752802][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.786496][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.788782][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.796575][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.805169][ T5746] hsr_slave_0: entered promiscuous mode [ 48.808564][ T5746] hsr_slave_1: entered promiscuous mode [ 48.814967][ T5745] hsr_slave_0: entered promiscuous mode [ 48.818486][ T5745] hsr_slave_1: entered promiscuous mode [ 48.822229][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.824530][ T5745] Cannot create hsr debugfs directory [ 48.901155][ T5751] hsr_slave_0: entered promiscuous mode [ 48.904240][ T5751] hsr_slave_1: entered promiscuous mode [ 48.907303][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 48.909564][ T5751] Cannot create hsr debugfs directory [ 48.950292][ T5747] hsr_slave_0: entered promiscuous mode [ 48.953574][ T5747] hsr_slave_1: entered promiscuous mode [ 48.956518][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.959051][ T5747] Cannot create hsr debugfs directory [ 49.206190][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.214084][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.217310][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.223459][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.227449][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.234446][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.245127][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.252753][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.282468][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.287440][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.290738][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.294471][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.305379][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.309414][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.312296][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.316552][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.357486][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.364391][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.368337][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.372183][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.375064][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.383073][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.387490][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.393237][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.460735][ T5751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.466428][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.469972][ T5751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.474769][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.477972][ T5751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.484735][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.500327][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.502868][ T5751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.508676][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.528231][ T5756] Bluetooth: hci1: command tx timeout [ 49.537339][ T5756] Bluetooth: hci2: command tx timeout [ 49.537489][ T5753] Bluetooth: hci3: command tx timeout [ 49.537522][ T5748] Bluetooth: hci0: command tx timeout [ 49.542399][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.577252][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.580392][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.593952][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.603557][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.607175][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.637445][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.662627][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.665460][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.678543][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.681370][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.686677][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.701400][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.712506][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.727903][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.730244][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.749255][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.755209][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.757765][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.762532][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.764906][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.780891][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.783403][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.047618][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.086510][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.095630][ T5746] veth0_vlan: entered promiscuous mode [ 50.102749][ T5746] veth1_vlan: entered promiscuous mode [ 50.108428][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.133530][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.151022][ T5746] veth0_macvtap: entered promiscuous mode [ 50.160078][ T5746] veth1_macvtap: entered promiscuous mode [ 50.165705][ T5745] veth0_vlan: entered promiscuous mode [ 50.184426][ T5751] veth0_vlan: entered promiscuous mode [ 50.194536][ T5745] veth1_vlan: entered promiscuous mode [ 50.198502][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.207374][ T5751] veth1_vlan: entered promiscuous mode [ 50.213250][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.229688][ T5747] veth0_vlan: entered promiscuous mode [ 50.244026][ T5747] veth1_vlan: entered promiscuous mode [ 50.276475][ T5745] veth0_macvtap: entered promiscuous mode [ 50.298727][ T5751] veth0_macvtap: entered promiscuous mode [ 50.303938][ T5745] veth1_macvtap: entered promiscuous mode [ 50.317970][ T5751] veth1_macvtap: entered promiscuous mode [ 50.328423][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.331943][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.334280][ T5747] veth0_macvtap: entered promiscuous mode [ 50.345646][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.351200][ T5747] veth1_macvtap: entered promiscuous mode [ 50.363737][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.368721][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.373738][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.377505][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.379181][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.399202][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.411615][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.444173][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.453367][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.464702][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.470216][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.479901][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.482469][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.491568][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.503993][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.509176][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.542856][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.545486][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.549345][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553857][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.564531][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.568312][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.571167][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.584113][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.588837][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.605149][ T5901] e1000e 0000:00:02.0 eth1: removed PHC [ 50.608207][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725256][ T5901] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.780296][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.783450][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.812343][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.816444][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.837333][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.844071][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.850879][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.856706][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864069][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.872587][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.879944][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.886381][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.895106][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.928120][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.085679][ T5938] cirrus-qemu 0000:00:01.0: vgaarb: deactivate vga console [ 51.095637][ T5938] cirrus-qemu 0000:00:01.0: probe with driver cirrus-qemu failed with error -12 [ 51.151599][ T5938] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:02.0 on minor 2 [ 51.169220][ T5938] cirrus-qemu 0000:00:02.0: [drm] fb1: cirrus-qemudrmf frame buffer device [ 51.250863][ T5939] sl0: header compression turned on [ 51.606909][ T5753] Bluetooth: hci0: command tx timeout [ 51.607406][ T5756] Bluetooth: hci3: command tx timeout [ 51.609874][ T5748] Bluetooth: hci2: command tx timeout [ 51.611167][ T5761] Bluetooth: hci1: command tx timeout [ 51.826906][ T1042] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.887577][ T5910] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.890933][ T5910] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.893812][ T5910] NFSD: starting 90-second grace period (net f00005a1) [ 51.990292][ T1042] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 51.993911][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.006425][ T1042] usbtest 6-1:1.0: Linux gadget zero [ 52.008639][ T1042] usbtest 6-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 52.210231][ T1042] usb 6-1: USB disconnect, device number 2 [ 52.903862][ T5999] cirrus-qemu 0000:00:01.0: vgaarb: deactivate vga console [ 52.915710][ T5999] cirrus-qemu 0000:00:01.0: probe with driver cirrus-qemu failed with error -12 [ 53.037132][ T6000] [drm] Initialized cirrus-qemu 2.0.0 for 0000:00:02.0 on minor 2 [ 53.049116][ T6000] cirrus-qemu 0000:00:02.0: [drm] fb1: cirrus-qemudrmf frame buffer device [ 53.213876][ T6003] sl0: header compression turned on [ 53.457125][ T5945] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.460360][ T5945] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.464011][ T5945] NFSD: starting 10-second grace period (net f0000480) [ 53.687146][ T5756] Bluetooth: hci3: command tx timeout [ 53.687218][ T5748] Bluetooth: hci2: command tx timeout [ 53.687720][ T5753] Bluetooth: hci0: command tx timeout [ 53.688956][ T5761] Bluetooth: hci1: command tx timeout [ 54.617189][ T5986] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.621014][ T5986] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.625066][ T5986] NFSD: starting 10-second grace period (net f00003f7) [ 54.995964][ T5826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.076942][ T5826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.176347][ T5826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.192013][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.197009][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.200777][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.204030][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.208224][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.264289][ T5826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.377278][ T5826] bridge_slave_1: left allmulticast mode [ 55.380560][ T5826] bridge_slave_1: left promiscuous mode [ 55.384687][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.392602][ T5826] bridge_slave_0: left allmulticast mode [ 55.394484][ T5826] bridge_slave_0: left promiscuous mode [ 55.396446][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.527068][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.537909][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.543365][ T5826] bond0 (unregistering): Released all slaves [ 55.574327][ T5459] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.768544][ T5761] Bluetooth: hci0: command tx timeout [ 55.770240][ T5761] Bluetooth: hci3: command tx timeout [ 55.772675][ T5748] Bluetooth: hci2: command tx timeout [ 55.799194][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.847960][ T6035] NFSD: Unable to initialize client recovery tracking! (-110) [ 55.850449][ T6035] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 55.853184][ T6035] NFSD: starting 90-second grace period (net f00004d3) [ 55.869825][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.872483][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.875064][ T6054] bridge_slave_0: entered allmulticast mode [ 55.878444][ T6054] bridge_slave_0: entered promiscuous mode [ 55.882166][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.884875][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.887665][ T6054] bridge_slave_1: entered allmulticast mode [ 55.891322][ T6054] bridge_slave_1: entered promiscuous mode [ 55.906976][ T5826] hsr_slave_0: left promiscuous mode [ 55.910140][ T5826] hsr_slave_1: left promiscuous mode [ 55.912225][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.915409][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.921683][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.923990][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.932936][ T5826] veth1_macvtap: left promiscuous mode [ 55.935172][ T5826] veth0_macvtap: left promiscuous mode [ 55.938119][ T5826] veth1_vlan: left promiscuous mode [ 55.940233][ T5826] veth0_vlan: left promiscuous mode [ 56.101250][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 56.111126][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 56.218386][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.224239][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.257963][ T6054] team0: Port device team_slave_0 added [ 56.262066][ T6054] team0: Port device team_slave_1 added [ 56.281759][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.284288][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.293731][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.299089][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.301940][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.312086][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.346473][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.352686][ T6054] hsr_slave_0: entered promiscuous mode [ 56.355007][ T6054] hsr_slave_1: entered promiscuous mode [ 56.357192][ T6054] debugfs: 'hsr0' already exists in 'hsr' [ 56.359073][ T6054] Cannot create hsr debugfs directory [ 146.406147][ T7013] BUG: unable to handle page fault for address: ffffc90003380bf8 [ 146.408982][ T7013] #PF: supervisor read access in kernel mode [ 146.411044][ T7013] #PF: error_code(0x0000) - not-present page [ 146.413999][ T7013] PGD 1bc00067 P4D 1bc00067 PUD 1d293067 PMD 24f0f067 PTE 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.416332][ T7013] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 146.418203][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 146.421085][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.424297][ T7013] RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 [ 146.426614][ T7013] Code: f6 ff ff e8 6a d8 10 fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 a0 d2 [ 146.433133][ T7013] RSP: 0000:ffffc900038177c8 EFLAGS: 00010246 [ 146.435124][ T7013] RAX: ffffc9000337b0a0 RBX: ffff888053f01694 RCX: ffffc90035406000 [ 146.437707][ T7013] RDX: 1ffff1100a7e02b8 RSI: ffffffff86f8d896 RDI: ffff888028080000 [ 146.440301][ T7013] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 146.442958][ T7013] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000702efe [ 146.445451][ T7013] R13: ffff888053f015c0 R14: ffff888053f015b8 R15: ffff888053f00ec0 [ 146.447975][ T7013] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f54a6b40 [ 146.450955][ T7013] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 146.453297][ T7013] CR2: ffffc90003380bf8 CR3: 00000000609dd000 CR4: 0000000000352ef0 [ 146.455835][ T7013] Call Trace: [ 146.456908][ T7013] [ 146.458028][ T7013] ? __pfx_e1000e_check_for_copper_link+0x10/0x10 [ 146.460060][ T7013] ? __pfx_e1000e_get_speed_and_duplex_copper+0x10/0x10 [ 146.462256][ T7013] ? __pfx_e1000_get_variants_82571+0x10/0x10 [ 146.464188][ T7013] ? synchronize_irq+0x2d/0x40 [ 146.465726][ T7013] ? e1000_irq_disable+0x2d0/0x5c0 [ 146.467363][ T7013] e1000_probe+0x1123/0x36b0 [ 146.469488][ T7013] ? __pfx_e1000_probe+0x10/0x10 [ 146.471844][ T7013] ? mark_held_locks+0x40/0x70 [ 146.473691][ T7013] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 146.475568][ T7013] ? lockdep_hardirqs_on+0x78/0x100 [ 146.477241][ T7013] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 146.479105][ T7013] ? __pfx_e1000_probe+0x10/0x10 [ 146.480701][ T7013] local_pci_probe+0xdd/0x1b0 [ 146.482353][ T7013] pci_call_probe+0x176/0x800 [ 146.484092][ T7013] ? __pfx_pci_call_probe+0x10/0x10 [ 146.486063][ T7013] ? find_held_lock+0x2b/0x80 [ 146.487711][ T7013] ? pci_match_device+0x450/0x5f0 [ 146.489528][ T7013] ? pci_match_device+0x450/0x5f0 [ 146.491140][ T7013] ? pci_match_id+0x34d/0x3f0 [ 146.492827][ T7013] ? pci_match_device+0xb4/0x5f0 [ 146.494696][ T7013] pci_device_probe+0x1cd/0x370 [ 146.496593][ T7013] ? __pfx_pci_device_probe+0x10/0x10 [ 146.498352][ T7013] really_probe+0x241/0xa60 [ 146.499897][ T7013] __driver_probe_device+0x20e/0x450 [ 146.501867][ T7013] device_driver_attach+0xd1/0x220 [ 146.503866][ T7013] bind_store+0xf4/0x190 [ 146.505485][ T7013] ? __pfx_bind_store+0x10/0x10 [ 146.507212][ T7013] drv_attr_store+0x74/0xb0 [ 146.508918][ T7013] ? __pfx_drv_attr_store+0x10/0x10 [ 146.510642][ T7013] sysfs_kf_write+0xf2/0x150 [ 146.512464][ T7013] kernfs_fop_write_iter+0x3e0/0x5f0 [ 146.514202][ T7013] ? __pfx_sysfs_kf_write+0x10/0x10 [ 146.515889][ T7013] vfs_write+0x6ac/0x1050 [ 146.517271][ T7013] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 146.519137][ T7013] ? __pfx_vfs_write+0x10/0x10 [ 146.520238][ T1042] snd_hda_intel 0000:00:02.0: no codecs found! [ 146.520678][ T7013] ? find_held_lock+0x2b/0x80 [ 146.524321][ T7013] ksys_write+0x12a/0x250 [ 146.525989][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 146.527963][ T7013] __do_fast_syscall_32+0xe7/0x970 [ 146.529682][ T7013] do_fast_syscall_32+0x32/0x70 [ 146.531275][ T7013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.533312][ T7013] RIP: 0023:0xf7fe6fec [ 146.534658][ T7013] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 146.536754][ T7013] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 146.539409][ T7013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 146.542012][ T7013] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 146.544636][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.547207][ T7013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.549775][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.552468][ T7013] [ 146.553622][ T7013] Modules linked in: [ 146.554925][ T7013] CR2: ffffc90003380bf8 [ 146.556333][ T7013] ---[ end trace 0000000000000000 ]--- [ 146.558129][ T7013] RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 [ 146.560531][ T7013] Code: f6 ff ff e8 6a d8 10 fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 a0 d2 [ 146.567194][ T7013] RSP: 0000:ffffc900038177c8 EFLAGS: 00010246 [ 146.569248][ T7013] RAX: ffffc9000337b0a0 RBX: ffff888053f01694 RCX: ffffc90035406000 [ 146.571798][ T7013] RDX: 1ffff1100a7e02b8 RSI: ffffffff86f8d896 RDI: ffff888028080000 [ 146.574489][ T7013] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 146.577076][ T7013] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000702efe [ 146.579650][ T7013] R13: ffff888053f015c0 R14: ffff888053f015b8 R15: ffff888053f00ec0 [ 146.582175][ T7013] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f54a6b40 [ 146.584998][ T7013] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 146.587075][ T7013] CR2: 00000000f7fe7000 CR3: 00000000609dd000 CR4: 0000000000352ef0 [ 146.589574][ T7013] Kernel panic - not syncing: Fatal exception [ 146.592080][ T7013] Kernel Offset: disabled [ 146.593453][ T7013] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:22:04 Registers: info registers vcpu 0 CPU#0 RAX=00000059df692bb2 RBX=ffff88802b223d80 RCX=00000000000006e0 RDX=0000000000000059 RSI=ffffffff81f96f65 RDI=ffff8880290c2540 RBP=00000022106f46be RSP=ffffc90000007d90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=1ffff92000000fbc R13=0000000000000001 R14=0000000000000001 R15=ffff88802b223dc0 RIP=ffffffff81f96f78 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f96ec0 CR3=000000004c331000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90003817020 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b6f71fa R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffc90003380bf8 CR3=00000000609dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff91d92a2a RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc900035868d8 RSP=ffffc90003586820 R8 =ffffffff91d92a2e R9 =0000000000000000 R10=ffffc90003586890 R11=000000000001bdb2 R12=ffffc900035868e0 R13=ffffc90003586890 R14=ffffc90003587cf8 R15=ffffc900035868c4 RIP=ffffffff81b810de RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c331fce CR3=000000006d02a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000008b884 RBX=ffff88801c7f2540 RCX=ffffffff8bb892d5 RDX=0000000000000001 RSI=ffffffff8c400a00 RDI=ffffffff81de9497 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000000 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=ffffffff81d5692c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5484ff4 CR3=0000000021036000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000