last executing test programs: 16.463310043s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/infiniband_srp\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) 16.23577024s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x2, 0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000140)={0xa1, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000340)='\x00'/16) 15.812442845s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/fail_usercopy/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='Y', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_usercopy/probability\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_usercopy/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='-1', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./debug/fail_usercopy/interval\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='1', 0x1) rt_sigreturn() 15.335119706s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./export\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./export\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mydomain ./export 2147483647 9218 0 0 0\n', 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='mydomain 1 \\x00000000 2147483647 ./export\n', 0x2a) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='-2 -3 +4\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='8\n', 0x2) (async) mount$nfs4(&(0x7f00000004c0)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/testdir\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="8000000000000000"], &(0x7f0000000640), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='3\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x10000, 0x0) open_by_handle_at(r7, &(0x7f00000005c0)=ANY=[], 0x0) 13.62115449s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405c6929380001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xbc, 0x1, 'g'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x6, "001122334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xb1, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x0) ioctl$FE_SET_VOLTAGE(r1, 0x6f43, &(0x7f0000000500)=0x1) 12.047156405s ago: executing program 2 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='raid1\x00', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='readonly\x00', 0x9) write(r7, &(0x7f0000000480)='inactive\x00', 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='+8\x00', 0x3) 11.900675103s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)='0\x00', 0x2) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r6 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 11.534692462s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f00000002c0)='127.0.0.1:/\x00', &(0x7f0000000300)='./nfs4\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'addr=127.0.0.1'}, {'soft'}, {'timeo=1'}, {'retrans=1'}, {'retry=0'}, {'vers=4.2'}, {'sec=sys'}]}) 9.78934757s ago: executing program 2 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) r1 = accept(r0, 0x0, 0x0) (async) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,soft\x00') close(r1) 9.577677751s ago: executing program 2 (id=24): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 7.795818946s ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='+udp 2049\n\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000400)='./mnt/file\x00', &(0x7f0000000440)=@random={'system.', 'nfs4_acl\x00'}, &(0x7f0000000480)='\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06OWNER@\x00\x00', 0x1c, 0x0) 7.539323653s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='ath10k/QCA9377/hw1.0/firmware-usb-6.bin\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000400)="5143412d41544831304b0000020000000400000000000800", 0x18) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b11342000000000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x2, 0xc, "0c0000000000020500000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000600)='wlan1\x00', &(0x7f0000000700)=@random='syz\x00', 0x4, 0x0) 5.022823821s ago: executing program 1 (id=30): timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef020140450cfb600001010201010902220001010080fa09040000010e01000009240100010900000007058103020001"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0445609, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000240)=0x1) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0x980900, 0x1}) 4.013391605s ago: executing program 3 (id=34): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendto$inet(r0, &(0x7f0000000100)="01020304", 0x4, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) 3.304647492s ago: executing program 4 (id=38): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04f00800000000000109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x24, &(0x7f0000001300)={0x0, 0x0, 0xa, {0xa, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) syz_usb_control_io(r0, &(0x7f0000001200), &(0x7f0000001000)) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) r2 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000400)=0x1) r3 = syz_open_dev$video(&(0x7f0000000100), 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000400)=0x1) r4 = syz_open_dev$video(&(0x7f0000000100), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000400)=0x1) 3.067812956s ago: executing program 3 (id=39): nanosleep(&(0x7f0000001d00)={0x1}, 0x0) 2.586397779s ago: executing program 4 (id=40): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/loop0,65536', 0x10) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="ffffffff01000000800f0000000000000300040000000000766f6c3000"/160) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='ubi0_0\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000e00)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/test\x00', 0x42, 0x1ff) 2.194697459s ago: executing program 3 (id=41): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e24, 0x0, @empty}, 0x1c) listen(r1, 0xa) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r3, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) r4 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000800)='\x00'/20, 0x14, 0x0, 0x0, 0x0) close(r4) 1.975364865s ago: executing program 4 (id=42): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000001000)='\x00\x00', 0x1000, 0x1000000, 0x1000}], 0x0) 1.740037766s ago: executing program 4 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 my_domain\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='my_domain / 2147483647 9216 0 0 0\n\x00', 0x22) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='my_domain 1 \\x00000000 2147483647 /\n\x00', 0x24) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n\x00', 0x2) close(r5) nanosleep(&(0x7f0000000540)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000480)='./mnt/file\x00', &(0x7f00000004c0)=@random={'system.', 'nfs4_acl\x00'}, &(0x7f0000000500)='\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06OWNER@\x00\x00', 0x1c, 0x0) 1.303201364s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mtd1\x00', 0x2, 0x0) ioctl(r1, 0x40104d14, &(0x7f0000000380)="00000000000000000000000400000000") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000440)="ffffffff0100"/24) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f00000004c0)="ffffffff0100000000003000000000000300040000000000766f6c3000"/143) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='ubi0_0\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='ubifs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test/file\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000640)='hello\x00', 0x6) 1.034007731s ago: executing program 1 (id=45): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1043}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e87, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r3, 0x10}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1000}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r5, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5000}, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r6, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x10000}, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r7, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x50000}, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e87, @rand_addr=0x64010101}, 0x10) sendto$inet(r8, &(0x7f0000000380)='\x00'/20, 0x14, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x100000}, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000003c0)={0x1}, 0x8) close(r8) 863.551392ms ago: executing program 1 (id=46): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x1, 0x25, 0x0, @void}, 0x10) 863.253856ms ago: executing program 3 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs4\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{'addr=127.0.0.1'}, {'vers=4.2'}, {'sec=sys'}]}) 841.536692ms ago: executing program 1 (id=48): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ebe2d0001010203010902220001010080320904000001030002000921110100012207000705810308000a"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x0, 0x0, 0x12, {0x12, 0x1, "0002000000407d1ebe2d000101020301"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x1f, '\x00'/31}, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x0, 0x0, 0x12, {0x12, 0x1, "0002000000407d1ebe2d000101020301"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x1f, '\x00'/31}, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x0, 0x0, 0x12, {0x12, 0x1, "0002000000407d1ebe2d000101020301"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x1f, '\x00'/31}, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x0, 0x0, 0x12, {0x12, 0x1, "0002000000407d1ebe2d000101020301"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x1f, '\x00'/31}, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/roccatkonepure0\x00', 0x2, 0x0) ioctl(r1, 0x800448f1, &(0x7f0000000700)='\x00\x00\x00\x00') 298.003193ms ago: executing program 4 (id=49): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000d00)={@local, 0x40, r1}) 39.387359ms ago: executing program 3 (id=50): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000002000)=[{&(0x7f0000003000)="0101", 0x2}, {&(0x7f0000003002)='\x00\x00', 0x2}, {&(0x7f0000003004)="02fa", 0x2}], 0x3) 0s ago: executing program 4 (id=51): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write(r6, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\x00', 0x1) nanosleep(&(0x7f0000000380)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 78.315128][ T5609] cgroup: Unknown subsys name 'net' [ 78.446098][ T5609] cgroup: Unknown subsys name 'cpuset' [ 78.455065][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.136069][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.558489][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.562109][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.567775][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.601112][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.602558][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.607545][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.609356][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.609534][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.609901][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.609901][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.617835][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.619781][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.623972][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.624708][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.626237][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.630951][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.635377][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.637113][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.643839][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.645658][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.650972][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.656597][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.656984][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.660236][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.671624][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.698569][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.698812][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.698983][ T5620] bridge_slave_0: