last executing test programs: 1m19.408387977s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 1m18.578077143s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x0, 0x1000000) fallocate(r2, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 1m18.243922721s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x11, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 1m17.734124895s ago: executing program 1 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000800)={'wlan1\x00', 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, &(0x7f0000000540)) 1m15.557991056s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ffffff4010110f900001000000010902390003010080fa0904000001ffffff00070584034000010904010001ffffff00070502024000000904020001ffffff0007058202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/1-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/2-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/devices/dummy_hcd.0-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/128, 0x80) 1m13.767588315s ago: executing program 4 (id=55): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) read(r3, &(0x7f0000000210)=""/4096, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) read(r4, &(0x7f0000000210)=""/4096, 0x1000) 1m13.461017824s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='disk\n', 0x5) 1m7.973372353s ago: executing program 32 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs4\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)={[{'addr=127.0.0.1'}, {'vers=4'}, {'port=2050'}]}) 1m7.924413483s ago: executing program 4 (id=64): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000314010000000000000000000900020073797a3000000000080041007369770018003300766574683000"/58], 0x3c}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e23, 0x0, @remote}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 1m6.916067146s ago: executing program 4 (id=66): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) 1m3.736916918s ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 1m3.536075255s ago: executing program 2 (id=70): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1000}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000a00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000a80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000b80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000d80)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000f40)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001000)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001080)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001140)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001240)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001380)='\x00', 0x1}], 0x1}}, {{&(0x7f00000013c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001480)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001540)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001580)=[{&(0x7f00000015c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001600)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001680)='\x00', 0x1}], 0x1}}, {{&(0x7f00000016c0)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x1234, @loopback}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001840)={0x2, 0x1234, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f00000018c0)='\x00', 0x1}], 0x1}}], 0x14, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) 1m3.253920865s ago: executing program 2 (id=71): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0xed8, 0x280) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044080, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 1m1.743641598s ago: executing program 4 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000004c0)='1\n', 0x2) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) 1m1.522995814s ago: executing program 4 (id=73): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) read(r3, &(0x7f0000000210)=""/4096, 0x1000) syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0) 58.885157752s ago: executing program 33 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000600)='./nfs4\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)={[{'addr=127.0.0.1'}, {'vers=4'}, {'timeo=1'}, {'retrans=1'}]}) 58.438239148s ago: executing program 34 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='disk\n', 0x5) 58.391508406s ago: executing program 2 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="020052487f00000100"/40, 0x28) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80) syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 57.988372778s ago: executing program 2 (id=77): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="bfa2000000000000b7010000010000000f12000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.540040171s ago: executing program 2 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) (async) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='clientaddr=127.0.0.1,vers=4.1\x00']) 56.203540031s ago: executing program 4 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000001000)={0x1, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 48.001895152s ago: executing program 5 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:04/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='00:04\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:04/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disable', 0x7) write(r1, &(0x7f00000001c0)='set io 0-0', 0xa) write(r1, &(0x7f0000000200)='activate', 0x8) 47.220319985s ago: executing program 5 (id=94): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000600)={0x2}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x1, 0x0, 0x0, 0x0}) 42.334861629s ago: executing program 7 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/220, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 42.177069068s ago: executing program 35 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) (async) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='clientaddr=127.0.0.1,vers=4.1\x00']) 41.9001705s ago: executing program 5 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000004c0)='1\n', 0x2) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) 41.705214972s ago: executing program 7 (id=103): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) eventfd(0x11111111) r4 = eventfd(0x22222222) r5 = eventfd(0x11111111) r6 = eventfd(0x22222222) r7 = eventfd(0x11111111) r8 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000020), 0x8) read(r5, &(0x7f0000000028), 0x8) read(r6, &(0x7f0000000030), 0x8) read(r7, &(0x7f0000000038), 0x8) read(r8, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 41.453826351s ago: executing program 5 (id=104): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0) 