last executing test programs: 15.414708364s ago: executing program 2 (id=6): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x49}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @loopback}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 14.964416585s ago: executing program 2 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/232, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 14.820401159s ago: executing program 2 (id=9): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='2049\n\x00', 0x5) 13.629685762s ago: executing program 2 (id=11): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.509878537s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mydomain / 2147483647 0x2400 0 0 1\n', 0x23) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 12.00683102s ago: executing program 2 (id=14): syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x0, 0x2, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00"}]}, {{0x9, 0x5, 0x1, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00"}]}, {{0x9, 0x5, 0x82, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) 11.963521923s ago: executing program 32 (id=14): syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x0, 0x2, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00"}]}, {{0x9, 0x5, 0x1, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "44ac00"}]}, {{0x9, 0x5, 0x82, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) 10.279652414s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)) 9.598526252s ago: executing program 3 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='+2049\n', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r5, &(0x7f0000001500)='test\x00', 0x4) 8.626549681s ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x1) 8.612843705s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/instances/foo\x00', 0x1ff) 8.595829493s ago: executing program 4 (id=34): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @empty}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0xf}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 8.392944822s ago: executing program 1 (id=35): r0 = socket$inet6(0xa, 0x3, 0x87) sendto$inet6(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 8.39267344s ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r3, &(0x7f0000000840)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r8, &(0x7f0000000400), 0x64) 8.36845683s ago: executing program 3 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 7.989758783s ago: executing program 4 (id=38): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x1, 0x0, 0x0, {0x1, 0x1}}, 0x3c}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 7.945604766s ago: executing program 4 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000340)="300000001d0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000003c0)="300000001f0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="30000000200001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write(r1, &(0x7f0000000700)="110000000000000000000000000000000000000080000000000000000000000080000000", 0x24) ioctl(r1, 0x8946, &(0x7f0000000600)="65746831000000000000000000000000000700000000007f") 7.849723807s ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* ./tmp 2147483647 8192 0 0 1 0 fsloc 1 1 server1 /\n\x00', 0x34) 6.740035996s ago: executing program 1 (id=42): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0389") nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr1_input\x00', 0x0, 0x0) 5.27033274s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/devices/virtio0/driver/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='virtio0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/drivers_probe\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='virtio0\x00', 0x8) 5.27016656s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)='mem', 0x3, 0x0) 5.270037573s ago: executing program 3 (id=45): r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xd, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 5.000232946s ago: executing program 4 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+4\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 4.96572206s ago: executing program 33 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+4\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 3.222345879s ago: executing program 0 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xffffffff}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x2faf0800}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 3.124162505s ago: executing program 5 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) 3.049513652s ago: executing program 5 (id=49): r0 = syz_usb_connect$hid(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c20000000000010902510002010080000904000002030000000921110100012223000905810340000a00000905020340000a00000904010002030000000921110100012223000905830340000a00000905040340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x0, 0x17d78400}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x1, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") 2.309873864s ago: executing program 0 (id=50): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) setsockopt$RDS_GET_MR(r0, 0x114, 0x1, &(0x7f0000000040)={{0x0}, 0x0}, 0x20) 2.309739335s ago: executing program 0 (id=51): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.238923969s ago: executing program 0 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) 2.238752936s ago: executing program 1 (id=53): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='mem', 0x3) 2.238665462s ago: executing program 0 (id=54): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280001010200010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) 2.150111586s ago: executing program 3 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='1 4 1 7\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='devices\n\x00', 0x9) 879.713323ms ago: executing program 0 (id=56): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000100)="d8000000d800000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/212) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 5 (id=57): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x100}, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53173' (ED25519) to the list of known hosts. [ 41.999742][ T5733] cgroup: Unknown subsys name 'net' [ 42.125707][ T5733] cgroup: Unknown subsys name 'cpuset' [ 42.129708][ T5733] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.040460][ T5733] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.853036][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.853204][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.857833][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.858857][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.864413][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.865317][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.867306][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.869256][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.870040][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.870406][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.873713][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.874454][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.876667][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.879441][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.887851][ T5762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.888700][ T5762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.891079][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.893836][ T5762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.895696][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.897510][ T5762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x19e000) [ 47.243518][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 47.245773][ T1132] ata1: failed to read log page 10h (errno=-5) [ 47.247781][ T1132] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 47.250406][ T1132] ata1.00: irq_stat 0x41000000 [ 47.252023][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 47.254147][ T1132] ata1.00: cmd 61/f0:58:76:16:08/0c:00:00:00:00/40 tag 11 ncq dma 1695744 ou [ 47.254147][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 47.260055][ T1132] ata1.00: status: { DRDY } [ 47.261581][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 47.264046][ T1132] ata1.00: cmd 61/08:60:36:41:08/00:00:00:00:00/40 tag 12 ncq dma 4096 out [ 47.264046][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 47.269367][ T1132] ata1.00: status: { DRDY } [ 47.271494][ T1132] ata1.00: configured for UDMA/100 [ 47.273697][ T1132] ata1: EH complete [ 47.520219][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.523087][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.526241][ T5755] bridge_slave_0: entered allmulticast mode [ 47.530181][ T5755] bridge_slave_0: entered promiscuous mode [ 47.563210][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.566315][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.569342][ T5755] bridge_slave_1: entered allmulticast mode [ 47.573218][ T5755] bridge_slave_1: entered promiscuous mode [ 47.668372][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.672110][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.675267][ T5750] bridge_slave_0: entered allmulticast mode [ 47.679183][ T5750] bridge_slave_0: entered promiscuous mode [ 47.708569][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.712485][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.715690][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.718760][ T5750] bridge_slave_1: entered allmulticast mode [ 47.723675][ T5750] bridge_slave_1: entered promiscuous mode [ 47.727593][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.730720][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.734016][ T5757] bridge_slave_0: entered allmulticast mode [ 47.737948][ T5757] bridge_slave_0: entered promiscuous mode [ 47.742020][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.744872][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.747395][ T5746] bridge_slave_0: entered allmulticast mode [ 47.750155][ T5746] bridge_slave_0: entered promiscuous mode [ 47.755026][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.767733][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.770957][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.773489][ T5757] bridge_slave_1: entered allmulticast mode [ 47.776254][ T5757] bridge_slave_1: entered promiscuous mode [ 47.784277][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.786760][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.789076][ T5746] bridge_slave_1: entered allmulticast