last executing test programs: 14.23013808s ago: executing program 2 (id=3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl(r1, 0x5423, &(0x7f0000000200)="01000000") r2 = socket$inet(0x2, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) write(r0, &(0x7f0000000500)="700000c0", 0x4) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 13.999844157s ago: executing program 0 (id=1): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000480)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000004c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000005c0)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000600)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000640)={0x2, 0x100}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x100}, 0x2) 13.22578662s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) 12.774360125s ago: executing program 2 (id=11): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040443322110000010203010902450001010080fa0904000003ff0000000705010200020007058102000200070586020002000904000103ff000000070501020002000705810200020007058602000200"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x409}}, {0x1c, &(0x7f0000001100)=@string={0x1c, 0x3, 'L\x00M\x00E\x002\x005\x001\x000\x00C\x00 \x00W\x00A\x00R\x00M\x00'}}, {0x11, &(0x7f0000001300)=@string={0x11, 0x3, '\x00'/15}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000)={0x0, &(0x7f0000003100)={0x80, 0x6, 0x11, "110300"/17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 10.360124146s ago: executing program 2 (id=18): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.287490229s ago: executing program 2 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/232, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 8.919723305s ago: executing program 3 (id=21): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101401111222200000102030109023e0002010080fa0904000003e00101000705810200020107050202000200070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r2, &(0x7f0000000280)="f100040000", 0x5) 8.799902536s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4\x00', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 8.785243837s ago: executing program 32 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='8009\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4\x00', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn\x00', 0x37) 6.73040929s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_nullb\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/power\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) 6.606341045s ago: executing program 3 (id=27): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) 6.549743234s ago: executing program 3 (id=28): syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./pcmC3D0p\x00', 0x81b6, 0x7440) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pcmC3D0p\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 5.390091739s ago: executing program 3 (id=31): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b113420000000102030109024a00010100c0fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000800)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)={0xc0, 0x3, 0xc, "0c0000000100020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000b00)={0x5}, 0x0) 4.15628855s ago: executing program 1 (id=34): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x0, 0x17d78400}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") read$hidraw(r1, &(0x7f0000000800), 0x9) (async) 2.839011611s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='xhci-hcd\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='serial8250\x00', 0xb) 2.758422687s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='800\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.343866708s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\x00', 0x6) 1.819265279s ago: executing program 4 (id=39): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x405, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000f00)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x24, 0x1402, 0x405, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x1}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r3, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r4, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r4, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e00)={0xc, 0x8, 0x150, {&(0x7f0000000f00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x120) 1.129707906s ago: executing program 1 (id=40): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x9, @pix_mp={0x100, 0x100, 0x0, 0x0, 0x0, [{0x10000, 0x100}], 0x1}}) 1.129383913s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r7, 0x0, 0x0, 0x100000) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='/dev/loop0\x00', 0xb) close(r9) 1.008088964s ago: executing program 1 (id=42): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/syz2\x00', 0x0, 0x0) 950.123537ms ago: executing program 4 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices/virtio0/virtio-ports/vport0p1/dev\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/256, 0x100) 949.965636ms ago: executing program 4 (id=44): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = socket(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) listen(r1, 0x1) 869.835718ms ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001020)='\x00\x00\x00\x00', 0x4, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:03.0\x00', 0xd) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 589.541394ms ago: executing program 4 (id=46): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000100)="d8000000d800000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/212) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/gracetime\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfs_mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000100)='127.0.0.1:/\x00', &(0x7f0000000140)='./nfs_mnt\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nolock,addr=127.0.0.1,vers=4,clientaddr=127.0.0.1']) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7586' (ED25519) to the list of known hosts. [ 41.074376][ T5716] cgroup: Unknown subsys name 'net' [ 41.200509][ T5716] cgroup: Unknown subsys name 'cpuset' [ 41.204446][ T5716] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.163913][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.063864][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.066128][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.067736][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.068282][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.068538][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.069435][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.069531][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.070238][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.070711][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.074443][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.077217][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.078731][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.079854][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.082788][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.087512][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.089726][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.090875][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.091578][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.094598][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.094749][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.750549][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.754270][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.757327][ T5743] bridge_slave_0: entered allmulticast mode [ 46.760469][ T5743] bridge_slave_0: entered promiscuous mode [ 46.765316][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.767706][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.770841][ T5743] bridge_slave_1: entered allmulticast mode [ 46.774539][ T5743] bridge_slave_1: entered promiscuous mode [ 46.842856][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.846551][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.849913][ T5756] bridge_slave_0: entered allmulticast mode [ 46.853441][ T5756] bridge_slave_0: entered promiscuous mode [ 46.864160][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.867170][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.869683][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.872021][ T5744] bridge_slave_0: entered allmulticast mode [ 46.874654][ T5744] bridge_slave_0: entered promiscuous mode [ 46.878052][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.880333][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.882639][ T5756] bridge_slave_1: entered allmulticast mode [ 46.885313][ T5756] bridge_slave_1: entered promiscuous mode [ 46.914272][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.922636][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.925465][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.928471][ T5744] bridge_slave_1: entered allmulticast mode [ 46.931232][ T5744] bridge_slave_1: entered promiscuous mode [ 46.948547][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.952026][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.954740][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.957038][ T5742] bridge_slave_0: entered allmulticast mode [ 46.960535][ T5742] bridge_slave_0: entered promiscuous mode [ 46.965312][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.968699][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.971415][ T5742] bridge_slave_1: entered allmulticast mode [ 46.974461][ T5742] bridge_slave_1: entered promiscuous mode [ 47.005489][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.021818][ T5743] team0: Port device team_slave_0 added [ 47.025562][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.036677][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.042257][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.046921][ T5743] team0: Port device team_slave_1 added [ 47.051787][ T5756] team0: Port device team_slave_0 added [ 47.055270][ T5756] team0: Port device team_slave_1 added [ 47.064531][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.103191][ T5744] team0: Port device team_slave_0 added [ 47.111185][ T5744] team0: Port device team_slave_1 added [ 47.123082][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.125766][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.135718][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.141988][ T5742] team0: Port device team_slave_0 added [ 47.144235][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.147080][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.156287][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.166572][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.169318][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.179141][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.184551][ T5742] team0: Port device team_slave_1 added [ 47.187379][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.189576][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.197303][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.226846][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.229874][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.240452][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.268306][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.271207][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.280734][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.286148][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.288997][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.297774][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.317569][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.320090][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.328793][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.348070][ T5743] hsr_slave_0: entered promiscuous mode [ 47.350400][ T5743] hsr_slave_1: entered promiscuous mode [ 47.360486][ T5756] hsr_slave_0: entered promiscuous mode [ 47.364059][ T5756] hsr_slave_1: entered promiscuous mode [ 47.366153][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 47.368228][ T5756] Cannot create hsr debugfs directory [ 47.426677][ T5744] hsr_slave_0: entered promiscuous mode [ 47.429109][ T5744] hsr_slave_1: entered promiscuous mode [ 47.431216][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 47.433022][ T5744] Cannot create hsr debugfs directory [ 47.456454][ T5742] hsr_slave_0: entered promiscuous mode [ 47.458800][ T5742] hsr_slave_1: entered promiscuous mode [ 47.460819][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 47.462607][ T5742] Cannot create hsr debugfs directory [ 