last executing test programs: 6.087379225s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218240706610049000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, &(0x7f0000000340)) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, &(0x7f0000000440)) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f00000004c0)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, &(0x7f0000000540)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, r1, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0) 5.762303859s ago: executing program 0 (id=1): syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae82100010000000109023e00020100c0000904000003e00101000705810310000107050202400000070582024000000904010002e00101000705030100000107058301000001"], 0x0) nanosleep(&(0x7f0000000100)={0x1, 0x1dcd6500}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000210)={0x1f, 0x1, 0x1}, 0x6) sendto(r1, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 5.680129481s ago: executing program 3 (id=4): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB', {0x1, 0x0, 0x0, 0x6}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x100, 0x0, 0x1, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x101, 0x0, 0x2, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x102, 0x0, 0x3, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x103, 0x0, 0x4, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x104, 0x0, 0x5, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x105, 0x0, 0x6, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x106, 0x0, 0x1, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x107, 0x0, 0x2, 0x100}}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x108, 0x0, 0x3, 0x100}}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8b26, &(0x7f0000000400)="776c616e3000000000000000000000001000000001000000") ioctl(r1, 0x8b26, &(0x7f0000000440)="776c616e3100000000000000000000001000000001000000") ioctl(r1, 0x8b26, &(0x7f0000000480)="776c616e3200000000000000000000001000000001000000") 4.675678488s ago: executing program 2 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000010000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000011000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000012000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000014000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000015000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000016000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000017000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000018000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000019000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001a000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001b000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001e000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001f000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000020000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) read(r1, &(0x7f0000000800), 0x1000) 3.805770741s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='8\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='testdomain / 2147483647 0 0 0 0\n', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/test\x00', 0x42, 0x0) 3.322482199s ago: executing program 2 (id=10): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1, 0x2003}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) bind(r1, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 3.084762086s ago: executing program 2 (id=11): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x7c, &(0x7f0000000200)={0x40, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x7c, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x7c, &(0x7f0000000800)={0x40, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x7c, &(0x7f0000000a00)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x7c, &(0x7f0000000800)={0x40, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x7c, &(0x7f0000000a00)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x7c, &(0x7f0000000800)={0x40, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x7c, &(0x7f0000000a00)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) nanosleep(&(0x7f0000000b00)={0x3}, 0x0) 2.987213328s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)="0400000000000000000000003801000038010000") 2.977290151s ago: executing program 1 (id=14): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x0, @loopback}, 0xffffffffffffffff, 0x3e8}}, 0x48) 2.9052856s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='1\x00', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/spaces/lsname\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/spaces/lsname/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/spaces/lsname/nodes/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/kernel/uevent_helper\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='/dev/null\x00', 0xa) close(r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="0600000000000000020000000401000000000000000000006c736e616d6500"/113, 0x7f}], 0x1, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/dlm/lsname/event_done\x00', 0x2, 0x0) write(r7, &(0x7f0000000840)='1\x00', 0x1) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/lsname/control\x00', 0x2, 0x0) write(r8, &(0x7f00000008c0)='1\x00', 0x1) close(r8) 2.905117608s ago: executing program 1 (id=16): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x3}, {0xa, 0x0, 0x0, @empty}, r2, 0x3e8}}, 0x48) 2.901213535s ago: executing program 1 (id=23): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x0, @loopback}, 0xffffffffffffffff, 0x3e8}}, 0x48) 2.051031483s ago: executing program 0 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000003140500000000000000000009000200727865300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 2.050872933s ago: executing program 1 (id=18): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000010000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000011000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000012000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000014000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000015000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000016000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000017000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000018000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000019000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001a000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001b000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001e000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001f000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000020000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) read(r1, &(0x7f0000000800), 