mode [ 47.791694][ T5746] bridge_slave_1: entered promiscuous mode [ 47.826279][ T5755] team0: Port device team_slave_0 added [ 47.838617][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.843925][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.848642][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.855300][ T5755] team0: Port device team_slave_1 added [ 47.876872][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.894214][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.926985][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.932562][ T5750] team0: Port device team_slave_0 added [ 47.941289][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.944323][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.955026][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.969022][ T5750] team0: Port device team_slave_1 added [ 47.973227][ T5757] team0: Port device team_slave_0 added [ 47.975984][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.978205][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.986426][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.007498][ T5757] team0: Port device team_slave_1 added [ 48.010810][ T5746] team0: Port device team_slave_0 added [ 48.014681][ T5746] team0: Port device team_slave_1 added [ 48.074579][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.076906][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.085231][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.089426][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.092203][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.102402][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.118171][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.121016][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.131092][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.136494][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.139299][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.149396][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.154682][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.157447][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.166927][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.176444][ T5755] hsr_slave_0: entered promiscuous mode [ 48.179568][ T5755] hsr_slave_1: entered promiscuous mode [ 48.189472][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.192301][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.202738][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.285337][ T5750] hsr_slave_0: entered promiscuous mode [ 48.287442][ T5750] hsr_slave_1: entered promiscuous mode [ 48.289425][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 48.291271][ T5750] Cannot create hsr debugfs directory [ 48.307377][ T5757] hsr_slave_0: entered promiscuous mode [ 48.309495][ T5757] hsr_slave_1: entered promiscuous mode [ 48.311613][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 48.313383][ T5757] Cannot create hsr debugfs directory [ 48.337561][ T5746] hsr_slave_0: entered promiscuous mode [ 48.339830][ T5746] hsr_slave_1: entered promiscuous mode [ 48.341867][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.344433][ T5746] Cannot create hsr debugfs directory [ 48.603020][ T5755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.610263][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.614076][ T5755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.619370][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.622481][ T5755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.628409][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.631311][ T5755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.636324][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.680898][ T5750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.685353][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.689049][ T5750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.693820][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.696517][ T5750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.700862][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.704414][ T5750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.708594][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.769179][ T5757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.773374][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.776166][ T5757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.780190][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.783177][ T5757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.787307][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.793940][ T5757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.797895][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.853079][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.859487][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.866950][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.873729][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.876733][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.881260][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.885366][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.891782][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.903490][ T5748] Bluetooth: hci1: command tx timeout [ 48.903507][ T5754] Bluetooth: hci0: command