entered allmulticast mode [ 86.707080][ T5620] bridge_slave_0: entered promiscuous mode [ 86.720251][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.720552][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.720946][ T5619] bridge_slave_0: entered allmulticast mode [ 86.737170][ T5619] bridge_slave_0: entered promiscuous mode [ 86.774947][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.775368][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.775786][ T5620] bridge_slave_1: entered allmulticast mode [ 86.784693][ T5620] bridge_slave_1: entered promiscuous mode [ 86.809140][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.809388][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.809762][ T5619] bridge_slave_1: entered allmulticast mode [ 86.816316][ T5619] bridge_slave_1: entered promiscuous mode [ 86.818060][ T5624] Bluetooth: hci0: command tx timeout [ 86.818339][ T5628] Bluetooth: hci3: command tx timeout [ 86.818590][ T5628] Bluetooth: hci4: command tx timeout [ 86.818749][ T5636] Bluetooth: hci2: command tx timeout [ 86.822674][ T5636] Bluetooth: hci1: command tx timeout [ 86.936757][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.962155][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.962522][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.963578][ T5633] bridge_slave_0: entered allmulticast mode [ 86.968335][ T5633] bridge_slave_0: entered promiscuous mode [ 87.003343][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.011193][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011648][ T5622] bridge_slave_0: entered allmulticast mode [ 87.028560][ T5622] bridge_slave_0: entered promiscuous mode [ 87.042224][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.072450][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.109097][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.109367][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.118720][ T5633] bridge_slave_1: entered allmulticast mode [ 87.133030][ T5633] bridge_slave_1: entered promiscuous mode [ 87.156160][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.156290][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.156438][ T5622] bridge_slave_1: entered allmulticast mode [ 87.179186][ T5622] bridge_slave_1: entered promiscuous mode [ 87.221277][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.285570][ T5620] team0: Port device team_slave_0 added [ 87.306846][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.314186][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.322805][ T5621] bridge_slave_0: entered allmulticast mode [ 87.330664][ T5621] bridge_slave_0: entered promiscuous mode [ 87.340459][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.347897][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.355649][ T5621] bridge_slave_1: entered allmulticast mode [ 87.363913][ T5621] bridge_slave_1: entered promiscuous mode [ 87.381677][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.395371][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.408275][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.420810][ T5620] team0: Port device team_slave_1 added [ 87.468018][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.488772][ T5619] team0: Port device team_slave_0 added [ 87.544289][ T5619] team0: Port device team_slave_1 added [ 87.562544][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.571972][ T5633] team0: Port device team_slave_0 added [ 87.588652][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.588776][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.588896][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.637211][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.657152][ T5633] team0: Port device team_slave_1 added [ 87.673530][ T5622] team0: Port device team_slave_0 added [ 87.677696][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.677746][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.677818][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.689128][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.689178][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.689250][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.777881][ T5622] team0: Port device team_slave_1 added [ 87.800685][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.800733][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.800777][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.821408][ T5621] team0: Port device team_slave_0 added [ 87.826882][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.826932][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.827015][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.920611][ T5621] team0: Port device team_slave_1 added [ 87.925667][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.925718][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.925791][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.935754][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.935803][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.935875][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.943864][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.943914][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.943996][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.130060][ T5620] hsr_slave_0: entered promiscuous mode [ 88.135263][ T5620] hsr_slave_1: entered promiscuous mode [ 88.152180][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.152316][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.152409][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.225317][ T5622] hsr_slave_0: entered promiscuous mode [ 88.228844][ T5622] hsr_slave_1: entered promiscuous mode [ 88.230925][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 88.231063][ T5622] Cannot create hsr debugfs directory [ 88.250076][ T5619] hsr_slave_0: entered promiscuous mode [ 88.255808][ T5619] hsr_slave_1: entered promiscuous mode [ 88.256566][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 88.256584][ T5619] Cannot create hsr debugfs directory [ 