0x1000) 1.465868438s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='8\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='testdomain / 2147483647 0 0 0 0\n', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/test\x00', 0x42, 0x0) 1.159137588s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ceph\x00', 0x1ff) setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./ceph\x00', &(0x7f0000000400)='ceph\x00', 0x0, &(0x7f0000000500)='mount_timeout=1\x00') 875.934353ms ago: executing program 3 (id=21): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='mount_timeout=1\x00') 873.779761ms ago: executing program 1 (id=30): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001000)={0x2c, &(0x7f0000001100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x0, 0x0, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="757362300000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000300)="757362310000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000400)="757362320000000000000000000000000100"/40) (async) ioctl(r0, 0x8914, &(0x7f0000000500)="757362330000000000000000000000000100"/40) (async) 2.252624ms ago: executing program 3 (id=22): syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101405c0ae82100010000000109023e00020100c0000904000003e00101000705810310000107050202400000070582024000000904010002e00101000705030100000107058301000001"], 0x0) nanosleep(&(0x7f0000000100)={0x1, 0x1dcd6500}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x1}, 0x6) sendto(r0, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000210)={0x1f, 0x1, 0x1}, 0x6) sendto(r1, &(0x7f0000000300)="f100040000", 0x5, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write(r5, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/delete_controller\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='1\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53571' (ED25519) to the list of known hosts. [ 33.703650][ T5646] cgroup: Unknown subsys name 'net' [ 33.842288][ T5646] cgroup: Unknown subsys name 'cpuset' [ 33.847377][ T5646] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.831854][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.232601][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.236459][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.238459][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.247402][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.250598][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.257957][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.259685][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.260113][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.260990][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.261470][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.263441][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.267879][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.268401][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.268655][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.269480][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.270174][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.270634][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.272317][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.273441][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.286154][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.016896][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.019467][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.019694][ T5732] bridge_slave_0: entered allmulticast mode [ 40.021390][ T5732] bridge_slave_0: entered promiscuous mode [ 40.024336][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.024430][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.024545][ T5734] bridge_slave_0: entered allmulticast mode [ 40.026175][ T5734] bridge_slave_0: entered promiscuous mode [ 40.041285][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.041385][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.042231][ T5732] bridge_slave_1: entered allmulticast mode [ 40.043117][ T5732] bridge_slave_1: entered promiscuous mode [ 40.052323][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.052414][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.052525][ T5734] bridge_slave_1: entered allmulticast mode [ 40.053806][ T5734] bridge_slave_1: entered promiscuous mode [ 40.091861][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.094929][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.111817][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.114494][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.136158][ T5734] team0: Port device team_slave_0 added [ 40.136309][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.136383][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.136577][ T5735] bridge_slave_0: entered allmulticast mode [ 40.137724][ T5735] bridge_slave_0: entered promiscuous mode [ 40.148861][ T5734] team0: Port device team_slave_1 added [ 40.166227][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.166347][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.166429][ T5735] bridge_slave_1: entered allmulticast mode [ 40.167160][ T5735] bridge_slave_1: entered promiscuous mode [ 40.186386][ T5732] team0: Port device team_slave_0 added [ 40.205757][ T5732] team0: Port device team_slave_1 added [ 40.206674][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.206686][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.206700][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.219142][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.232223][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.232268][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.232316][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.245371][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.282758][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.282807][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.282854][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.287397][ T5735] team0: Port device team_slave_0 added [ 40.290773][ T5735] team0: Port device team_slave_1 added [ 40.291598][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.291698][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.292057][ T5733] bridge_slave_0: entered allmulticast mode [ 40.293657][ T5733] bridge_slave_0: entered promiscuous mode [ 40.295894][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.295910][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.295932][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.325550][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.325638][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.325988][ T5733] bridge_slave_1: entered allmulticast mode [ 40.327493][ T5733] bridge_slave_1: entered promiscuous mode [ 40.353657][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.353704][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.353746][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.369879][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.389130][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.389202][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.389257][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.392580][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.408359][ T5734] hsr_slave_0: entered promiscuous mode [ 40.409871][ T5734] hsr_slave_1: entered promiscuous mode [ 40.413468][ T5732] hsr_slave_0: entered promiscuous mode [ 40.414032][ T5732] hsr_slave_1: entered promiscuous mode [ 40.414407][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 40.414460][ T5732] Cannot create hsr debugfs directory [ 40.466496][ T5733] team0: Port device team_slave_0 added [ 40.468552][ T5733] team0: Port device team_slave_1 added [ 40.537376][ T5735] hsr_slave_0: entered promiscuous mode [ 40.538697][ T5735] hsr_slave_1: entered promiscuous mode [ 40.539677][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 40.539699][ T5735] Cannot create hsr debugfs directory [ 40.551028][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.551086][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.551157][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.564770][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.564791][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.564815][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.681301][ T5733] hsr_slave_0: entered promiscuous mode [ 40.681874][ T5733] hsr_slave_1: entered promiscuous mode [ 40.682231][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 40.682244][ T5733] Cannot create hsr debugfs directory [ 40.845956][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.859209][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.864230][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.871839][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.901978][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.910393][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.911104][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.917324][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.006282][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.011533][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.014171][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.021006][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.024874][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.033367][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.034406][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.040707][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.096188][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.102175][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.105844][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.112813][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.113514][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.119597][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.133428][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.142686][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.219209][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.219535][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.224519][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.225098][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.233304][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.234839][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.239575][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.241602][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.246001][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.267954][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.300442][ T5746] Bluetooth: hci0: command tx timeout [ 41.300455][ T5740] Bluetooth: hci3: command tx timeout [ 41.301092][ T63] Bluetooth: hci2: command tx timeout [ 41.311062][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.311312][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.317010][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.317104][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.368607][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.389113][ T63] Bluetooth: hci1: command tx timeout [ 41.390250][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.410574][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.437389][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.437506][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.440201][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.440315][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.446551][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.460349][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.460450][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.472818][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.472959][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.497317][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.528245][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.546563][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.546699][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.559150][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.559250][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.746994][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.794897][ T5732] veth0_vlan: entered promiscuous mode [ 41.802718][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.813069][ T5732] veth1_vlan: entered promiscuous mode [ 41.862368][ T5732] veth0_macvtap: entered promiscuous mode [ 41.864971][ T5732] veth1_macvtap: entered promiscuous mode [ 41.875574][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.877531][ T5735] veth0_vlan: entered promiscuous mode [ 41.890129][ T5735] veth1_vlan: entered promiscuous mode [ 41.894169][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.903431][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.927185][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.940822][ T5735] veth0_macvtap: entered promiscuous mode [ 41.953086][ T5735] veth1_macvtap: entered promiscuous mode [ 41.984872][ T5734] veth0_vlan: entered promiscuous mode [ 42.003496][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.013585][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.013647][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.014857][ T5734] veth1_vlan: entered promiscuous mode [ 42.036235][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.057173][ T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.057236][ T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.071857][ T5733] veth0_vlan: entered promiscuous mode [ 42.081740][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.083103][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.083316][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.083604][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.099575][ T5733] veth1_vlan: entered promiscuous mode [ 42.105059][ T5734] veth0_macvtap: entered promiscuous mode [ 42.161080][ T5734] veth1_macvtap: entered promiscuous mode [ 42.186806][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.186877][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.186944][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.206932][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.214824][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.220903][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.221743][ T5733] veth0_macvtap: entered promiscuous mode [ 42.230228][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.231041][ T5733] veth1_macvtap: entered promiscuous mode [ 42.244355][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.244861][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.244876][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.250970][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.265705][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.280973][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.288921][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.288987][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.289031][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.289052][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.299189][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.328265][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.328349][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.328447][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.328494][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.454342][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.454421][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.476736][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.476826][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.490822][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.499073][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.499480][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.500264][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.500284][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.505153][ T5889] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 42.505179][ T5889] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 42.505204][ T5889] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 42.507630][ T5889] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.517629][ T5889] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.528964][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.531892][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.531913][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.579185][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.640525][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.674485][ T42] audit: type=1800 audit(1788450434.536:2): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5" name="local" dev="configfs" ino=8591 res=0 errno=0 [ 42.948797][ T854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.998127][ T5157] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.109312][ T854] usb 5-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 43.111710][ T854] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 43.111731][ T854] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 43.111760][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.119446][ T5897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.119511][ T5897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.170157][ T5157] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.179023][ T5157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.179062][ T5157] usb 8-1: Product: syz [ 43.179147][ T5157] usb 8-1: Manufacturer: syz [ 43.179168][ T5157] usb 8-1: SerialNumber: syz [ 43.227405][ T5157] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 43.378182][ T5740] Bluetooth: hci2: command tx timeout [ 43.378492][ T5746] Bluetooth: hci3: command tx timeout [ 43.378949][ T5744] Bluetooth: hci0: command tx timeout [ 43.468180][ T5746] Bluetooth: hci1: command tx timeout [ 43.661445][ T5922] infiniband rxe0: set active [ 43.661499][ T5922] infiniband rxe0: added veth0 [ 43.673045][ T5922] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 43.673126][ T5922] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 43.673201][ T5922] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 43.710785][ T5922] RDS/IB: rxe0: added [ 43.715304][ T5922] smc: adding ib device rxe0 with port count 1 [ 43.715454][ T5922] smc: ib device rxe0 port 1 has no pnetid [ 43.869336][ T5936] virtio_blk virtio2: 1/0/0 default/read/poll queues [ 43.871364][ T5936] virtio_blk virtio2: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 43.874501][ T5940] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 44.047776][ T5939] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 44.048086][ T5943] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 44.048157][ T5948] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 44.114734][ T5928] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 44.115935][ T5928] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 44.678395][ T5965] NFSD: Failed to start, no listeners configured. [ 44.847360][ T63] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 44.855830][ T5831] usb 5-1: USB disconnect, device number 2 [ 45.060047][ T5986] Bluetooth: ISO socket layer initialized [ 45.232982][ T5858] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 45.242674][ T5952] ceph: No mds server is up or the cluster is laggy [ 45.443658][ T6006] rxe0: rxe_newlink: already configured on veth0 [ 45.458210][ T63] Bluetooth: hci3: command tx timeout [ 45.460046][ T5746] Bluetooth: hci2: command tx timeout [ 45.462861][ T42] audit: type=1800 audit(1788450437.326:3): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15" name="local" dev="configfs" ino=8644 res=0 errno=0 [ 45.498458][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.648278][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 45.649170][ T50] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 45.652686][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.655430][ T50] usb 7-1: config 0 descriptor?? [ 45.660900][ T50] usb 7-1: probing VID:PID(0424:012C) [ 45.662583][ T50] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 45.662600][ T50] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 45.662609][ T50] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 45.662619][ T50] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 45.662628][ T50] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 45.978943][ T5929] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.072230][ T50] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 46.273504][ T50] usb 7-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 46.369719][ T6027] rdma_rxe: rxe_newlink: failed to add veth0 [ 46.473618][ T6031] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 46.739337][ T5157] usb 8-1: Service connection timeout for: 262 [ 46.739406][ T5157] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 46.758464][ T5157] ath9k_htc: Failed to initialize the device [ 46.764575][ T5157] usb 8-1: ath9k_htc: USB layer deinitialized [ 46.823075][ T6029] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 46.823546][ T6033] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 46.823704][ T6035] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 46.938688][ T25] usb 8-1: USB disconnect, device number 2 [ 46.957289][ T6043] NFSD: Failed to start, no listeners configured. [ 47.148532][ T63] Bluetooth: hci1: command tx timeout [ 47.235626][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 47.239095][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 47.501980][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 47.538564][ T63] Bluetooth: hci3: command tx timeout [ 47.549068][ T63] Bluetooth: hci2: command tx timeout [ 47.748722][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.899790][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 47.900922][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.019712][ T5815] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 48.052572][ T6066] ceph: No mds server is up or the cluster is laggy [ 48.124008][ T10] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 46:cc:20:c4:54:7f [ 48.321508][ T5787] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 48.323727][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 48.323849][ T5721] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 48.324000][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 48.324266][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 48.324510][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 48.324594][ T6074] ceph: No mds server is up or the cluster is laggy [ 48.385422][ T6104] nvmet: adding nsid 1 to s ** replaying previous printk message ** [ 48.385422][ T6104] nvmet: adding nsid 1 to subsystem testnqn [ 48.387494][ T6104] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 48.395992][ T6104] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 48.399089][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 48.402139][ T6104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.406209][ T6104] RIP: 0010:strlen+0x1e/0xa0 [ 48.407939][ T6104] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 48.413941][ T6104] RSP: 0018:ffffc90002ec7b28 EFLAGS: 00010296 [ 48.416175][ T6104] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 48.419288][ T6104] RDX: 0000000000000000 RSI: ffffffff829532ee RDI: 0000000000000000 [ 48.422270][ T6104] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 48.424774][ T6104] R10: 0000000000000001 R11: 000000000000001f R12: 0000000000000000 [ 48.427269][ T6104] R13: 0000000000000000 R14: ffff888029acee10 R15: ffff88801328b800 [ 48.429875][ T6104] FS: 0000000000000000(0000) GS:ffff888096a67000(0063) knlGS:00000000f53c6b40 [ 48.432971][ T6104] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 48.435335][ T6104] CR2: 00000000f71eea77 CR3: 000000006d354000 CR4: 0000000000352ef0 [ 48.438515][ T6104] Call Trace: [ 48.439715][ T6104] [ 48.440734][ T6104] do_getname_kernel+0x26/0x250 [ 48.442364][ T6104] filp_open+0x1d/0x50 [ 48.443656][ T6104] nvmet_file_ns_enable+0x95/0x420 [ 48.445251][ T6104] nvmet_ns_enable+0x35f/0x5d0 [ 48.446745][ T6104] nvmet_ns_enable_store+0x11e/0x160 [ 48.448604][ T6104] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 48.451021][ T6104] ? configfs_write_iter+0x388/0x4e0 [ 48.453237][ T6104] configfs_write_iter+0x302/0x4e0 [ 48.455075][ T6104] vfs_write+0x6af/0x1050 [ 48.456471][ T6104] ? __pfx_configfs_write_iter+0x10/0x10 [ 48.458262][ T6104] ? __pfx_vfs_write+0x10/0x10 [ 48.459787][ T6104] ? find_held_lock+0x2b/0x80 [ 48.461291][ T6104] ksys_write+0x12a/0x250 [ 48.462818][ T6104] ? __pfx_ksys_write+0x10/0x10 [ 48.464818][ T6104] __do_fast_syscall_32+0x13a/0x8b0 [ 48.467043][ T6104] do_fast_syscall_32+0x32/0x70 [ 48.468864][ T6104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.469123][ T5787] usb 7-1: device descriptor read/64, error -32 [ 48.472943][ T6104] RIP: 0023:0xf7f03fec [ 48.474351][ T6104] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 48.476530][ T6104] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 48.479290][ T6104] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 48.481926][ T6104] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.484925][ T6104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.487851][ T6104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.490608][ T6104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.493153][ T6104] [ 48.494112][ T6104] Modules linked in: [ 48.495747][ T6104] ---[ end trace 0000000000000000 ]--- ** replaying previous printk message ** [ 48.497919][ T6104] RIP: 0010:strlen+0x1e/0xa0 [ 48.497964][ T6104] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 48.498082][ T6104] RSP: 0018:ffffc90002ec7b28 EFLAGS: 00010296 [ 48.498119][ T6104] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 48.498141][ T6104] RDX: 0000000000000000 RSI: ffffffff829532ee RDI: 0000000000000000 [ 48.498150][ T6104] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 48.498157][ T6104] R10: 0000000000000001 R11: 000000000000001f R12: 0000000000000000 [ 48.498164][ T6104] R13: 0000000000000000 R14: ffff888029acee10 R15: ffff88801328b800 [ 48.498172][ T6104] FS: 0000000000000000(0000) GS:ffff888096a67000(0063) knlGS:00000000f53c6b40 [ 48.498198][ T6104] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 48.498208][ T6104] CR2: 00000000f7f04000 CR3: 000000006d354000 CR4: 0000000000352ef0 [ 48.498217][ T6104] Kernel panic - not syncing: Fatal exception [ 48.535491][ T6104] Kernel Offset: disabled [ 48.537064][ T6104] Rebooting in 86400 seconds..