41.025437595s ago: executing program 7 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="020052487f00000100"/46, 0x2e) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80) syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 40.60263256s ago: executing program 36 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000001000)={0x1, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,nolock\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) fchmod(r3, 0x1ff) 40.33194858s ago: executing program 7 (id=107): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) 39.949637558s ago: executing program 7 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x0, 0x1000000) fallocate(r2, 0x11, 0x0, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 38.167333522s ago: executing program 5 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='loop\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='1\x00', 0x1) 38.015299462s ago: executing program 5 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='/tmp\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) 37.986193555s ago: executing program 7 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 00000000 2147483647 /\n', 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 27.9520341s ago: executing program 9 (id=106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a000000030000000000000000000000000000010500000000000001000000000000000300000000020000000200000000200000006100302e616161610061"], 0x0, 0x64}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780400080a000000020000000000020303d72202080a00000002000000ad13128098cf093cc9cd7b8ec814f9bcfdfea9051600000001fffffffe000000030000000600000001050600000006000000"], 0x0) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ftruncate(r0, 0x1) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) close_range(r0, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002b80)={0x12bc, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@nested={0x2c5, 0x10c, 0x0, 0x1, [@generic="1e6328abf7e0ce3804371b19468db1a00f2739167d9499747f9488d4764304c01748cf8a67d15d75b6f58db5c898276348a4170063e61e4268660a5ded4132fe5ba02d76e080ec3c6339185b4301fce48c2a00ded566c9bd1ff81f9e1ce6c2c2e36d446871bfd45a08c1b3ff1d69070ea4a7a79a8e0fb224967b71ee3864373985d67498a91d524fc9c5ad62744638b744a3cbd9567423015fb31e1bd70898f1e2b6b77553", @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@local}, @nested={0xd7, 0x131, 0x0, 0x1, [@generic="eccb407646fd4e0035c050c338375e3a6138e9c8797d34c7f538ee42fcad015a3b2245d1a8f4704f4ef615f9fd97e98171df3a840a151a014fdfbe4b8d90c9c1dc65ab16ddaf292807a6cd98ea50aa93050c5595", @generic="85325da663a1f5dd75eab0052f0765a64140dd73e86af3863c6551f14e5de5ccccc38e035e2b", @generic="223bf74ba98d148d6ac08abed73cfa6bb635574d6e2d592eace702bcc7ca7ba9159f82dba177c7d057af41d8425bb60366cd3f466b1960ce796d8009bfe6bae1551a692afcd959a1f14ec8437f09e4d22d", @nested={0x4, 0x9}, @nested={0x4, 0x87}]}, @nested={0x12e, 0x127, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="2ce9aec287a36367fa4a8b9c200a8d2578ccc9cec47eab38bf11865e5635a9397ad0741949e6e6035d9ef4ddf16b0195d1bcb1d2b74344bd2f79fe37bc7ac69e0603669401fbc4adafac837170307f6267c464ef06cdb6ee0af81576a86add209960ecec9b66502e2c1f889283831542760ff284429550aa5065f29c34165ca861853be23092d90b872815a562664100815e09", @generic="a7b2f7e473b3174713aad5ba37369014bd2d8438d554663f93cced7c948492ddc5fa6aefa094b63d30652e0520222fed4d77c3afb99b5cd2f7bf85be899121c901d238fd4b8c2d060b792e49768f91ec2da731ffc1006b9a637dcefdcce4517a00eefa47c1282f75e0216668a6ccb3cf202cf83c1df7283064e772923b4e1ddf6a704ae0498e5409c78e25", @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@broadcast}]}]}, @generic="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"]}, 0x12bc}}, 0x20000000) 27.58771845s ago: executing program 9 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 25.973764518s ago: executing program 9 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='loop\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='1\x00', 0x1) 25.652791353s ago: executing program 9 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 23.71677207s ago: executing program 8 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) fallocate(r3, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 22.764644676s ago: executing program 37 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 00000000 2147483647 /\n', 0x23) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='1\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001500)='test\x00', 0x4) 22.751357584s ago: executing program 8 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0x0, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x28, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e20, 0x0, @empty}, r3, 0x3e8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x10, 0xfa00, {r3, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 22.674664274s ago: executing program 38 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='/tmp\n\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr,clientaddr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r6, &(0x7f0000000400), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r7, &(0x7f0000000400), 0x64) 21.184843524s ago: executing program 8 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") ioctl(r0, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100") 20.972267783s ago: executing program 8 (id=142): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) fsmount(r4, 0x0, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r6 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e000000200000400"/33], 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x9, '\x00', 0x0, r6, 0x1, 0x3, 0x1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x28815}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r3, &(0x7f00000002c0)='\x00', 0x210042, &(0x7f0000000300)={@_ha_fsid={[0x1000, 0x7520131a]}, {0x72, 0x8, 0x1, 0x7}}, 0x81, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r11, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 20.587756816s ago: executing program 8 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='default / 128\n\x00', 0xe) 20.152293196s ago: executing program 8 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) fallocate(r3, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 18.920844731s ago: executing program 6 (id=148): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) 18.889224954s ago: executing program 6 (id=149): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 18.535064127s ago: executing program 6 (id=150): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/arp\x00') lseek(r8, 0xfff, 0x0) 16.464068535s ago: executing program 6 (id=151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) fsmount(r4, 0x0, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r6 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e000000200000400"/33], 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x9, '\x00', 0x0, r6, 0x1, 0x3, 0x1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x28815}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r3, &(0x7f00000002c0)='\x00', 0x210042, &(0x7f0000000300)={@_ha_fsid={[0x1000, 0x7520131a]}, {0x72, 0x8, 0x1, 0x7}}, 0x81, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r11, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 15.757939368s ago: executing program 6 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) fallocate(r3, 0x11, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 15.242128728s ago: executing program 6 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) (async) 10.477001636s ago: executing program 39 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 7.798729266s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 6.7992701s ago: executing program 0 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/arp\x00') lseek(r8, 0xfff, 0x0) 4.986397059s ago: executing program 40 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) fallocate(r1, 0x11, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) fallocate(r3, 0x11, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 4.851129902s ago: executing program 0 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="020052487f00000100"/47, 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="020030397f00000100"/128, 0x80) syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 3.12868365s ago: executing program 3 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1024\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='64\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") 3.113298408s ago: executing program 0 (id=166): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340)='loop\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='1\x00', 0x1) 2.908946607s ago: executing program 3 (id=167): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) 2.908582006s ago: executing program 0 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 2.711920264s ago: executing program 3 (id=169): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) r4 = eventfd(0x11111111) r5 = eventfd(0x22222222) r6 = eventfd(0x11111111) r7 = eventfd(0x22222222) r8 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r4, &(0x7f0000000018), 0x8) read(r5, &(0x7f0000000020), 0x8) read(r6, &(0x7f0000000028), 0x8) read(r7, &(0x7f0000000030), 0x8) read(0xffffffffffffffff, &(0x7f0000000038), 0x8) read(r8, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 2.630314809s ago: executing program 3 (id=170): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0200080000000000000000000123456789abcdef0123456789abcdef", 0x1c, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) 2.43675023s ago: executing program 3 (id=171): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, 0x0, 0x0) fanotify_init(0x8, 0x80000) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/arp\x00') lseek(r8, 0xfff, 0x0) 882.921362ms ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) nanosleep(&(0x7f00000007c0)={0x1}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 354.562408ms ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:00.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:00.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0000:00:00.0\x00', 0xd) 0s ago: executing program 41 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) (async) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 54.678756][ T5258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.691870][ T5258] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. syzkaller login: [ 75.222339][ T5584] cgroup: Unknown subsys name 'net' [ 75.465891][ T5584] cgroup: Unknown subsys name 'cpuset' [ 75.537921][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.194099][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.579149][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.617332][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.624997][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.644523][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.645261][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.653647][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.680767][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.687549][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.700715][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.703744][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.706871][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.709639][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.711659][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.712767][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.713630][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.722772][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.725943][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.770414][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.799765][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.810320][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.816757][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.848652][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.853570][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.857832][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.872470][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.817534][ T4911] Bluetooth: hci1: command tx timeout [ 81.817714][ T4911] Bluetooth: hci4: command tx timeout [ 81.887376][ T5613] Bluetooth: hci0: command tx timeout [ 81.967435][ T5613] Bluetooth: hci2: command tx timeout [ 81.967451][ T4911] Bluetooth: hci3: command tx timeout [ 82.373774][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.374925][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.375726][ T5596] bridge_slave_0: entered allmulticast mode [ 82.379885][ T5596] bridge_slave_0: entered promiscuous mode [ 82.447818][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.447925][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.448383][ T5596] bridge_slave_1: entered allmulticast mode [ 82.450354][ T5596] bridge_slave_1: entered promiscuous mode [ 82.451392][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451497][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.451806][ T5598] bridge_slave_0: entered allmulticast mode [ 82.453179][ T5598] bridge_slave_0: entered promiscuous mode [ 82.455181][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.455288][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.455443][ T5599] bridge_slave_0: entered allmulticast mode [ 82.457045][ T5599] bridge_slave_0: entered promiscuous mode [ 82.482946][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.483057][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.483503][ T5597] bridge_slave_0: entered allmulticast mode [ 82.486969][ T5597] bridge_slave_0: entered promiscuous mode [ 82.524976][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.525142][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.525282][ T5598] bridge_slave_1: entered allmulticast mode [ 82.528475][ T5598] bridge_slave_1: entered promiscuous mode [ 82.532397][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.532504][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.532650][ T5599] bridge_slave_1: entered allmulticast mode [ 82.535325][ T5599] bridge_slave_1: entered promiscuous mode [ 82.537164][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.537992][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.538142][ T5600] bridge_slave_0: entered allmulticast mode [ 82.540979][ T5600] bridge_slave_0: entered promiscuous mode [ 82.544351][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.544503][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.544646][ T5597] bridge_slave_1: entered allmulticast mode [ 82.553646][ T5597] bridge_slave_1: entered promiscuous mode [ 82.627574][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.627709][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.627860][ T5600] bridge_slave_1: entered allmulticast mode [ 82.630549][ T5600] bridge_slave_1: entered promiscuous mode [ 82.657138][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.760387][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.763440][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.766545][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.805418][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.822535][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.824690][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.827233][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.842019][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.889086][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.907975][ T5596] team0: Port device team_slave_0 added [ 82.961644][ T5596] team0: Port device team_slave_1 added [ 82.963291][ T5598] team0: Port device team_slave_0 added [ 82.965271][ T5599] team0: Port device team_slave_0 added [ 82.996197][ T5597] team0: Port device team_slave_0 added [ 83.013597][ T5598] team0: Port device team_slave_1 added [ 83.015197][ T5599] team0: Port device team_slave_1 added [ 83.028383][ T5600] team0: Port device team_slave_0 added [ 83.033376][ T5597] team0: Port device team_slave_1 added [ 83.083147][ T5600] team0: Port device team_slave_1 added [ 83.084120][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.084130][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.084143][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.155309][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.155322][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.155336][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.156495][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.156504][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.156517][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.160539][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.160553][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.160578][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.162750][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.162763][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.162786][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.255735][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.255751][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.255775][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.279018][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.279035][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.279060][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.280798][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.280840][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.280863][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.282248][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.282259][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.282282][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.327057][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.327073][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.327097][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.477421][ T5596] hsr_slave_0: entered promiscuous mode [ 83.479449][ T5596] hsr_slave_1: entered promiscuous mode [ 83.574181][ T5598] hsr_slave_0: entered promiscuous mode [ 83.574960][ T5598] hsr_slave_1: entered promiscuous mode [ 83.575715][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.575813][ T5598] Cannot create hsr debugfs directory [ 83.590582][ T5599] hsr_slave_0: entered promiscuous mode [ 83.591795][ T5599] hsr_slave_1: entered promiscuous mode [ 83.593175][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 83.593197][ T5599] Cannot create hsr debugfs directory [ 83.603747][ T5597] hsr_slave_0: entered promiscuous mode [ 83.606246][ T5597] hsr_slave_1: entered promiscuous mode [ 83.607217][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 83.607241][ T5597] Cannot create hsr debugfs directory [ 83.658134][ T5600] hsr_slave_0: entered promiscuous mode [ 83.659040][ T5600] hsr_slave_1: entered promiscuous mode [ 83.659545][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 83.659562][ T5600] Cannot create hsr debugfs directory [ 83.887602][ T5613] Bluetooth: hci4: command tx timeout [ 83.887615][ T4911] Bluetooth: hci1: command tx timeout [ 83.967541][ T5613] Bluetooth: hci0: command tx timeout [ 84.047531][ T5613] Bluetooth: hci3: command tx timeout [ 84.047565][ T5613] Bluetooth: hci2: command tx timeout [ 