88.279459][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.279489][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.279517][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.311115][ T5633] hsr_slave_0: entered promiscuous mode [ 88.329745][ T5633] hsr_slave_1: entered promiscuous mode [ 88.335016][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 88.335080][ T5633] Cannot create hsr debugfs directory [ 88.474350][ T5621] hsr_slave_0: entered promiscuous mode [ 88.477217][ T5621] hsr_slave_1: entered promiscuous mode [ 88.479190][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 88.479244][ T5621] Cannot create hsr debugfs directory [ 88.891978][ T5628] Bluetooth: hci1: command tx timeout [ 88.892032][ T5628] Bluetooth: hci0: command tx timeout [ 88.892073][ T5628] Bluetooth: hci3: command tx timeout [ 88.892351][ T5627] Bluetooth: hci4: command tx timeout [ 88.892426][ T5636] Bluetooth: hci2: command tx timeout [ 89.054175][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.070082][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.079075][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.089373][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.099577][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.110593][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.127100][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.138193][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.198929][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.208922][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.215737][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.227621][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.235417][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.245562][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.259665][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.269700][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.376351][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.387638][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.395119][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.406044][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.414884][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.424997][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.430060][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.443358][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.557237][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.569930][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.586637][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.596632][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.616707][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.621513][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.636251][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.643657][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.652942][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.739199][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.749638][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.769030][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.779950][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.793686][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.805085][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.825011][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.835382][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.844037][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.870248][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.870650][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.912492][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.928155][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.928408][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.992627][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.024221][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.061805][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.061934][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.118068][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.119784][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.137065][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.173002][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.173298][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.231172][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.249030][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.249165][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.368658][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.435340][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.435573][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.472274][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.496740][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.497154][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.580377][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.616945][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.617070][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693423][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.693583][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.715658][ T5619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.976017][ T5627] Bluetooth: hci4: command tx timeout [ 90.983359][ T5624] Bluetooth: hci3: command tx timeout [ 90.983396][ T5624] Bluetooth: hci0: command tx timeout [ 90.983421][ T5624] Bluetooth: hci1: command tx timeout [ 90.995948][ T5636] Bluetooth: hci2: command tx timeout [ 91.367553][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.591405][ T5620] veth0_vlan: entered promiscuous mode [ 91.634663][ T5620] veth1_vlan: entered promiscuous mode [ 91.759089][ T5620] veth0_macvtap: entered promiscuous mode [ 91.787869][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.799959][ T5620] veth1_macvtap: entered promiscuous mode [ 91.885391][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.933963][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.046260][ T3285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087444][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.099304][ T5622] veth0_vlan: entered