47.684001][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.691403][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.694146][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.699248][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.702010][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.706517][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.716851][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.721423][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.760521][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.766365][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.769721][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.775683][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.778816][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.785310][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.789288][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.792993][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.842572][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.847012][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.850247][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.855815][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.859977][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.865532][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.870848][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.876961][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.950132][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.954316][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.957188][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.962007][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.964755][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.969201][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.971960][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.976493][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.990622][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.030004][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.041242][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.053532][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.056370][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.068545][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.076144][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.079111][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.093687][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.096480][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.114586][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.116811][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.138590][ T5752] Bluetooth: hci3: command tx timeout [ 48.138593][ T5746] Bluetooth: hci0: command tx timeout [ 48.138819][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.148029][ T5752] Bluetooth: hci1: command tx timeout [ 48.148042][ T5746] Bluetooth: hci2: command tx timeout [ 48.177356][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.197404][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.205804][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.208664][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.223841][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.226700][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.248943][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.268780][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.271082][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.277094][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.280153][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.516525][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.573600][ T5743] veth0_vlan: entered promiscuous mode [ 48.585365][ T5743] veth1_vlan: entered promiscuous mode [ 48.601840][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.606764][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.615878][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.650993][ T5743] veth0_macvtap: entered promiscuous mode [ 48.656441][ T5743] veth1_macvtap: entered promiscuous mode [ 48.688770][ T5744] veth0_vlan: entered promiscuous mode [ 48.696672][ T5756] veth0_vlan: entered promiscuous mode [ 48.700209][ T5742] veth0_vlan: entered promiscuous mode [ 48.707365][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.713130][ T5756] veth1_vlan: entered promiscuous mode [ 48.716336][ T5744] veth1_vlan: entered promiscuous mode [ 48.725103][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.735398][ T5742] veth1_vlan: entered promiscuous mode [ 48.768796][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.799092][ T5756] veth0_macvtap: entered promiscuous mode [ 48.804712][ T5742] veth0_macvtap: entered promiscuous mode [ 48.811385][ T5756] veth1_macvtap: entered promiscuous mode [ 48.821411][ T5744] veth0_macvtap: entered promiscuous mode [ 48.824605][ T5742] veth1_macvtap: entered promiscuous mode [ 48.831558][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.836498][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.853944][ T5744] veth1_macvtap: entered promiscuous mode [ 48.860682][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.868352][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.870824][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.880795][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.888391][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.895468][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.906494][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.915276][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.923124][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.931955][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.938368][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.943030][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.954841][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.041577][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.044993][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.057665][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.062137][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.075340][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.077791][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.087588][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.090464][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.093486][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.093706][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.125943][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129832][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.157453][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.161447][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.171191][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.177312][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.181470][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.187521][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.190885][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208422][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.213802][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.220164][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.238739][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.243160][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.250901][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.268929][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276474][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351038][ T5904] lo speed is unknown, defaulting to 1000 [ 49.362222][ T5904] lo speed is unknown, defaulting to 1000 [ 49.366864][ T5904] lo speed is unknown, defaulting to 1000 [ 49.393243][ T5905] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 49.424489][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 49.432479][ T82] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 49.437615][ T1164] (NULL device *): queue 0 connect admin queue failed (-6). [ 49.440549][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 49.443139][ T1164] nvme nvme0: NVME-FC{0}: Max reconnect attempts (1) reached. [ 49.446256][ T82] nvme nvme0: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 49.450033][ T5905] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:52c098a3-d524-4544-a744-45bf8938ee5a [ 49.474904][ T5904] infiniband syz0: set active [ 49.477550][ T5843] lo speed is unknown, defaulting to 1000 [ 49.477925][ T5904] infiniband syz0: added lo [ 49.491941][ T5904] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 49.497141][ T5904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 49.504069][ T5904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 49.505737][ T5843] IPVS: starting estimator thread 0... [ 49.538481][ T5904] RDS/IB: syz0: added [ 49.540339][ T5904] smc: adding ib device syz0 with port count 1 [ 49.545694][ T5904] smc: ib device syz0 port 1 has no pnetid [ 49.549463][ T9] lo speed is unknown, defaulting to 1000 [ 49.552026][ T5904] lo speed is unknown, defaulting to 1000 [ 49.568250][ T34] psmouse serio2: Failed to reset mouse on : -5 [ 49.598034][ T5921] IPVS: using max 43 ests per chain, 103200 per kthread [ 49.645810][ T5904] lo speed is unknown, defaulting to 1000 [ 49.743618][ T5904] lo speed is unknown, defaulting to 1000 [ 49.833961][ T5904] lo speed is unknown, defaulting to 1000 [ 49.926506][ T5923] rdma_rxe: rxe_newlink: failed to add veth0 [ 50.042915][ T5928] NFSD: Failed to start, no listeners configured. [ 50.070015][ T5934] e1000e 0000:00:02.0 eth1: removed PHC [ 50.193612][ T5934] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.218711][ T5746] Bluetooth: hci1: command tx timeout [ 50.219640][ T5752] Bluetooth: hci3: command tx timeout [ 50.220175][ T5759] Bluetooth: hci2: command tx timeout [ 50.220198][ T5759] Bluetooth: hci0: command tx timeout [ 50.568111][ T60] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 50.607663][ T5958] lo speed is unknown, defaulting to 1000 [ 50.611133][ T5958] lo speed is unknown, defaulting to 1000 [ 50.614433][ T5958] lo speed is unknown, defaulting to 1000 [ 50.616725][ T5958] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.621676][ T5958] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.627299][ T5958] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.636154][ T5958] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.644427][ T5958] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.661406][ T5958] lo speed is unknown, defaulting to 1000 [ 50.665684][ T5958] lo speed is unknown, defaulting to 1000 [ 50.667724][ T42] audit: type=1800 audit(1785864561.379:2): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="attr_allow_any_host" dev="configfs" ino=7901 res=0 errno=0 [ 50.671038][ T5962] nvmet: adding nsid 1 to subsystem testnqn [ 50.671766][ T5958] lo speed is unknown, defaulting to 1000 [ 50.673136][ T5958] lo speed is unknown, defaulting to 1000 [ 50.706905][ T42] audit: type=1800 audit(1785864561.419:3): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="device_path" dev="configfs" ino=9042 res=0 errno=0 [ 50.714984][ T42] audit: type=1800 audit(1785864561.419:4): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="enable" dev="configfs" ino=7902 res=0 errno=0 [ 50.720061][ T5958] nvmet_rdma: enabling port 1 (127.0.0.1:4421) [ 50.722110][ T42] audit: type=1800 audit(1785864561.419:5): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="addr_trtype" dev="configfs" ino=7908 res=0 errno=0 [ 50.722143][ T42] audit: type=1800 audit(1785864561.419:6): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="addr_adrfam" dev="configfs" ino=7909 res=0 errno=0 [ 50.722172][ T42] audit: type=1800 audit(1785864561.439:7): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="addr_traddr" dev="configfs" ino=7910 res=0 errno=0 [ 50.722200][ T42] audit: type=1800 audit(1785864561.439:8): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="addr_trsvcid" dev="configfs" ino=7911 res=0 errno=0 [ 50.727994][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.733920][ T60] usb 8-1: unable to get BOS descriptor or descriptor too short [ 50.758708][ T60] usb 8-1: not running at top speed; connect to a high speed hub [ 50.769688][ T60] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 50.772528][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.775051][ T60] usb 8-1: Product: syz [ 50.776364][ T60] usb 8-1: Manufacturer: syz [ 50.776766][ T13] nvme nvme0: rdma_resolve_route failed (-110). [ 50.777821][ T60] usb 8-1: SerialNumber: syz [ 50.785406][ T5958] nvme nvme0: rdma connection establishment failed (-19) [ 50.856309][ T5971] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 50.896979][ T9] usb 7-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 50.901043][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.904313][ T9] usb 7-1: Manufacturer: LME2510C WARM [ 50.914316][ T59] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 50.920454][ T1164] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 50.923573][ T59] (NULL device *): queue 0 connect admin queue failed (-6). [ 50.926457][ T59] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 50.929648][ T59] nvme nvme0: NVME-FC{0}: Max reconnect attempts (1) reached. [ 50.932821][ T59] nvme nvme0: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 50.933353][ T5971] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:52c098a3-d524-4544-a744-45bf8938ee5a [ 52.018956][ T1042] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 52.019084][ T60] usb 8-1: 1:1: cannot set freq 44100 to ep 0x1 [ 52.026141][ T60] usb 8-1: 2:1: cannot set freq 44100 to ep 0x82 [ 52.031851][ T60] usb 8-1: 2:0: failed to get current value for ch 0 (-22) [ 52.065348][ T60] usb 8-1: USB disconnect, device number 2 [ 52.102043][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 52.118062][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 52.179877][ T1042] usb 6-1: not running at top speed; connect to a high speed hub [ 52.183608][ T1042] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 52.186425][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.195942][ T1042] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 002 [ 52.298000][ T5752] Bluetooth: hci3: command tx timeout [ 52.298082][ T5755] Bluetooth: hci2: command tx timeout [ 52.301277][ T5752] Bluetooth: hci1: command tx timeout [ 52.302444][ T5746] Bluetooth: hci0: command tx timeout [ 52.331475][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 52.331536][ T9] dvb_usb_lmedm04 7-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 52.339553][ T9] usb 7-1: USB disconnect, device number 2 [ 52.668884][ T6009] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 53.748072][ T6008] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.751128][ T6008] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.755727][ T6008] NFSD: starting 90-second grace period (net f0000503) [ 54.388817][ T5755] Bluetooth: hci0: command tx timeout [ 54.390497][ T5755] Bluetooth: hci3: command tx timeout [ 54.392286][ T5746] Bluetooth: hci2: command tx timeout [ 54.405604][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.459217][ T1042] (null): failure reading functionality [ 54.462856][ T1042] i2c i2c-2: failure reading functionality [ 54.469842][ T1042] i2c i2c-2: connected i2c-tiny-usb device [ 54.502857][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.518974][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.522542][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.525943][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.530217][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.533574][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.548410][ T5532] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.571415][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.608400][ T1042] usb 6-1: USB disconnect, device number 2 [ 54.644736][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.712242][ T6024] lo speed is unknown, defaulting to 1000 [ 54.733774][ T5532] usb 8-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 0.00 [ 54.736712][ T5532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.739720][ T5532] usb 8-1: Product: syz [ 54.742798][ T5532] usb 8-1: Manufacturer: syz [ 54.744324][ T5532] usb 8-1: SerialNumber: syz [ 54.775320][ T13] bridge_slave_1: left allmulticast mode [ 54.778648][ T13] bridge_slave_1: left promiscuous mode [ 54.783016][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.804725][ T13] bridge_slave_0: left allmulticast mode [ 54.806610][ T13] bridge_slave_0: left promiscuous mode [ 54.809701][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.932678][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.938218][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.942136][ T13] bond0 (unregistering): Released all slaves [ 54.948752][ T6024] lo speed is unknown, defaulting to 1000 [ 55.126539][ T5455] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.212914][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.215327][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.217775][ T6024] bridge_slave_0: entered allmulticast mode [ 55.220684][ T6024] bridge_slave_0: entered promiscuous mode [ 55.224135][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.226459][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.229030][ T6024] bridge_slave_1: entered allmulticast mode [ 55.231717][ T6024] bridge_slave_1: entered promiscuous mode [ 55.249275][ T6052] lo speed is unknown, defaulting to 1000 [ 55.260305][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.265935][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.306691][ T6024] team0: Port device team_slave_0 added [ 55.310869][ T6024] team0: Port device team_slave_1 added [ 55.327905][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.329917][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.337110][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.342543][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.344894][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.352658][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.361849][ T6052] lo speed is unknown, defaulting to 1000 [ 55.431452][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.470726][ T6024] hsr_slave_0: entered promiscuous mode [ 55.473943][ T6024] hsr_slave_1: entered promiscuous mode [ 55.476887][ T6024] debugfs: 'hsr0' already exists in 'hsr' [ 55.487998][ T6024] Cannot create hsr debugfs directory [ 55.498156][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 55.508046][ T13] hsr_slave_0: left promiscuous mode [ 55.510382][ T13] hsr_slave_1: left promiscuous mode [ 55.512428][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.514804][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.518468][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.520901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.527566][ T13] veth1_macvtap: left promiscuous mode [ 55.530035][ T13] veth0_macvtap: left promiscuous mode [ 55.531919][ T13] veth1_vlan: left promiscuous mode [ 55.533622][ T13] veth0_vlan: left promiscuous mode [ 55.684652][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.695968][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.944442][ T6024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.949169][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.951984][ T6024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.956438][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.959191][ T6024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.964012][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.966688][ T6024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.971511][ T6024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.975253][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.989954][ T5755] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 55.993456][ T40] usb 8-1: USB disconnect, device number 3 [ 56.033843][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.049081][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.056079][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.058916][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.065422][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.067677][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.149841][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.178184][ T5532] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.306726][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.330188][ T5532] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.333625][ T5532] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 56.340610][ T5532] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 56.343491][ T5532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.345915][ T5532] usb 6-1: Product: syz [ 56.347400][ T5532] usb 6-1: Manufacturer: syz [ 56.349320][ T5532] usb 6-1: SerialNumber: syz [ 56.357652][ T5532] port100 6-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 56.472659][ T6024] veth0_vlan: entered promiscuous mode [ 56.480782][ T6024] veth1_vlan: entered promiscuous mode [ 56.496846][ T6024] veth0_macvtap: entered promiscuous mode [ 56.502922][ T6024] veth1_macvtap: entered promiscuous mode [ 56.512255][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.517239][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.538193][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.542253][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.566280][ T42] audit: type=1800 audit(1785864567.279:9): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26" name="power" dev="configfs" ino=12296 res=0 errno=0 [ 56.575947][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.579543][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.588541][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.591128][ T6108] null_blk: disk my_nullb created [ 56.592471][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.607615][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.610673][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.619112][ T5755] Bluetooth: hci1: command tx timeout [ 56.908044][ T61] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.947937][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 57.071013][ T61] usb 8-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 57.074253][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.076765][ T61] usb 8-1: Product: syz [ 57.078287][ T61] usb 8-1: Manufacturer: syz [ 57.079767][ T61] usb 8-1: SerialNumber: syz [ 57.100029][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 57.103120][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.113384][ T9] snd-ua101 9-1:1.0: invalid num_altsetting [ 57.164273][ T6118] digital: digital_start_poll: Unknown protocol [ 57.324073][ T61] usb 8-1: USB disconnect, device number 4 [ 57.352018][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.068359][ T5830] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.220166][ T5830] usb 8-1: config index 0 descriptor too short (expected 74, got 18) [ 58.222947][ T5830] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 58.228953][ T5830] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 58.232008][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.234607][ T5830] usb 8-1: Product: syz [ 58.235976][ T5830] usb 8-1: Manufacturer: syz [ 58.237589][ T5830] usb 8-1: SerialNumber: syz [ 58.248679][ T5830] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 58.648507][ T13] usb 8-1: Unsupported hardware version: 0x5020001 [ 58.651663][ T13] usb 8-1: could not get hw params (-22) [ 58.653501][ T13] usb 8-1: could not probe fw (-22) [ 58.698021][ T5755] Bluetooth: hci1: command tx timeout [ 58.918690][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 58.920806][ T24] usb 6-1: USB disconnect, device number 3 [ 58.963301][ T6134] kAFS: unable to lookup cell 'foosyz' [ 59.437975][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.609257][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 59.612245][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.355627][ T845] usb 9-1: USB disconnect, device number 2 [ 60.777905][ T5755] Bluetooth: hci1: command tx timeout [ 60.854677][ T5532] usb 8-1: USB disconnect, device number 5 [ 60.892774][ T6155] PM: suspend entry (s2idle) [ 60.966685][ T13] Filesystems sync: 0.063 seconds [ 61.726020][ T6155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.728953][ T6155] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.736787][ T6155] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.741004][ T6155] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.743243][ T6155] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.747031][ T6155] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.751851][ T6155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.756284][ T6155] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.761584][ T6155] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.072669][ T24] usbhid 6-1:1.0: can't add hid device: -71 [ 62.074608][ T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 62.084071][ T24] usb 6-1: USB disconnect, device number 4 [ 62.144295][ T42] audit: type=1800 audit(1785864572.859:10): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="ipv4_address" dev="configfs" ino=11389 res=0 errno=0 [ 62.153156][ T42] audit: type=1800 audit(1785864572.869:11): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="ipv4_port" dev="configfs" ino=12448 res=0 errno=0 [ 62.161344][ T42] audit: type=1800 audit(1785864572.869:12): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="num" dev="configfs" ino=12449 res=0 errno=0 [ 62.168351][ T42] audit: type=1800 audit(1785864572.869:13): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="local" dev="configfs" ino=12450 res=0 errno=0 [ 62.177016][ T42] audit: type=1800 audit(1785864572.869:14): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="block_bytes" dev="configfs" ino=12458 res=0 errno=0 [ 62.185987][ T42] audit: type=1800 audit(1785864572.879:15): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="blocks" dev="configfs" ino=12459 res=0 errno=0 [ 62.194373][ T42] audit: type=1800 audit(1785864572.879:16): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="start_block" dev="configfs" ino=12460 res=0 errno=0 [ 62.201993][ T42] audit: type=1800 audit(1785864572.889:17): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="dev" dev="configfs" ino=12461 res=0 errno=0 [ 62.221233][ T6170] rdma_rxe: rxe_newlink: failed to add lo [ 62.308091][ T34] misc userio: Buffer overflowed, userio client isn't keeping up [ 62.323720][ T6175] Bluetooth: ISO socket layer initialized [ 62.868029][ T1042] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.020774][ T1042] usb 9-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice= 0.00 [ 63.023775][ T1042] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.026346][ T1042] usb 9-1: Product: syz [ 63.027681][ T1042] usb 9-1: Manufacturer: syz [ 63.029290][ T1042] usb 9-1: SerialNumber: syz [ 63.038569][ T1042] smsusb:smsusb_probe: board id=3, interface number 0 [ 63.043928][ T1042] smsusb:siano_media_device_register: media controller created [ 63.097930][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.817992][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.818080][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.058090][ T1042] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 64.061532][ T1042] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 64.064555][ T1042] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 64.070137][ T1042] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 64.073335][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.077091][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.080185][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.082964][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.085344][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.088571][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.091549][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.094384][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.097167][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.099844][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 64.103904][ T1042] ------------[ cut here ]------------ [ 64.105643][ T1042] !PageLargeKmalloc(page) [ 64.105655][ T1042] WARNING: mm/slub.c:6602 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:2/1042 [ 64.110466][ T1042] Modules linked in: [ 64.112101][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 64.115032][ T1042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.118460][ T1042] Workqueue: usb_hub_wq hub_event [ 64.120081][ T1042] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 64.121899][ T1042] Code: 28 90 0f 0b 90 80 3d 85 a6 9d 0e 00 0f 84 47 70 b7 fe 48 8b 74 24 28 48 89 ef e8 7c 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 93 52 19 8e 5b 5d 41 5c 41 [ 64.128386][ T1042] RSP: 0000:ffffc9000610ed80 EFLAGS: 00010202 [ 64.130282][ T1042] RAX: 00000000000000ff RBX: ffffea0001c77880 RCX: 000000000000002e [ 64.132768][ T1042] RDX: 0000000000000000 RSI: ffff888071de2000 RDI: ffffea0001c77880 [ 64.135096][ T1042] RBP: ffff888071de2000 R08: 0000000000000005 R09: 0000000000000000 [ 64.137539][ T1042] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888027113000 SYZFAIL: failed to recv rpc [ 64.140149][ T1042] R13: ffff888027112000 R14: dffffc0000000000 R15: ffff8880271130f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.142691][ T1042] FS: 0000000000000000(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 64.145492][ T1042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.147542][ T1042] CR2: 000000000c2f75d3 CR3: 000000006646d000 CR4: 0000000000352ef0 [ 64.150246][ T1042] Call Trace: [ 64.151346][ T1042] [ 64.152258][ T1042] usb_free_urb.part.0+0xf8/0x110 [ 64.153782][ T1042] usb_free_urb+0x1f/0x30 [ 64.155162][ T1042] smsusb_term_device+0x108/0x200 [ 64.156959][ T1042] smsusb_init_device+0xb4e/0xbb0 [ 64.158721][ T1042] ? __pfx_smsusb_init_device+0x10/0x10 [ 64.160470][ T1042] ? kfree+0x1e5/0x6c0 [ 64.161788][ T1042] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 64.163533][ T1042] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 64.165241][ T1042] smsusb_probe+0xd7f/0xe1f [ 64.166834][ T1042] ? __pfx_smsusb_probe+0x10/0x10 [ 64.168470][ T1042] ? mark_held_locks+0x40/0x70 [ 64.170054][ T1042] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.171926][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.173741][ T1042] ? __pm_runtime_set_status+0x13c/0x970 [ 64.175875][ T1042] usb_probe_interface+0x303/0x8f0 [ 64.177501][ T1042] ? __pfx_usb_probe_interface+0x10/0x10 [ 64.179355][ T1042] really_probe+0x241/0xa60 [ 64.180827][ T1042] __driver_probe_device+0x20e/0x450 [ 64.182488][ T1042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.184359][ T1042] driver_probe_device+0x4a/0x140 [ 64.185960][ T1042] __device_attach_driver+0x1df/0x320 [ 64.187668][ T1042] ? __pfx___device_attach_driver+0x10/0x10 [ 64.189615][ T1042] bus_for_each_drv+0x159/0x1e0 [ 64.191227][ T1042] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.192958][ T1042] ? lockdep_hardirqs_on+0x78/0x100 [ 64.194601][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.196449][ T1042] __device_attach+0x1e4/0x4d0 [ 64.198098][ T1042] ? __pfx___device_attach+0x10/0x10 [ 64.199783][ T1042] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.201632][ T1042] device_initial_probe+0xaf/0xd0 [ 64.203232][ T1042] bus_probe_device+0x64/0x160 [ 64.204752][ T1042] device_add+0x121d/0x1970 [ 64.206192][ T1042] ? __pfx_device_add+0x10/0x10 [ 64.207746][ T1042] ? mark_held_locks+0x40/0x70 [ 64.209330][ T1042] usb_set_configuration+0xd97/0x1c60 [ 64.211384][ T1042] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 64.213571][ T1042] usb_generic_driver_probe+0xa1/0xe0 [ 64.215294][ T1042] usb_probe_device+0xef/0x400 [ 64.216827][ T1042] ? __pfx_usb_probe_device+0x10/0x10 [ 64.218581][ T1042] really_probe+0x241/0xa60 [ 64.220049][ T1042] __driver_probe_device+0x20e/0x450 [ 64.221761][ T1042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.223640][ T1042] driver_probe_device+0x4a/0x140 [ 64.225237][ T1042] __device_attach_driver+0x1df/0x320 [ 64.226942][ T1042] ? __pfx___device_attach_driver+0x10/0x10 [ 64.228926][ T1042] bus_for_each_drv+0x159/0x1e0 [ 64.230477][ T1042] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.232195][ T1042] ? lockdep_hardirqs_on+0x78/0x100 [ 64.233850][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.235709][ T1042] __device_attach+0x1e4/0x4d0 [ 64.237229][ T1042] ? __pfx___device_attach+0x10/0x10 [ 64.238975][ T1042] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.240635][ T1042] device_initial_probe+0xaf/0xd0 [ 64.242269][ T1042] bus_probe_device+0x64/0x160 [ 64.243803][ T1042] device_add+0x121d/0x1970 [ 64.245249][ T1042] ? __pfx_device_add+0x10/0x10 [ 64.246724][ T1042] ? add_device_randomness+0xc9/0x110 [ 64.248423][ T1042] usb_new_device.cold+0x685/0x115c [ 64.249991][ T1042] ? _mutex_trylock_nest_lock+0x241/0x310 [ 64.251828][ T1042] ? do_raw_spin_lock+0x128/0x260 [ 64.253436][ T1042] ? __pfx_usb_new_device+0x10/0x10 [ 64.255097][ T1042] ? mark_held_locks+0x40/0x70 [ 64.256631][ T1042] hub_event+0x30a3/0x4a60 [ 64.258129][ T1042] ? __pfx_hub_event+0x10/0x10 [ 64.259665][ T1042] ? debug_object_deactivate+0x2e4/0x3b0 [ 64.261464][ T1042] ? rcu_is_watching+0x12/0xc0 [ 64.262985][ T1042] process_one_work+0xa23/0x1940 [ 64.264552][ T1042] ? __pfx_process_one_work+0x10/0x10 [ 64.266247][ T1042] ? __pfx_hub_event+0x10/0x10 [ 64.267791][ T1042] worker_thread+0x5ef/0xe50 [ 64.269323][ T1042] ? kthread+0x13a/0x450 [ 64.270674][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 64.272329][ T1042] kthread+0x370/0x450 [ 64.273638][ T1042] ? __pfx_kthread+0x10/0x10 [ 64.275114][ T1042] ret_from_fork+0x72b/0xd50 [ 64.276590][ T1042] ? __pfx_ret_from_fork+0x10/0x10 [ 64.278251][ T1042] ? __switch_to+0x800/0x10f0 [ 64.279675][ T1042] ? __pfx_kthread+0x10/0x10 [ 64.281180][ T1042] ret_from_fork_asm+0x1a/0x30 [ 64.282726][ T1042] [ 64.283744][ T1042] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.286021][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 64.288937][ T1042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.292110][ T1042] Workqueue: usb_hub_wq hub_event [ 64.293715][ T1042] Call Trace: [ 64.294787][ T1042] [ 64.295752][ T1042] dump_stack_lvl+0x100/0x190 [ 64.297249][ T1042] vpanic+0x552/0x970 [ 64.298530][ T1042] ? __pfx_vpanic+0x10/0x10 [ 64.299983][ T1042] panic+0xd1/0xe0 [ 64.301213][ T1042] ? __pfx_panic+0x10/0x10 [ 64.302634][ T1042] ? check_panic_on_warn+0x1f/0x90 [ 64.304266][ T1042] check_panic_on_warn.cold+0x19/0x34 [ 64.305957][ T1042] ? free_large_kmalloc+0xbf/0x100 [ 64.307590][ T1042] __warn.cold+0x191/0x318 [ 64.309009][ T1042] __report_bug+0x30f/0x440 [ 64.310451][ T1042] ? free_large_kmalloc+0xbf/0x100 [ 64.312107][ T1042] ? __pfx___report_bug+0x10/0x10 [ 64.313698][ T1042] ? __device_attach+0x1e4/0x4d0 [ 64.315276][ T1042] ? device_initial_probe+0xaf/0xd0 [ 64.316921][ T1042] ? bus_probe_device+0x64/0x160 [ 64.318492][ T1042] ? device_add+0x121d/0x1970 [ 64.319991][ T1042] ? usb_new_device.cold+0x685/0x115c [ 64.321729][ T1042] ? hub_event+0x30a3/0x4a60 [ 64.323213][ T1042] ? process_one_work+0xa23/0x1940 [ 64.324856][ T1042] ? worker_thread+0x5ef/0xe50 [ 64.326377][ T1042] ? kthread+0x370/0x450 [ 64.327740][ T1042] ? ret_from_fork+0x72b/0xd50 [ 64.329262][ T1042] ? ret_from_fork_asm+0x1a/0x30 [ 64.330836][ T1042] ? find_held_lock+0x2b/0x80 [ 64.332385][ T1042] ? smscore_unregister_device+0x537/0x7f0 [ 64.334222][ T1042] ? smscore_unregister_device+0x537/0x7f0 [ 64.336069][ T1042] ? free_large_kmalloc+0xbf/0x100 [ 64.337691][ T1042] report_bug+0xb2/0x220 [ 64.339057][ T1042] ? free_large_kmalloc+0xbf/0x100 [ 64.341006][ T1042] handle_bug+0x16a/0x2a0 [ 64.342457][ T1042] exc_invalid_op+0x17/0x50 [ 64.343917][ T1042] asm_exc_invalid_op+0x1a/0x20 [ 64.345750][ T1042] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 64.347931][ T1042] Code: 28 90 0f 0b 90 80 3d 85 a6 9d 0e 00 0f 84 47 70 b7 fe 48 8b 74 24 28 48 89 ef e8 7c 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 93 52 19 8e 5b 5d 41 5c 41 [ 64.354054][ T1042] RSP: 0000:ffffc9000610ed80 EFLAGS: 00010202 [ 64.355968][ T1042] RAX: 00000000000000ff RBX: ffffea0001c77880 RCX: 000000000000002e [ 64.358459][ T1042] RDX: 0000000000000000 RSI: ffff888071de2000 RDI: ffffea0001c77880 [ 64.360946][ T1042] RBP: ffff888071de2000 R08: 0000000000000005 R09: 0000000000000000 [ 64.363443][ T1042] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888027113000 [ 64.366465][ T1042] R13: ffff888027112000 R14: dffffc0000000000 R15: ffff8880271130f0 [ 64.369331][ T1042] usb_free_urb.part.0+0xf8/0x110 [ 64.370930][ T1042] usb_free_urb+0x1f/0x30 [ 64.372307][ T1042] smsusb_term_device+0x108/0x200 [ 64.373900][ T1042] smsusb_init_device+0xb4e/0xbb0 [ 64.375497][ T1042] ? __pfx_smsusb_init_device+0x10/0x10 [ 64.377233][ T1042] ? kfree+0x1e5/0x6c0 [ 64.378527][ T1042] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 64.380273][ T1042] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 64.382015][ T1042] smsusb_probe+0xd7f/0xe1f [ 64.383467][ T1042] ? __pfx_smsusb_probe+0x10/0x10 [ 64.385058][ T1042] ? mark_held_locks+0x40/0x70 [ 64.386568][ T1042] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.388387][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.390524][ T1042] ? __pm_runtime_set_status+0x13c/0x970 [ 64.392555][ T1042] usb_probe_interface+0x303/0x8f0 [ 64.394616][ T1042] ? __pfx_usb_probe_interface+0x10/0x10 [ 64.396446][ T1042] really_probe+0x241/0xa60 [ 64.397893][ T1042] __driver_probe_device+0x20e/0x450 [ 64.399563][ T1042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.401447][ T1042] driver_probe_device+0x4a/0x140 [ 64.403058][ T1042] __device_attach_driver+0x1df/0x320 [ 64.404751][ T1042] ? __pfx___device_attach_driver+0x10/0x10 [ 64.406606][ T1042] bus_for_each_drv+0x159/0x1e0 [ 64.408155][ T1042] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.409848][ T1042] ? lockdep_hardirqs_on+0x78/0x100 [ 64.411525][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.413362][ T1042] __device_attach+0x1e4/0x4d0 [ 64.414893][ T1042] ? __pfx___device_attach+0x10/0x10 [ 64.416556][ T1042] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.418198][ T1042] device_initial_probe+0xaf/0xd0 [ 64.419797][ T1042] bus_probe_device+0x64/0x160 [ 64.421317][ T1042] device_add+0x121d/0x1970 [ 64.422755][ T1042] ? __pfx_device_add+0x10/0x10 [ 64.424303][ T1042] ? mark_held_locks+0x40/0x70 [ 64.425827][ T1042] usb_set_configuration+0xd97/0x1c60 [ 64.427533][ T1042] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 64.429434][ T1042] usb_generic_driver_probe+0xa1/0xe0 [ 64.431154][ T1042] usb_probe_device+0xef/0x400 [ 64.432667][ T1042] ? __pfx_usb_probe_device+0x10/0x10 [ 64.434350][ T1042] really_probe+0x241/0xa60 [ 64.435807][ T1042] __driver_probe_device+0x20e/0x450 [ 64.437467][ T1042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.439335][ T1042] driver_probe_device+0x4a/0x140 [ 64.440935][ T1042] __device_attach_driver+0x1df/0x320 [ 64.442636][ T1042] ? __pfx___device_attach_driver+0x10/0x10 [ 64.444514][ T1042] bus_for_each_drv+0x159/0x1e0 [ 64.446057][ T1042] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.447764][ T1042] ? lockdep_hardirqs_on+0x78/0x100 [ 64.449296][ T1042] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.451151][ T1042] __device_attach+0x1e4/0x4d0 [ 64.452671][ T1042] ? __pfx___device_attach+0x10/0x10 [ 64.454339][ T1042] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.455990][ T1042] device_initial_probe+0xaf/0xd0 [ 64.457580][ T1042] bus_probe_device+0x64/0x160 [ 64.459117][ T1042] device_add+0x121d/0x1970 [ 64.460556][ T1042] ? __pfx_device_add+0x10/0x10 [ 64.462139][ T1042] ? add_device_randomness+0xc9/0x110 [ 64.463843][ T1042] usb_new_device.cold+0x685/0x115c [ 64.465487][ T1042] ? _mutex_trylock_nest_lock+0x241/0x310 [ 64.467282][ T1042] ? do_raw_spin_lock+0x128/0x260 [ 64.468874][ T1042] ? __pfx_usb_new_device+0x10/0x10 [ 64.470519][ T1042] ? mark_held_locks+0x40/0x70 [ 64.472083][ T1042] hub_event+0x30a3/0x4a60 [ 64.473504][ T1042] ? __pfx_hub_event+0x10/0x10 [ 64.475028][ T1042] ? debug_object_deactivate+0x2e4/0x3b0 [ 64.476790][ T1042] ? rcu_is_watching+0x12/0xc0 [ 64.478299][ T1042] process_one_work+0xa23/0x1940 [ 64.479875][ T1042] ? __pfx_process_one_work+0x10/0x10 [ 64.481581][ T1042] ? __pfx_hub_event+0x10/0x10 [ 64.483101][ T1042] worker_thread+0x5ef/0xe50 [ 64.484561][ T1042] ? kthread+0x13a/0x450 [ 64.485902][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 64.487517][ T1042] kthread+0x370/0x450 [ 64.488811][ T1042] ? __pfx_kthread+0x10/0x10 [ 64.490271][ T1042] ret_from_fork+0x72b/0xd50 [ 64.491769][ T1042] ? __pfx_ret_from_fork+0x10/0x10 [ 64.493378][ T1042] ? __switch_to+0x800/0x10f0 [ 64.494877][ T1042] ? __pfx_kthread+0x10/0x10 [ 64.496340][ T1042] ret_from_fork_asm+0x1a/0x30 [ 64.497860][ T1042] [ 64.499370][ T1042] Kernel Offset: disabled [ 64.500731][ T1042] Rebooting in 86400 seconds..