84.981368][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.031933][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.039539][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.062499][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.065010][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.101951][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.126417][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.142171][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.297788][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.346762][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.355736][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.382974][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.385896][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.430928][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.456497][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.492995][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.621345][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.661176][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.665164][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.706457][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.721244][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.761116][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.785308][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.820894][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.968113][ T4911] Bluetooth: hci1: command tx timeout [ 85.981276][ T4911] Bluetooth: hci4: command tx timeout [ 85.995904][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.034092][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.046677][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.047642][ T4911] Bluetooth: hci0: command tx timeout [ 86.081933][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.091174][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.127560][ T4911] Bluetooth: hci2: command tx timeout [ 86.127577][ T5613] Bluetooth: hci3: command tx timeout [ 86.130452][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.173468][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.201971][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.240457][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.359870][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.411499][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.426274][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.454946][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.469905][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.510556][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.512762][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.532356][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.565902][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.609124][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.609230][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.646065][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.690895][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691549][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.824442][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.893201][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.894244][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.894368][ T10] cfg80211: failed to load regulatory.db [ 86.926987][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.980014][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.980102][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.084305][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.166833][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.167037][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.199594][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.290291][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.290428][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.398646][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.439961][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.466080][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.466254][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.542226][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.542352][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.611022][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.677015][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.677245][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.779989][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.781730][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.047504][ T5613] Bluetooth: hci4: command tx timeout [ 88.047534][ T5613] Bluetooth: hci1: command tx timeout [ 88.129862][ T4911] Bluetooth: hci0: command tx timeout [ 88.208805][ T5613] Bluetooth: hci2: command tx timeout [ 88.208853][ T4911] Bluetooth: hci3: command tx timeout [ 88.554915][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.804050][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.820635][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.020534][ T5596] veth0_vlan: entered promiscuous mode [ 89.132644][ T5596] veth1_vlan: entered promiscuous mode [ 89.333135][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.361209][ T5598] veth0_vlan: entered promiscuous mode [ 89.424128][ T5596] veth0_macvtap: entered promiscuous mode [ 89.436303][ T5598] veth1_vlan: entered promiscuous mode [ 89.472254][ T5596] veth1_macvtap: entered promiscuous mode [ 89.498005][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.555999][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.611268][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.636944][ T5599] veth0_vlan: entered promiscuous mode [ 89.664606][ T5600] veth0_vlan: entered promiscuous mode [ 89.673550][ T5598] veth0_macvtap: entered promiscuous mode [ 89.699637][ T5598] veth1_macvtap: entered promiscuous mode [ 89.706393][ T5599] veth1_vlan: entered promiscuous mode [ 89.795944][ T5600] veth1_vlan: entered promiscuous mode [ 89.911737][ T5597] veth0_vlan: entered promiscuous mode [ 89.970164][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.098344][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.113010][ T5597] veth1_vlan: entered promiscuous mode [ 90.310319][ T5599] veth0_macvtap: entered promiscuous mode [ 90.435667][ T5600] veth0_macvtap: entered promiscuous mode [ 90.450799][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.450825][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.453857][ T5599] veth1_macvtap: entered promiscuous mode [ 90.560333][ T5600] veth1_macvtap: entered promiscuous mode [ 90.853144][ T5597] veth0_macvtap: entered promiscuous mode [ 90.861119][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.861138][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.869911][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.920238][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.925564][ T5597] veth1_macvtap: entered promiscuous mode [ 90.980467][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.987187][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.987205][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.058446][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.136941][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.332096][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.355024][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.355043][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.452291][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.452311][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.098054][ T3330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.098071][ T3330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.381480][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.381501][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.630529][ T5797] __kmem_cache_create_args(nfsd_file_mark) failed with error -12 [ 93.630589][ T5797] CPU: 0 UID: 0 PID: 5797 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.630614][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.630631][ T5797] Call Trace: [ 93.630639][ T5797] [ 93.630648][ T5797] dump_stack_lvl+0xe8/0x150 [ 93.630692][ T5797] __kmem_cache_create_args+0x3ee/0x450 [ 93.630721][ T5797] nfsd_file_cache_init+0x1d9/0x530 [ 93.630747][ T5797] ? __pfx_nfsd_file_cache_init+0x10/0x10 [ 93.630774][ T5797] ? net_generic+0x1e/0x240 [ 93.630805][ T5797] ? net_generic+0x1e/0x240 [ 93.630828][ T5797] ? net_generic+0x1e/0x240 [ 93.630853][ T5797] ? net_generic+0x1f4/0x240 [ 93.630879][ T5797] nfsd_svc+0x330/0x7d0 [ 93.630911][ T5797] write_threads+0x3d3/0x5a0 [ 93.630939][ T5797] ? __might_fault+0xaf/0x130 [ 93.630963][ T5797] ? __pfx_write_threads+0x10/0x10 [ 93.631012][ T5797] ? _copy_from_user+0x94/0xb0 [ 93.631039][ T5797] ? simple_transaction_get+0x130/0x170 [ 93.631064][ T5797] nfsctl_transaction_write+0x112/0x160 [ 93.631096][ T5797] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 93.631130][ T5797] vfs_write+0x29f/0xbb0 [ 93.631165][ T5797] ? __pfx_vfs_write+0x10/0x10 [ 93.631194][ T5797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 93.631223][ T5797] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.631248][ T5797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 93.631271][ T5797] ? mutex_lock_nested+0x152/0x1d0 [ 93.631287][ T5797] ? fdget_pos+0x252/0x320 [ 93.631315][ T5797] ksys_write+0x156/0x270 [ 93.631344][ T5797] ? __pfx_ksys_write+0x10/0x10 [ 93.631379][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.631407][ T5797] do_syscall_64+0x174/0x580 [ 93.631435][ T5797] ? trace_irq_disable+0x3b/0x140 [ 93.631456][ T5797] ? clear_bhb_loop+0x40/0x90 [ 93.631482][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.631503][ T5797] RIP: 0033:0x7f8fbce4e019 [ 93.631529][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.631554][ T5797] RSP: 002b:00007f8fbb085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.631581][ T5797] RAX: ffffffffffffffda RBX: 00007f8fbd0d6090 RCX: 00007f8fbce4e019 [ 93.631601][ T5797] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000005 [ 93.631614][ T5797] RBP: 00007f8fbcee500c R08: 0000000000000000 R09: 0000000000000000 [ 93.631626][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.631639][ T5797] R13: 00007f8fbd0d6128 R14: 00007f8fbd0d6090 R15: 00007fff7c763948 [ 93.631676][ T5797] [ 93.631814][ T5797] nfsd: unable to create nfsd_file_mark_slab [ 93.901140][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.901160][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.054321][ T107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.054766][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111005][ T5807] Zero length message leads to an empty skb [ 94.120068][ T1508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.120130][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.120143][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.120642][ T1508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.133492][ T1508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140334][ T1508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140379][ T1508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140412][ T1508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140443][ T1508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140474][ T1508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140512][ T1508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140544][ T1508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140576][ T1508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140606][ T1508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140638][ T1508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140668][ T1508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140699][ T1508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140729][ T1508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140760][ T1508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140791][ T1508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452590][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.452609][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.899615][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.388445][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.517177][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.517206][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.678568][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 96.678596][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.926927][ T5831] /dev/nullb0: Can't open blockdev [ 98.061717][ T5834] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.061755][ T5834] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.158869][ T5834] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.351870][ T5834] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.445701][ T37] audit: type=1800 audit(1785850854.571:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="addr_trtype" dev="configfs" ino=8871 res=0 errno=0 [ 98.484251][ T37] audit: type=1800 audit(1785850854.641:3): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="addr_adrfam" dev="configfs" ino=7892 res=0 errno=0 [ 98.518867][ T37] audit: type=1800 audit(1785850854.681:4): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="addr_traddr" dev="configfs" ino=8872 res=0 errno=0 [ 98.555926][ T5834] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.584205][ T37] audit: type=1800 audit(1785850854.741:5): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.15" name="addr_trsvcid" dev="configfs" ino=8873 res=0 errno=0 [ 98.851422][ T4978] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.168668][ T4978] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 99.168699][ T4978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.503810][ T199] usb 2-1: USB disconnect, device number 2 [ 99.654099][ T5842] nvme nvme0: rdma connection establishment failed (-104) [ 100.512786][ T4978] snd-ua101 1-1:1.1: sample format descriptor not found [ 100.512825][ T4978] snd-ua101 1-1:1.0: invalid num_altsetting [ 100.587464][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 100.587575][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 100.798921][ T10] usb 4-1: USB disconnect, device number 2 [ 101.537852][ T5843] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.537888][ T5843] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.537926][ T5843] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.601701][ T5843] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.854327][ T5874] input: syz0 as /devices/virtual/input/input5 [ 101.908844][ T199] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 101.974660][ T5712] usb 1-1: USB disconnect, device number 2 [ 102.072200][ T199] usb 5-1: not running at top speed; connect to a high speed hub [ 102.072430][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.235876][ T199] usb 5-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00 [ 102.235906][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.235925][ T199] usb 5-1: Product: syz [ 102.235937][ T199] usb 5-1: Manufacturer: syz [ 102.235950][ T199] usb 5-1: SerialNumber: syz [ 102.308155][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 102.308205][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.308224][ T10] usb 4-1: Product: syz [ 102.308238][ T10] usb 4-1: Manufacturer: syz [ 102.308251][ T10] usb 4-1: SerialNumber: syz [ 102.320953][ T5880] CIFS: Attempting to mount //127.0.0.1/share [ 102.540533][ T199] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 102.996800][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 103.337997][ T5880] CIFS: VFS: cifs_mount failed w/return code = -512 [ 103.399740][ T5880] syz.0.23 (5880) used greatest stack depth: 18144 bytes left [ 103.770797][ T10] scsi host1: usb-storage 4-1:1.0 [ 104.394629][ T199] gspca_zc3xx: reg_w_i err -110 [ 104.788005][ T5875] usb 4-1: USB disconnect, device number 3 [ 105.017677][ T199] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 105.017775][ T199] gspca_zc3xx 5-1:1.0: probe with driver gspca_zc3xx failed with error -110 [ 105.115557][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.427585][ T5887] NFSD: Unable to initialize client recovery tracking! (-110) [ 105.427598][ T5887] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 105.427605][ T5887] NFSD: starting 90-second grace period (net f00003bf) [ 105.731776][ T199] usb 5-1: USB disconnect, device number 2 [ 105.935397][ T5911] CIFS: Attempting to mount //127.0.0.1/share [ 106.050815][ T5911] CIFS: VFS: cifs_mount failed w/return code = -112 [ 106.360634][ T5918] siw: device registration error -23 [ 106.459785][ T37] audit: type=1800 audit(1785850862.611:6): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="attr_allow_any_host" dev="configfs" ino=8045 res=0 errno=0 [ 106.540472][ T5918] nvmet: adding nsid 1 to subsystem testnqn [ 106.588169][ T37] audit: type=1800 audit(1785850862.751:7): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="device_path" dev="configfs" ino=8047 res=0 errno=0 [ 106.626806][ T37] audit: type=1800 audit(1785850862.781:8): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="enable" dev="configfs" ino=8048 res=0 errno=0 [ 106.685889][ T37] audit: type=1800 audit(1785850862.841:9): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="addr_trtype" dev="configfs" ino=8049 res=0 errno=0 [ 106.718168][ T37] audit: type=1800 audit(1785850862.871:10): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="addr_adrfam" dev="configfs" ino=8050 res=0 errno=0 [ 106.741561][ T37] audit: type=1800 audit(1785850862.891:11): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="addr_traddr" dev="configfs" ino=8943 res=0 errno=0 [ 106.757843][ T37] audit: type=1800 audit(1785850862.901:12): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.32" name="addr_trsvcid" dev="configfs" ino=8944 res=0 errno=0 [ 106.767239][ T5921] nvmet_rdma: malformed ip/port passed: 172.20.20.24: [ 106.971353][ T5918] nvme nvme0: rdma connection establishment failed (-104) [ 107.161564][ T5928] siw: device registration error -23 [ 107.616748][ T5933] loop0: detected capacity change from 0 to 4 [ 107.680291][ T5936] affs: No valid root block on device loop1 [ 107.884729][ T5941] siw: device registration error -23 [ 108.138265][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.207632][ T199] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.302296][ T5875] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 108.302326][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.302345][ T5875] usb 2-1: Product: syz [ 108.302358][ T5875] usb 2-1: Manufacturer: syz [ 108.302371][ T5875] usb 2-1: SerialNumber: syz [ 108.359749][ T199] usb 5-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 108.359779][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.417242][ T199] cx231xx 5-1:1.1: New device @ 480 Mbps (2040:b120) with 2 interfaces [ 108.563998][ T199] cx231xx 5-1:1.1: Failed to read PCB config [ 108.564181][ T199] cx231xx 5-1:1.1: probe with driver cx231xx failed with error -110 [ 111.022884][ T10] usb 5-1: USB disconnect, device number 3 [ 111.425261][ T5875] usbhid 2-1:1.0: can't add hid device: -71 [ 111.425390][ T5875] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 111.455967][ T5875] usb 2-1: USB disconnect, device number 3 [ 114.126491][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.260372][ T4911] Bluetooth: hci3: Malformed HCI Event [ 114.367356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.387324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.397324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.407342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.417339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.427343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.437361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.447351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.457323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.467315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.267472][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 116.369271][ T5896] svc: failed to register lockdv1 RPC service (errno 111). [ 116.369733][ T5896] lockd_up: makesock failed, error=-111 [ 117.051582][ T5896] svc: failed to register nfsdv3 RPC service (errno 512). [ 117.051934][ T5896] svc: failed to register nfsaclv3 RPC service (errno 512). [ 117.051950][ T5896] failed to unregister tcp with rpcbind [ 117.052193][ T5896] svc: failed to register nfsdv3 RPC service (errno 97). [ 117.052221][ T5896] svc: failed to register nfsaclv3 RPC service (errno 97). [ 117.052233][ T5896] failed to unregister tcp with rpcbind [ 117.382453][ T5991] rdma_rxe: rxe_newlink: failed to add