promiscuous mode [ 92.107091][ T1227] cfg80211: failed to load regulatory.db [ 92.118272][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.150674][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.166466][ T3285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.168372][ T203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.168573][ T203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.203743][ T5622] veth1_vlan: entered promiscuous mode [ 92.312366][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.312413][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.420338][ T5622] veth0_macvtap: entered promiscuous mode [ 92.433467][ T5619] veth0_vlan: entered promiscuous mode [ 92.458262][ T5633] veth0_vlan: entered promiscuous mode [ 92.467291][ T5622] veth1_macvtap: entered promiscuous mode [ 92.477942][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.477998][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.549553][ T5633] veth1_vlan: entered promiscuous mode [ 92.555894][ T5619] veth1_vlan: entered promiscuous mode [ 92.589850][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.620155][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.654791][ T5620] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.675024][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704086][ T3348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704166][ T3348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704248][ T3348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.772555][ T5619] veth0_macvtap: entered promiscuous mode [ 92.813020][ T5633] veth0_macvtap: entered promiscuous mode [ 92.854765][ T5619] veth1_macvtap: entered promiscuous mode [ 92.872969][ T5633] veth1_macvtap: entered promiscuous mode [ 92.947676][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.947739][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.000847][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.033211][ T5621] veth0_vlan: entered promiscuous mode [ 93.042828][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.057794][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.063863][ T5628] Bluetooth: hci1: command tx timeout [ 93.063947][ T5628] Bluetooth: hci0: command tx timeout [ 93.064017][ T5628] Bluetooth: hci3: command tx timeout [ 93.064172][ T5627] Bluetooth: hci4: command tx timeout [ 93.064275][ T5636] Bluetooth: hci2: command tx timeout [ 93.067238][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.067298][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.105134][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.139441][ T5621] veth1_vlan: entered promiscuous mode [ 93.181998][ T3285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182074][ T3285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182128][ T3285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182165][ T3285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.182205][ T3285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352033][ T3348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352118][ T3348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.352205][ T3348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.404506][ T5621] veth0_macvtap: entered promiscuous mode [ 93.434608][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.434648][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.455886][ T5621] veth1_macvtap: entered promiscuous mode [ 93.566144][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.566187][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.586084][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.628064][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.660225][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.660265][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.677706][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677777][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677898][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.697010][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.697034][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.729718][ T5819] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 93.782094][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.826521][ T3348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.948625][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 93.957438][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 93.968779][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.982001][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.013471][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.013521][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.066237][ T5832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.080679][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 94.237953][ T3285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.238016][ T3285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.774903][ T10] gspca_spca501: reg write: error -110 [ 94.774957][ T10] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 94.775066][ T10] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 94.803323][ T10] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 94.821014][ T10] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 94.832412][ T10] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 94.832496][ T10] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 94.857754][ T10] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 95.088726][ T5859] dlm: non-version read from control device 1 [ 95.142321][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.295332][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.319029][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.319077][ T10] usb 5-1: Product: syz [ 95.319118][ T10] usb 5-1: Manufacturer: syz [ 95.319139][ T10] usb 5-1: SerialNumber: syz [ 95.485180][ T5820] usb 1-1: USB disconnect, device number 2 [ 95.693898][ T1227] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.802059][ T5843] NFSD: Unable to initialize client recovery tracking! (-110) [ 95.802149][ T5843] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 95.802176][ T5843] NFSD: starting 90-second grace period (net f0000565) [ 96.351841][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.451916][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.502667][ T5820] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.517032][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.517086][ T5820] usb 2-1: Product: syz [ 96.517621][ T5820] usb 2-1: Manufacturer: syz [ 96.517673][ T5820] usb 2-1: SerialNumber: syz [ 96.569178][ T988] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.624771][ T10] usb 1-1: New USB device found, idVendor=695c, idProduct=3829, bcdDevice= 1.00 [ 96.649601][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.649691][ T10] usb 1-1: Product: syz [ 96.649727][ T10] usb 1-1: Manufacturer: syz [ 96.649749][ T10] usb 1-1: SerialNumber: syz [ 96.696723][ T10] opera: start downloading fpga firmware dvb-usb-opera1-fpga-01.fw [ 96.710082][ T10] usb 1-1: Direct firmware load for dvb-usb-opera1-fpga-01.fw failed with error -2 [ 96.723272][ T10] usb 1-1: Falling back to sysfs fallback for: dvb-usb-opera1-fpga-01.fw [ 97.392108][ T5850] NFSD: Unable to initialize client recovery tracking! (-110) [ 97.392220][ T5850] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 97.392433][ T5850] NFSD: starting 90-second grace period (net f00003c9) [ 97.620941][ T5851] syz.2.9 (5851): drop_caches: 3 [ 97.790207][ T5876] loop0: detected capacity change from 0 to 32768 [ 97.839873][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 97.840191][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 97.930839][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 97.930851][ T5880] configfs-gadget.g1 gadget.0: Error: no playback and capture channels [ 97.952128][ T5880] udc dummy_udc.0: failed to start g1: -22 [ 97.958117][ T5880] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 97.975197][ T5880] UDC core: g1: couldn't find an available UDC or it's busy [ 97.988745][ T5875] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.988871][ T5875] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.988918][ T5875] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.036041][ T988] usb 2-1: Service connection timeout for: 257 [ 98.036083][ T988] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 98.086047][ T5875] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.098456][ T988] ath9k_htc: Failed to initialize the device [ 98.115161][ T5876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.135576][ T988] usb 2-1: ath9k_htc: USB layer deinitialized [ 98.200071][ T5875] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.224835][ T5724] usb 2-1: USB disconnect, device number 2 [ 98.342576][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 98.368660][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 98.388253][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 98.414638][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 98.424885][ T5875] dummy0 speed is unknown, defaulting to 1000 [ 98.574036][ T5867] warning: `syz.4.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.756413][ T5895] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.780620][ T5895] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.780768][ T5895] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.855671][ T5895] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.171831][ T5820] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 99.332574][ T5820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.336129][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 99.336280][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 99.372006][ T1227] usb 5-1: Service connection timeout for: 262 [ 99.372093][ T1227] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 99.407974][ T1227] ath9k_htc: Failed to initialize the device [ 99.422168][ T1227] usb 5-1: ath9k_htc: USB layer deinitialized [ 99.539117][ T5724] usb 5-1: USB disconnect, device number 2 [ 99.572965][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.612877][ T5888] NFSD: Unable to initialize client recovery tracking! (-110) [ 99.612917][ T5888] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 99.612972][ T5888] NFSD: starting 90-second grace period (net f00003c9) [ 99.733847][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 99.740521][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.025990][ T5908] CIFS: Attempting to mount //127.0.0.1/share [ 100.079363][ T5908] CIFS: VFS: cifs_mount failed w/return code = -112 [ 100.221982][ T5757] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.373037][ T5757] usb 5-1: New USB device found, idVendor=0001, idProduct=0001, bcdDevice= 0.00 [ 100.379299][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.435250][ T5724] psmouse serio2: Failed to reset mouse on : -5 [ 101.778537][ T25] usbhid 4-1:1.0: can't add hid device: -71 [ 101.778707][ T25] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 101.803184][ T25] usb 4-1: USB disconnect, device number 2 [ 101.901073][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.918285][ T5820] usb 2-1: can't set config #1, error -71 [ 101.942302][ T5820] usb 2-1: USB disconnect, device number 3 [ 102.020678][ T5915] NFSD: Failed to start, no listeners configured. [ 102.481857][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.631892][ T5746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.642441][ T25] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 102.652424][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.680590][ T25] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 102.809700][ T5757] usbhid 5-1:1.0: can't add hid device: -71 [ 102.809973][ T5757] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 102.824721][ T5746] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 102.835263][ T5757] usb 5-1: USB disconnect, device number 3 [ 102.849588][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.849660][ T5746] usb 4-1: Product: syz [ 102.849699][ T5746] usb 4-1: Manufacturer: syz [ 102.849720][ T5746] usb 4-1: SerialNumber: syz [ 102.890723][ T5746] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 102.890884][ T5746] usb 4-1: setting power ON [ 