tx timeout [ 48.904479][ T5762] Bluetooth: hci3: command tx timeout [ 48.916914][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.962517][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.967581][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.981571][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.984387][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.993715][ T5754] Bluetooth: hci2: command tx timeout [ 49.003170][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.005521][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.011885][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.021634][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.024003][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.032448][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.040996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.043509][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.073585][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.082525][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.093997][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.096435][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.109888][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.112394][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.123896][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.134107][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.136436][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.148273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.150650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.185007][ T5746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.188416][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.313731][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.351167][ T5755] veth0_vlan: entered promiscuous mode [ 49.358805][ T5755] veth1_vlan: entered promiscuous mode [ 49.381010][ T5755] veth0_macvtap: entered promiscuous mode [ 49.387799][ T5755] veth1_macvtap: entered promiscuous mode [ 49.398101][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.407387][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.415013][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.428951][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.470611][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.505742][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.509721][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.509921][ T5750] veth0_vlan: entered promiscuous mode [ 49.528426][ T5757] veth0_vlan: entered promiscuous mode [ 49.541449][ T5750] veth1_vlan: entered promiscuous mode [ 49.547437][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.550900][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.562651][ T5757] veth1_vlan: entered promiscuous mode [ 49.576553][ T5746] veth0_vlan: entered promiscuous mode [ 49.588088][ T5746] veth1_vlan: entered promiscuous mode [ 49.597575][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.601958][ T5750] veth0_macvtap: entered promiscuous mode [ 49.608365][ T5750] veth1_macvtap: entered promiscuous mode [ 49.608643][ T5755] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.616949][ T5755] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.621856][ T5755] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.628466][ T5757] veth0_macvtap: entered promiscuous mode [ 49.633413][ T5755] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.639926][ T5757] veth1_macvtap: entered promiscuous mode [ 49.651665][ T5746] veth0_macvtap: entered promiscuous mode [ 49.656226][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.660678][ T5746] veth1_macvtap: entered promiscuous mode [ 49.673656][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.679926][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.690210][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.695136][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.706156][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.712958][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.737154][ T5896] kAFS: unable to lookup cell 'foosyz' [ 49.818760][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.821532][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.833705][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.836680][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.855212][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.857868][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.863012][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.865958][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.883290][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.885992][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.898308][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.901295][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.910977][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.913779][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.916875][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.923000][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.931433][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.953852][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.961745][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968521][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.974388][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.983401][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.989159][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.997362][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.004026][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.007583][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.010960][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.057196][ T42] audit: type=1800 audit(1785864574.324:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="power" dev="configfs" ino=9547 res=0 errno=0 [ 50.062920][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.083194][ T5905] null_blk: disk my_nullb created [ 50.210225][ T5910] lo speed is unknown, defaulting to 1000 [ 50.212575][ T5910] lo speed is unknown, defaulting to 1000 [ 50.215934][ T5910] lo speed is unknown, defaulting to 1000 [ 50.216863][ T5894] usb 6-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 0.00 [ 50.218695][ T5910] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.220623][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.220636][ T5894] usb 6-1: Product: syz [ 50.220644][ T5894] usb 6-1: Manufacturer: syz [ 50.220652][ T5894] usb 6-1: SerialNumber: syz [ 50.232223][ T5910] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.238148][ T5910] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.248719][ T5910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.261032][ T5910] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.283656][ T5910] lo speed is unknown, defaulting to 1000 [ 50.287544][ T5910] lo speed is unknown, defaulting to 1000 [ 50.290677][ T5910] lo speed is unknown, defaulting to 1000 [ 50.294195][ T5910] lo speed is unknown, defaulting to 1000 [ 50.297348][ T5910] lo speed is unknown, defaulting to 1000 [ 50.402842][ T5838] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 50.563821][ T5917] loop1: detected capacity change from 0 to 2048 [ 50.564002][ T5838] usb 8-1: not running at top speed; connect to a high speed hub [ 50.572036][ T5838] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 50.575468][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.590895][ T5838] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 002 [ 50.597108][ T5917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.669717][ T5917] md: invalid superblock checksum on loop1 [ 50.672010][ T5917] md: loop1 does not have a valid v1.1 superblock, not importing! [ 50.765037][ T5898] lo speed is unknown, defaulting to 1000 [ 50.769847][ T61] smbdirect: ib_dev[syz0] removed [ 50.773367][ T5898] syz0: Port: 1 Link DOWN [ 50.983167][ T5748] Bluetooth: hci3: command tx timeout [ 50.992895][ T5748] Bluetooth: hci1: command tx timeout [ 51.050429][ T5923] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 51.072781][ T5748] Bluetooth: hci2: command tx timeout [ 51.182835][ T5904] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.185969][ T5904] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.188789][ T5904] NFSD: starting 90-second grace period (net f0000501) [ 51.436608][ T5754] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 51.439546][ T5898] usb 6-1: USB disconnect, device number 2 [ 52.222839][ T5898] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.378144][ T5898] usb 6-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 52.381053][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.383648][ T5898] usb 6-1: Manufacturer: LME2510C WARM [ 52.825024][ T5838] (null): failure reading functionality [ 52.829116][ T5838] i2c i2c-2: failure reading functionality [ 52.833201][ T5838] i2c i2c-2: connected i2c-tiny-usb device [ 52.990566][ T5838] usb 8-1: USB disconnect, device number 2 [ 53.042782][ T5926] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.045218][ T5926] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.048651][ T5926] NFSD: starting 90-second grace period (net f0000501) [ 53.063076][ T5754] Bluetooth: hci3: command tx timeout [ 53.072753][ T5754] Bluetooth: hci1: command tx timeout [ 53.152782][ T5754] Bluetooth: hci2: command tx timeout [ 53.467135][ T5852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.550927][ T5852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.618258][ T5943] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 53.643175][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.653951][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.657091][ T5852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.661072][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.673089][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.676880][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.749037][ T5852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.756806][ T61] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 53.763276][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 53.774790][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 53.777257][ T61] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 53.779667][ T61] nvme nvme0: NVME-FC{0}: Max reconnect attempts (1) reached. [ 53.783708][ T37] nvme nvme0: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 53.783913][ T5943] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:d0131c2e-f40c-4a79-a1cf-dfd8b441aebc [ 53.802920][ T5898] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 53.802986][ T5898] dvb_usb_lmedm04 6-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 53.810020][ T5898] usb 6-1: USB disconnect, device number 3 [ 53.902301][ T5964] lo speed is unknown, defaulting to 1000 [ 53.911742][ T5964] lo speed is unknown, defaulting to 1000 [ 53.917564][ T5964] lo speed is unknown, defaulting to 1000 [ 53.932397][ T5852] bridge_slave_1: left allmulticast mode [ 53.935526][ T5852] bridge_slave_1: left promiscuous mode [ 53.938473][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.946774][ T5852] bridge_slave_0: left allmulticast mode [ 53.948616][ T5852] bridge_slave_0: left promiscuous mode [ 53.950631][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.017791][ T5964] infiniband syz0: set active [ 54.023951][ T5964] infiniband syz0: added lo [ 54.036849][ T5964] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 54.041502][ T5964] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 54.046988][ T5964] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 54.058867][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.067633][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.067910][ T5964] RDS/IB: syz0: added [ 54.071895][ T5964] smc: adding ib device syz0 with port count 1 [ 54.074233][ T5964] smc: ib device syz0 port 1 has no pnetid [ 54.078946][ T5852] bond0 (unregistering): Released all slaves [ 54.092365][ T50] lo speed is unknown, defaulting to 1000 [ 54.095284][ T5830] lo speed is unknown, defaulting to 1000 [ 54.101483][ T5964] lo speed is unknown, defaulting to 1000 [ 54.225916][ T5964] lo speed is unknown, defaulting to 1000 [ 54.243765][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.363790][ T5946] lo speed is unknown, defaulting to 1000 [ 54.367565][ T5898] IPVS: starting estimator thread 0... [ 54.408384][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.482780][ T5986] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.484118][ T5964] lo speed is unknown, defaulting to 1000 [ 54.563379][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.599724][ T6000] NFSD: Failed to start, no listeners configured. [ 54.618872][ T5964] lo speed is unknown, defaulting to 1000 [ 54.699603][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.707180][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.712882][ T5946] bridge_slave_0: entered allmulticast mode [ 54.718695][ T5946] bridge_slave_0: entered promiscuous mode [ 54.726861][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.734026][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.736726][ T5946] bridge_slave_1: entered allmulticast mode [ 54.739542][ T5946] bridge_slave_1: entered promiscuous mode [ 54.759139][ T5989] rdma_rxe: rxe_newlink: failed to add veth0 [ 54.781839][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.794820][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.828299][ T5946] team0: Port device team_slave_0 added [ 54.834089][ T6014] e1000e 0000:00:02.0 eth1: removed PHC [ 54.835146][ T6016] lo speed is unknown, defaulting to 1000 [ 54.893492][ T42] audit: type=1800 audit(1785864579.164:3): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="attr_allow_any_host" dev="configfs" ino=8595 res=0 errno=0 [ 54.894670][ T6017] nvmet: adding nsid 1 to subsystem testnqn [ 54.916215][ T42] audit: type=1800 audit(1785864579.184:4): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="device_path" dev="configfs" ino=9723 res=0 errno=0 [ 54.924470][ T42] audit: type=1800 audit(1785864579.184:5): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="enable" dev="configfs" ino=9724 res=0 errno=0 [ 54.932510][ T42] audit: type=1800 audit(1785864579.184:6): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="addr_trtype" dev="configfs" ino=9730 res=0 errno=0 [ 54.936789][ T6017] nvmet_rdma: enabling port 1 (127.0.0.1:4421) [ 54.941002][ T42] audit: type=1800 audit(1785864579.184:7): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="addr_adrfam" dev="configfs" ino=11756 res=0 errno=0 [ 54.942008][ T6014] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 54.953344][ T42] audit: type=1800 audit(1785864579.204:8): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="addr_traddr" dev="configfs" ino=11757 res=0 errno=0 [ 54.961127][ T42] audit: type=1800 audit(1785864579.204:9): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="addr_trsvcid" dev="configfs" ino=11758 res=0 errno=0 [ 54.988184][ T13] nvme nvme0: rdma_resolve_route failed (-110). [ 54.994034][ T6017] nvme nvme0: rdma connection establishment failed (-19) [ 55.001425][ T5946] team0: Port device team_slave_1 added [ 55.012272][ T6016] lo speed is unknown, defaulting to 1000 [ 55.025196][ T5852] hsr_slave_0: left promiscuous mode [ 55.028019][ T5852] hsr_slave_1: left promiscuous mode [ 55.030635][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.034887][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.046060][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.054588][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.072605][ T5852] veth1_macvtap: left promiscuous mode [ 55.077810][ T5852] veth0_macvtap: left promiscuous mode [ 55.078731][ T6020] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 55.080987][ T5852] veth1_vlan: left promiscuous mode [ 55.090214][ T5852] veth0_vlan: left promiscuous mode [ 55.112077][ T1162] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 55.122797][ T37] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 55.126255][ T1162] (NULL device *): queue 0 connect admin queue failed (-6). [ 55.129080][ T1162] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 55.131636][ T1162] nvme nvme0: NVME-FC{0}: Max reconnect attempts (1) reached. [ 55.134967][ T37] nvme nvme0: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 55.138630][ T6020] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:d0131c2e-f40c-4a79-a1cf-dfd8b441aebc [ 55.143901][ T5754] Bluetooth: hci3: command tx timeout [ 55.157099][ T5754] Bluetooth: hci1: command tx timeout [ 55.233187][ T5754] Bluetooth: hci2: command tx timeout [ 55.297859][ T5852] team0 (unregistering): Port device team_slave_1 removed [ 55.305956][ T5852] team0 (unregistering): Port device team_slave_0 removed [ 55.367915][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.370345][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.378911][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.382632][ T6016] lo speed is unknown, defaulting to 1000 [ 55.384444][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.386651][ T6016] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 55.387926][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.393106][ T6016] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 55.402763][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.412414][ T6016] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 55.435965][ T6016] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.440578][ T5946] hsr_slave_0: entered promiscuous mode [ 55.443334][ T5946] hsr_slave_1: entered promiscuous mode [ 55.445950][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 55.448186][ T5946] Cannot create hsr debugfs directory [ 55.465943][ T6016] lo speed is unknown, defaulting to 1000 [ 55.488141][ T6016] lo speed is unknown, defaulting to 1000 [ 55.495789][ T6016] lo speed is unknown, defaulting to 1000 [ 55.501578][ T6016] lo speed is unknown, defaulting to 1000 [ 55.566234][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.665305][ T5946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.678873][ T5946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.682292][ T5946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.688843][ T5946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.691708][ T5946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.698295][ T5946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.701834][ T5946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.705003][ T5754] Bluetooth: hci0: command tx timeout [ 55.712328][ T5946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.738035][ T6038] infiniband syz1: set active [ 55.739723][ T6038] infiniband syz1: added veth0 [ 55.748011][ T6038] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 55.753324][ T6038] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 55.758686][ T6038] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 55.777924][ T6038] RDS/IB: syz1: added [ 55.781304][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.781904][ T6038] smc: adding ib device syz1 with port count 1 [ 55.786284][ T6038] smc: ib device syz1 port 1 has no pnetid [ 55.791721][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.800008][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.802321][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.812133][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.814831][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.081284][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.225190][ T5946] veth0_vlan: entered promiscuous mode [ 56.232446][ T5946] veth1_vlan: entered promiscuous mode [ 56.249455][ T5946] veth0_macvtap: entered promiscuous mode [ 56.257763][ T5946] veth1_macvtap: entered promiscuous mode [ 56.266686][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.276906][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.028144][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.030497][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 66.033367][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.036660][ T9] Workqueue: usb_hub_wq hub_event [ 66.038372][ T9] Call Trace: [ 66.039438][ T9] [ 66.040395][ T9] dump_stack_lvl+0x100/0x190 [ 66.042022][ T9] vpanic+0x552/0x970 [ 66.043307][ T9] ? __pfx_vpanic+0x10/0x10 [ 66.044756][ T9] panic+0xd1/0xe0 [ 66.046111][ T9] ? __pfx_panic+0x10/0x10 [ 66.047544][ T9] ? check_panic_on_warn+0x1f/0x90 [ 66.049158][ T9] check_panic_on_warn.cold+0x19/0x34 [ 66.050848][ T9] ? free_large_kmalloc+0xbf/0x100 [ 66.052610][ T9] __warn.cold+0x191/0x318 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 66.054284][ T9] __report_bug+0x30f/0x440 [ 66.056001][ T9] ? free_large_kmalloc+0xbf/0x100 [ 66.057804][ T9] ? __pfx___report_bug+0x10/0x10 [ 66.059521][ T9] ? __device_attach+0x1e4/0x4d0 [ 66.061090][ T9] ? device_initial_probe+0xaf/0xd0 [ 66.062722][ T9] ? bus_probe_device+0x64/0x160 [ 66.064308][ T9] ? device_add+0x121d/0x1970 [ 66.065932][ T9] ? usb_new_device.cold+0x685/0x115c [ 66.067619][ T9] ? hub_event+0x30a3/0x4a60 [ 66.069083][ T9] ? process_one_work+0xa23/0x1940 [ 66.070690][ T9] ? worker_thread+0x5ef/0xe50 [ 66.072336][ T9] ? kthread+0x370/0x450 [ 66.073694][ T9] ? ret_from_fork+0x72b/0xd50 [ 66.075231][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 66.076802][ T9] ? find_held_lock+0x2b/0x80 [ 66.078283][ T9] ? smscore_unregister_device+0x537/0x7f0 [ 66.080234][ T9] ? smscore_unregister_device+0x537/0x7f0 [ 66.082062][ T9] ? free_large_kmalloc+0xbf/0x100 [ 66.083682][ T9] report_bug+0xb2/0x220 [ 66.085028][ T9] ? free_large_kmalloc+0xbf/0x100 [ 66.086670][ T9] handle_bug+0x16a/0x2a0 [ 66.088121][ T9] exc_invalid_op+0x17/0x50 [ 66.089611][ T9] asm_exc_invalid_op+0x1a/0x20 [ 66.091145][ T9] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 66.092939][ T9] Code: 28 90 0f 0b 90 80 3d 85 a6 9d 0e 00 0f 84 47 70 b7 fe 48 8b 74 24 28 48 89 ef e8 7c 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 93 52 19 8e 5b 5d 41 5c 41 [ 66.099050][ T9] RSP: 0000:ffffc900001b6d80 EFLAGS: 00010202 [ 66.100955][ T9] RAX: 00000000000000ff RBX: ffffea0001c69880 RCX: 000000000000002e [ 66.103416][ T9] RDX: 0000000000000000 RSI: ffff888071a62000 RDI: ffffea0001c69880 [ 66.106226][ T9] RBP: ffff888071a62000 R08: 0000000000000005 R09: 0000000000000000 [ 66.108686][ T9] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888013d6c000 [ 66.111140][ T9] R13: ffff888013d6a000 R14: dffffc0000000000 R15: ffff888013d6c0f0 [ 66.113748][ T9] usb_free_urb.part.0+0xf8/0x110 [ 66.115358][ T9] usb_free_urb+0x1f/0x30 [ 66.116730][ T9] smsusb_term_device+0x108/0x200 [ 66.118317][ T9] smsusb_init_device+0xb4e/0xbb0 [ 66.119913][ T9] ? __pfx_smsusb_init_device+0x10/0x10 [ 66.121789][ T9] ? kfree+0x1e5/0x6c0 [ 66.123098][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 66.124841][ T9] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 66.126772][ T9] smsusb_probe+0xd7f/0xe1f [ 66.128221][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 66.129924][ T9] ? mark_held_locks+0x40/0x70 [ 66.131435][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.133282][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.135132][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 66.137327][ T9] usb_probe_interface+0x303/0x8f0 [ 66.138965][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 66.140740][ T9] really_probe+0x241/0xa60 [ 66.142178][ T9] __driver_probe_device+0x20e/0x450 [ 66.143852][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.145862][ T9] driver_probe_device+0x4a/0x140 [ 66.147463][ T9] __device_attach_driver+0x1df/0x320 [ 66.149151][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 66.151004][ T9] bus_for_each_drv+0x159/0x1e0 [ 66.152548][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 66.154349][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 66.156067][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.157892][ T9] __device_attach+0x1e4/0x4d0 [ 66.159402][ T9] ? __pfx___device_attach+0x10/0x10 [ 66.161072][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.162836][ T9] device_initial_probe+0xaf/0xd0 [ 66.164432][ T9] bus_probe_device+0x64/0x160 [ 66.165993][ T9] device_add+0x121d/0x1970 [ 66.167420][ T9] ? __pfx_device_add+0x10/0x10 [ 66.168952][ T9] ? mark_held_locks+0x40/0x70 [ 66.170469][ T9] usb_set_configuration+0xd97/0x1c60 [ 66.172318][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 66.174232][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 66.176143][ T9] usb_probe_device+0xef/0x400 [ 66.177654][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 66.179341][ T9] really_probe+0x241/0xa60 [ 66.180909][ T9] __driver_probe_device+0x20e/0x450 [ 66.182575][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.184598][ T9] driver_probe_device+0x4a/0x140 [ 66.186228][ T9] __device_attach_driver+0x1df/0x320 [ 66.187938][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 66.189787][ T9] bus_for_each_drv+0x159/0x1e0 [ 66.191315][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 66.193149][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 66.194779][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.196639][ T9] __device_attach+0x1e4/0x4d0 [ 66.198145][ T9] ? __pfx___device_attach+0x10/0x10 [ 66.199806][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.201563][ T9] device_initial_probe+0xaf/0xd0 [ 66.203169][ T9] bus_probe_device+0x64/0x160 [ 66.204707][ T9] device_add+0x121d/0x1970 [ 66.206194][ T9] ? __pfx_device_add+0x10/0x10 [ 66.207736][ T9] ? add_device_randomness+0xc9/0x110 [ 66.209414][ T9] usb_new_device.cold+0x685/0x115c [ 66.211175][ T9] ? _mutex_trylock_nest_lock+0x241/0x310 [ 66.212988][ T9] ? do_raw_spin_lock+0x128/0x260 [ 66.214564][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 66.216530][ T9] ? mark_held_locks+0x40/0x70 [ 66.218507][ T9] hub_event+0x30a3/0x4a60 [ 66.220434][ T9] ? __pfx_hub_event+0x10/0x10 [ 66.222314][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 66.224489][ T9] ? rcu_is_watching+0x12/0xc0 [ 66.226070][ T9] process_one_work+0xa23/0x1940 [ 66.227650][ T9] ? __pfx_process_one_work+0x10/0x10 [ 66.229338][ T9] ? __pfx_hub_event+0x10/0x10 [ 66.230854][ T9] worker_thread+0x5ef/0xe50 [ 66.232419][ T9] ? kthread+0x13a/0x450 [ 66.233830][ T9] ? __pfx_worker_thread+0x10/0x10 [ 66.235569][ T9] kthread+0x370/0x450 [ 66.236993][ T9] ? __pfx_kthread+0x10/0x10 [ 66.238586][ T9] ret_from_fork+0x72b/0xd50 [ 66.240063][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 66.241670][ T9] ? __switch_to+0x800/0x10f0 [ 66.243160][ T9] ? __pfx_kthread+0x10/0x10 [ 66.244636][ T9] ret_from_fork_asm+0x1a/0x30 [ 66.246385][ T9] [ 66.247986][ T9] Kernel Offset: disabled [ 66.249391][ T9] Rebooting in 86400 seconds..