veth0 [ 117.405510][ T37] audit: type=1800 audit(1785850873.561:13): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="attr_allow_any_host" dev="configfs" ino=9036 res=0 errno=0 [ 117.412349][ T37] audit: type=1800 audit(1785850873.571:14): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="device_path" dev="configfs" ino=9037 res=0 errno=0 [ 117.414065][ T37] audit: type=1800 audit(1785850873.571:15): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="enable" dev="configfs" ino=9038 res=0 errno=0 [ 117.425684][ T37] audit: type=1800 audit(1785850873.581:16): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="addr_trtype" dev="configfs" ino=9039 res=0 errno=0 [ 117.453108][ T37] audit: type=1800 audit(1785850873.611:17): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="addr_adrfam" dev="configfs" ino=9040 res=0 errno=0 [ 117.454324][ T37] audit: type=1800 audit(1785850873.611:18): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="addr_traddr" dev="configfs" ino=9041 res=0 errno=0 [ 117.456381][ T37] audit: type=1800 audit(1785850873.611:19): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.34" name="addr_trsvcid" dev="configfs" ino=9042 res=0 errno=0 [ 117.465869][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 117.465906][ T10] usb 2-1: can't read configurations, error -71 [ 117.472103][ T5991] nvmet_rdma: binding CM ID to 172.20.20.24:4421 failed (-99) [ 117.615330][ T5991] nvme nvme0: rdma connection establishment failed (-104) [ 117.695220][ T37] audit: type=1800 audit(1785850873.851:20): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.54" name="local" dev="configfs" ino=8173 res=0 errno=0 [ 118.068334][ T4978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.423238][ T6717] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000121: 0000 [#1] SMP KASAN PTI [ 192.423264][ T6717] KASAN: null-ptr-deref in range [0x0000000000000908-0x000000000000090f] [ 192.423288][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.423311][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.423322][ T6717] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 192.423366][ T6717] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 92 85 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 72 85 eb fa 4d 8b 3f 49 83 c7 30 [ 192.423382][ T6717] RSP: 0018:ffffc9000dcf7710 EFLAGS: 00010206 [ 192.423405][ T6717] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 192.423417][ T6717] RDX: ffffc90029a58000 RSI: 0000000000016f03 RDI: 0000000000016f04 [ 192.423429][ T6717] RBP: 1ffff11010724143 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 192.423442][ T6717] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: fffffffffffffffc [ 192.423455][ T6717] R13: dffffc0000000000 R14: ffff888083920a18 R15: 0000000000000908 [ 192.423468][ T6717] FS: 00007f53366c66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 192.423482][ T6717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.423494][ T6717] CR2: 00007f8978c8c4b0 CR3: 000000005ab06000 CR4: 00000000003526f0 [ 192.423510][ T6717] Call Trace: [ 192.423515][ T6717] [ 192.423529][ T6717] uvc_function_bind+0x1076/0x15a0 [ 192.423570][ T6717] usb_add_function+0x290/0x930 [ 192.423593][ T6717] configfs_composite_bind+0xde0/0x1410 [ 192.423619][ T6717] ? __pfx_configfs_composite_bind+0x10/0x10 [ 192.423638][ T6717] gadget_bind_driver+0x2ca/0x9e0 [ 192.423669][ T6717] ? __pfx_gadget_bind_driver+0x10/0x10 [ 192.423692][ T6717] really_probe+0x254/0xae0 [ 192.423718][ T6717] __driver_probe_device+0x1e8/0x360 [ 192.423744][ T6717] driver_probe_device+0x4f/0x240 [ 192.423771][ T6717] __driver_attach+0x339/0x600 [ 192.423796][ T6717] bus_for_each_dev+0x23e/0x2c0 [ 192.423815][ T6717] ? __pfx___driver_attach+0x10/0x10 [ 192.423840][ T6717] ? __pfx_bus_for_each_dev+0x10/0x10 [ 192.423860][ T6717] ? rt_spin_unlock+0x163/0x200 [ 192.423882][ T6717] bus_add_driver+0x348/0x670 [ 192.423905][ T6717] driver_register+0x23a/0x320 [ 192.423923][ T6717] usb_gadget_register_driver_owner+0xf9/0x270 [ 192.423953][ T6717] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 192.423972][ T6717] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 192.424002][ T6717] configfs_write_iter+0x33a/0x430 [ 192.424027][ T6717] vfs_write+0x61e/0xbb0 [ 192.424052][ T6717] ? __pfx_vfs_write+0x10/0x10 [ 192.424076][ T6717] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.424099][ T6717] ? lockdep_hardirqs_on+0x7a/0x110 [ 192.424124][ T6717] ? mutex_lock_nested+0x152/0x1d0 [ 192.424142][ T6717] ? fdget_pos+0x252/0x320 [ 192.424173][ T6717] ksys_write+0x156/0x270 [ 192.424197][ T6717] ? __pfx_ksys_write+0x10/0x10 [ 192.424221][ T6717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.424240][ T6717] do_syscall_64+0x174/0x580 [ 192.424264][ T6717] ? trace_irq_disable+0x3b/0x140 [ 192.424283][ T6717] ? clear_bhb_loop+0x40/0x90 [ 192.424302][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.424320][ T6717] RIP: 0033:0x7f533846e019 [ 192.424346][ T6717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.424361][ T6717] RSP: 002b:00007f53366c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.424382][ T6717] RAX: ffffffffffffffda RBX: 00007f53386f5fa0 RCX: 00007f533846e019 [ 192.424397][ T6717] RDX: 0000000000000006 RSI: 0000200000000780 RDI: 0000000000000005 [ 192.424407][ T6717] RBP: 00007f533850500c R08: 0000000000000000 R09: 0000000000000000 [ 192.424418][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.424429][ T6717] R13: 00007f53386f6038 R14: 00007f53386f5fa0 R15: 00007ffc73238ef8 [ 192.424450][ T6717] [ 192.424457][ T6717] Modules linked in: [ 192.424491][ T6717] ---[ end trace 0000000000000000 ]--- [ 192.424504][ T6717] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 192.424533][ T6717] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 92 85 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 72 85 eb fa 4d 8b 3f 49 83 c7 30 [ 192.424546][ T6717] RSP: 0018:ffffc9000dcf7710 EFLAGS: 00010206 [ 192.424563][ T6717] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 192.424575][ T6717] RDX: ffffc90029a58000 RSI: 0000000000016f03 RDI: 0000000000016f04 [ 192.424587][ T6717] RBP: 1ffff11010724143 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 192.424602][ T6717] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: fffffffffffffffc [ 192.424617][ T6717] R13: dffffc0000000000 R14: ffff888083920a18 R15: 0000000000000908 [ 192.424630][ T6717] FS: 00007f53366c66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 192.424646][ T6717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.424664][ T6717] CR2: 00007f8978c8c4b0 CR3: 000000005ab06000 CR4: 00000000003526f0 [ 192.424683][ T6717] Kernel panic - not syncing: Fatal exception [ 192.424830][ T6717] Kernel Offset: disabled