102.987502][ T5724] misc userio: Buffer overflowed, userio client isn't keeping up [ 103.368006][ T5926] CIFS: Attempting to mount //127.0.0.1/share [ 103.423296][ T5927] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 104.082493][ T59] usb 2-1: Failed to read usb control message: -71 [ 104.090028][ T59] usb 2-1: Unable to read the bmi data from the device: -71 [ 104.098500][ T59] usb 2-1: unable to get target info from device [ 104.098536][ T59] usb 2-1: could not get target info (-71) [ 104.098781][ T59] usb 2-1: could not probe fw (-71) [ 104.098935][ T25] usb 2-1: USB disconnect, device number 4 [ 104.199846][ T5926] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 104.200151][ T5926] CIFS: VFS: cifs_mount failed w/return code = -11 [ 104.290822][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.976153][ T5746] dvb-usb: bulk message failed: -110 (2/0) [ 105.001250][ T5746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.003721][ T5746] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 105.003869][ T5746] usb 4-1: media controller created [ 105.022603][ T5760] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 105.058219][ T5746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.093082][ T5746] usb 4-1: selecting invalid altsetting 6 [ 105.093149][ T5746] usb 4-1: digital interface selection failed (-22) [ 105.093222][ T5746] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 105.096488][ T5746] usb 4-1: setting power OFF [ 105.174939][ T5760] usb 2-1: not running at top speed; connect to a high speed hub [ 105.174989][ T5760] usb 2-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice= 1.00 [ 105.185194][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 105.185307][ T5760] usb 2-1: Product: syz [ 105.185350][ T5760] usb 2-1: Manufacturer: syz [ 105.185391][ T5760] usb 2-1: SerialNumber: syz [ 105.232451][ T5760] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 105.366550][ T5939] siw: device registration error -23 [ 105.410256][ T5746] dvb-usb: bulk message failed: -71 (2/0) [ 105.410307][ T5746] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 105.416553][ T5746] usb 4-1: setting power ON [ 105.432958][ T5746] dvb-usb: bulk message failed: -71 (2/0) [ 105.442311][ T5746] usb 4-1: analog interface selection failed (-71) [ 105.506566][ T5746] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 105.516624][ T5746] dvb_usb_cxusb 4-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 105.537947][ T5746] usb 4-1: USB disconnect, device number 3 [ 105.613690][ T5943] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.613742][ T5943] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.645486][ T5943] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.654997][ T5943] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 105.665933][ T5760] gspca_sonixj: reg_r err -32 [ 105.670953][ T5760] sonixj 2-1:1.0: probe with driver sonixj failed with error -32 [ 105.679495][ T5760] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 106.259328][ T5951] use of bytesused == 0 is deprecated and will be removed in the future, [ 106.268130][ T5951] use the actual size instead. [ 106.382038][ T5724] misc userio: Buffer overflowed, userio client isn't keeping up [ 106.397957][ T5957] rdma_rxe: rxe_newlink: failed to add veth0 [ 106.692050][ T5746] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.842430][ T5746] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00 [ 106.845230][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.871208][ T5746] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 106.871632][ T5746] gspca_stv06xx: st6422 sensor detected [ 107.130003][ T5746] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 107.152971][ T5746] usb 5-1: USB disconnect, device number 4 [ 107.425338][ T5976] ftl_cs: FTL header not found. [ 107.479564][ T5976] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 107.514468][ T5975] ubi0: attaching mtd0 [ 107.520480][ T5975] ubi0: scanning is finished [ 107.520544][ T5975] ubi0: empty MTD device detected [ 107.578946][ T5981] siw: device registration error -23 [ 107.638723][ T5975] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.647305][ T5975] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.655228][ T5975] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.662634][ T5975] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 107.670637][ T5975] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.670659][ T5975] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 107.670678][ T5975] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3138553450 [ 107.670699][ T5975] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.706392][ T5982] ubi0: background thread "ubi_bgt0d" started, PID 5982 [ 107.719694][ T5973] UBIFS error (pid: 5973): cannot open "ubi0_0", error -19 [ 108.543137][ T5995] ftl_cs: FTL header not found. [ 108.604815][ T5995] block2mtd: mtd2: [/dev/ram0] erase_size = 64KiB [65536] [ 108.626585][ T5995] ubi1: attaching mtd1 [ 108.646168][ T5995] ubi1: scanning is finished [ 108.646218][ T5995] ubi1: empty MTD device detected [ 108.648785][ T5995] ubi1 error: ubi_early_get_peb: no free eraseblocks [ 108.684680][ T5820] usb 2-1: USB disconnect, device number 5 [ 108.745044][ T5995] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 108.753704][ T6001] siw: device registration error -23 [ 108.774972][ T5995] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 108.775067][ T5995] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 108.779365][ T5995] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 108.779516][ T5995] UBIFS error (pid: 5995): cannot open "ubi0_0", error -19 [ 109.151931][ T2268] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.159380][ T5989] NFSD: Unable to initialize client recovery tracking! (-110) [ 109.159400][ T5989] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 109.159413][ T5989] NFSD: starting 90-second grace period (net f00004eb) [ 109.312927][ T2268] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 1.00 [ 109.320013][ T2268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.320086][ T2268] usb 2-1: Product: syz [ 109.320128][ T2268] usb 2-1: Manufacturer: syz [ 109.320170][ T2268] usb 2-1: SerialNumber: syz [ 109.443194][ T6008] NFSD: Failed to start, no listeners configured. [ 109.744599][ T5724] misc userio: Buffer overflowed, userio client isn't keeping up [ 109.776697][ T6021] nvmet: adding nsid 1 to subsystem testnqn [ 109.847126][ T38] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:dc36c4d3-d530-4469-97b3-1724f54f64bf. [ 109.872547][ T6021] nvme nvme0: creating 2 I/O queues. [ 109.883760][ T6021] nvme nvme0: new ctrl: "testnqn" [ 109.983088][ T59] ------------[ cut here ]------------ [ 109.983101][ T59] q->quiesce_depth <= 0 [ 109.983112][ T59] WARNING: block/blk-mq.c:321 at blk_mq_unquiesce_queue+0xdf/0x120, CPU#0: kworker/u8:4/59 [ 110.002774][ T59] Modules linked in: [ 110.006731][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 110.016019][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.026080][ T59] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 110.032806][ T59] RIP: 0010:blk_mq_unquiesce_queue+0xdf/0x120 [ 110.038927][ T59] Code: 48 8b 34 24 e8 f2 04 2b 07 4c 89 ff be 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 77 ed ff ff e8 02 92 09 fd 90 <0f> 0b 90 eb a2 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5a ff ff ff [ 110.058571][ T59] RSP: 0018:ffffc9000200fa08 EFLAGS: 00010093 [ 110.064665][ T59] RAX: ffffffff84be42ae RBX: ffff88802af5d498 RCX: ffff88801b79ddc0 [ 110.072933][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 110.080956][ T59] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 110.088950][ T59] R10: dffffc0000000000 R11: fffff52000401f2c R12: 1ffff110055eba9b [ 110.096956][ T59] R13: dffffc0000000000 R14: ffff88802af5d4d8 R15: ffff88802af5d3d0 [ 110.105027][ T59] FS: 0000000000000000(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 110.114045][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.120677][ T59] CR2: 00007ff05686cd58 CR3: 0000000066d28000 CR4: 00000000003526f0 [ 110.128670][ T59] Call Trace: [ 110.131999][ T59] [ 110.134962][ T59] ? blk_mq_unquiesce_tagset+0x22/0x220 [ 110.140570][ T59] blk_mq_unquiesce_tagset+0x134/0x220 [ 110.146082][ T59] nvme_loop_reset_ctrl_work+0x1c7/0x810 [ 110.151764][ T59] ? process_scheduled_works+0x97a/0x1630 [ 110.157518][ T59] process_scheduled_works+0xc3d/0x1630 [ 110.163104][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.169116][ T59] ? assign_work+0x3cf/0x5d0 [ 110.173812][ T59] worker_thread+0xa47/0xfb0 [ 110.178436][ T59] kthread+0x38b/0x480 [ 110.182521][ T59] ? __pfx_worker_thread+0x10/0x10 [ 110.187644][ T59] ? __pfx_kthread+0x10/0x10 [ 110.192333][ T59] ret_from_fork+0x514/0xb70 [ 110.196932][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 110.202056][ T59] ? __switch_to+0xc89/0x1420 [ 110.206868][ T59] ? __pfx_kthread+0x10/0x10 [ 110.211491][ T59] ret_from_fork_asm+0x1a/0x30 [ 110.216286][ T59] [ 110.219309][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.226605][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 110.235981][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.246092][ T59] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 110.252810][ T59] Call Trace: [ 110.256131][ T59] [ 110.259101][ T59] vpanic+0x56d/0xa70 [ 110.263126][ T59] ? __pfx__printk+0x10/0x10 [ 110.267777][ T59] ? __pfx_vpanic+0x10/0x10 [ 110.272360][ T59] ? is_bpf_text_address+0x292/0x2b0 [ 110.277669][ T59] ? is_bpf_text_address+0x26/0x2b0 [ 110.282997][ T59] panic+0xc5/0xd0 [ 110.286761][ T59] ? __pfx_panic+0x10/0x10 [ 110.291217][ T59] ? ret_from_fork_asm+0x1a/0x30 [ 110.296221][ T59] __warn+0x315/0x4c0 [ 110.300248][ T59] ? blk_mq_unquiesce_queue+0xdf/0x120 [ 110.305737][ T59] ? blk_mq_unquiesce_queue+0xdf/0x120 [ 110.311228][ T59] __report_bug+0x276/0x570 [ 110.315767][ T59] ? check_path+0x21/0x40 [ 110.320108][ T59] ? check_noncircular+0xdb/0x150 [ 110.325156][ T59] ? blk_mq_unquiesce_queue+0xdf/0x120 [ 110.330657][ T59] ? __pfx___report_bug+0x10/0x10 [ 110.335709][ T59] ? lockdep_unlock+0x5c/0xd0 [ 110.340556][ T59] ? __lock_acquire+0x14b9/0x2e50 [ 110.345662][ T59] ? blk_mq_unquiesce_queue+0xdf/0x120 [ 110.351279][ T59] report_bug+0x16b/0x220 [ 110.355647][ T59] ? blk_mq_unquiesce_queue+0xdf/0x120 [ 110.361192][ T59] ? blk_mq_unquiesce_queue+0xe1/0x120 [ 110.366685][ T59] handle_bug+0x9c/0x200 [ 110.370959][ T59] exc_invalid_op+0x1a/0x50 [ 110.375493][ T59] asm_exc_invalid_op+0x1a/0x20 [ 110.380412][ T59] RIP: 0010:blk_mq_unquiesce_queue+0xdf/0x120 [ 110.386539][ T59] Code: 48 8b 34 24 e8 f2 04 2b 07 4c 89 ff be 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 77 ed ff ff e8 02 92 09 fd 90 <0f> 0b 90 eb a2 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5a ff ff ff [ 110.406181][ T59] RSP: 0018:ffffc9000200fa08 EFLAGS: 00010093 [ 110.412301][ T59] RAX: ffffffff84be42ae RBX: ffff88802af5d498 RCX: ffff88801b79ddc0 [ 110.420323][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 110.428322][ T59] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 110.436310][ T59] R10: dffffc0000000000 R11: fffff52000401f2c R12: 1ffff110055eba9b [ 110.444312][ T59] R13: dffffc0000000000 R14: ffff88802af5d4d8 R15: ffff88802af5d3d0 [ 110.452347][ T59] ? blk_mq_unquiesce_queue+0xde/0x120 [ 110.458188][ T59] ? blk_mq_unquiesce_queue+0xde/0x120 [ 110.463699][ T59] ? blk_mq_unquiesce_tagset+0x22/0x220 [ 110.469278][ T59] blk_mq_unquiesce_tagset+0x134/0x220 [ 110.474766][ T59] nvme_loop_reset_ctrl_work+0x1c7/0x810 [ 110.480422][ T59] ? process_scheduled_works+0x97a/0x1630 [ 110.486154][ T59] process_scheduled_works+0xc3d/0x1630 [ 110.491774][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.497774][ T59] ? assign_work+0x3cf/0x5d0 [ 110.502389][ T59] worker_thread+0xa47/0xfb0 [ 110.507063][ T59] kthread+0x38b/0x480 [ 110.511163][ T59] ? __pfx_worker_thread+0x10/0x10 [ 110.516285][ T59] ? __pfx_kthread+0x10/0x10 [ 110.520893][ T59] ret_from_fork+0x514/0xb70 [ 110.525494][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 110.530627][ T59] ? __switch_to+0xc89/0x1420 [ 110.535352][ T59] ? __pfx_kthread+0x10/0x10 [ 110.539987][ T59] ret_from_fork_asm+0x1a/0x30 [ 110.544808][ T59] [ 110.548464][ T59] Kernel Offset: disabled [ 110.552804][ T59] Rebooting in 86400 seconds..