last executing test programs: 17.79760454s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='30000\n\x00', 0x6) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x11, &(0x7f0000001000), 0x2000, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='30001,7f0000200000,7f0000400000\x00', 0x20) write(r0, &(0x7f0000000340)='30002,7f0000200000,7f0000400000\x00', 0x20) write(r0, &(0x7f0000000380)='30003,7f0000200000,7f0000400000\x00', 0x20) 16.882207918s ago: executing program 0 (id=31): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @local}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=172.20.20.170,trsvcid=4420,nqn=testnqn,data_digest\x00 ', 0x48) r2 = accept$inet(r0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/128, 0x80, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="010080008000000000000002001000"/129, 0x80, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 15.25197789s ago: executing program 0 (id=34): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0xc0, 0x10, 0x2, "ffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="75736230000000000000000000000000031000"/40) 11.837785871s ago: executing program 1 (id=37): timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) 11.330699796s ago: executing program 1 (id=40): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040000000000000000000010902200001010080320904000002080650000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x20, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000500)="058000321f000000544f53484942412043442d524f4d20202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000600)="55534253010000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000700)="55534253020000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000800)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000900)="55534253030000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000a00)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000b00)="55534253040000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000c00)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000d00)="55534253050000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000e00)="55534253060000000000000000") syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000f00)='\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000001000)='USBS\a\x00\x00\x00\x00\x00\x00\x00\x00') nanosleep(&(0x7f0000001100)={0x1}, 0x0) 10.00330121s ago: executing program 4 (id=43): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000200)={0x44, &(0x7f0000000250)={0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)={0x84, &(0x7f0000000450)={0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 9.51229545s ago: executing program 3 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000180)={'wlan1\x00', @ifru_addrs=@ethernet={0x1, @local}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 8.657187985s ago: executing program 0 (id=48): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 7.134504241s ago: executing program 0 (id=50): timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) 6.989818478s ago: executing program 3 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/hid/drivers/sony/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0003 1234 5678 00000010\x00', 0x18) r1 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000403412785600010102030109022200010100a0320904000001030000000921110100012222000705810308000a"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.981855663s ago: executing program 4 (id=52): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04050400c90016"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0401550c00"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0401520c00"], 0x7) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04016d0c00"], 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="040e04016d0c00"], 0x7) write(r0, &(0x7f0000000c00)="29000000010001", 0x7) nanosleep(&(0x7f0000000f00)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401082000"], 0x7) 6.907249469s ago: executing program 0 (id=53): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000003140500000000000000000009000200727865300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 6.547678015s ago: executing program 4 (id=54): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x60600, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1.2\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) 6.489388903s ago: executing program 2 (id=55): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) 6.020089263s ago: executing program 4 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000700)={'wlan0\x00', @ifru_hwaddr=@random="08021100"}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x1, 0x0, 0x0, 0x1}}}, 0x4f) 5.773330894s ago: executing program 1 (id=57): r0 = syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000140)={0x21, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000340)='\x00'/16) 4.509814217s ago: executing program 4 (id=58): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c01031000ffffffffffffffff"], 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="0d000000010001", 0x7) read(r0, &(0x7f0000000300), 0x100) (async) write(r0, &(0x7f0000000400)="2d000000010001", 0x7) read(r0, &(0x7f0000000500), 0x100) (async) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0200200b000700060001030009100000"], 0x10) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="0200204500410006000c96c298d84539a1f4a033eb2d817d0377f240a463e5e6bcf847422ce1f2d1176bf551bf376840b6cbce5e316b5733ce2b169e0f7c4aebe78e9b7f1afee242e34f"], 0x49) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 4.439475225s ago: executing program 2 (id=59): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010400000000") (async) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000140)="010401020000") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000180)="0105010100") (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000001c0)="0108010401000000") (async) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/spi_master/spi0/slave\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='spidev\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/spi_master/spi0/target\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='spidev\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/spi_master/spi1/slave\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='spidev\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/spi_master/spi1/target\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='spidev\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/spi_master/spi2/slave\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='spidev\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/spi_master/spi2/target\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='spidev\x00', 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./spidev\x00', 0x81b6, 0x9900) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./spidev\x00', 0x2, 0x0) ioctl(r7, 0x40016b01, &(0x7f0000000700)="01") 3.803900993s ago: executing program 1 (id=60): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3.68498878s ago: executing program 4 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./rpc_pipefs\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/threads\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='8\n', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) read(r5, &(0x7f0000001000), 0x40a) write(r5, &(0x7f0000001000), 0x40a) read(r5, &(0x7f0000002000), 0x40a) write(r5, &(0x7f0000002000), 0x40a) read(r6, &(0x7f0000001000), 0x40a) write(r6, &(0x7f0000001000), 0x40a) read(r6, &(0x7f0000002000), 0x40a) write(r6, &(0x7f0000002000), 0x40a) read(r7, &(0x7f0000001000), 0x40a) write(r7, &(0x7f0000001000), 0x40a) read(r7, &(0x7f0000002000), 0x40a) write(r7, &(0x7f0000002000), 0x40a) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800)='nfs4\x00', 0x0, &(0x7f0000000900)='clientaddr=127.0.0.1,addr=127.0.0.1\x00') 2.294658025s ago: executing program 1 (id=62): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1144, @loopback}, 0x10) listen(r0, 0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testnqn,data_digest\x00', 0x44) (async) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000300)=""/128, 0x80) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000500)="01008000", 0x4}], 0x1) 2.274308542s ago: executing program 3 (id=63): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) 1.948858109s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='30000\n\x00', 0x6) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) mmap(&(0x7f0000001000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, &(0x7f0000001000), 0x10000, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x13, 0x0, 0x0) process_madvise(r3, &(0x7f0000004000)=[{&(0x7f0000200000), 0x200000}], 0x1, 0xe, 0x0) write(r0, &(0x7f0000000300)='30001,0x7f0000200000,0x7f0000400000\x00', 0x24) 1.547162463s ago: executing program 2 (id=65): mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x8) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x8) mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x8) mmap(&(0x7f0000000000/0x1000000)=nil, 0x20000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x20000000, 0x8) mmap(&(0x7f0000000000/0x100000)=nil, 0x100000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f0000019000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x1) mprotect(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000000000/0x100000)=nil, 0x100000) 1.29312065s ago: executing program 2 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='md0\n', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='raid1\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000002c0)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1', 0x3) write(0xffffffffffffffff, &(0x7f00000003c0)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='active\n', 0x7) 1.118708976s ago: executing program 3 (id=67): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x8, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a1010901"}}, 0x120) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 883.54413ms ago: executing program 2 (id=68): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="010000000300000001000000000000000000000000000000020000000000000000000000000000000000000000000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="010000000300000001000000000000000000000000000000010000000000000000000000000000000000000000000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="010000000300000001000000000000000000000000000000000000000000000000000000000000000000000000000000020000000100"/72, 0x48}], 0x1}}], 0x3, 0x0) 553.75402ms ago: executing program 1 (id=69): r0 = syz_usb_connect(0x2, 0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x20, 0x81, 0x22, "0000010100"/34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000600)=0x1) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000700)='\x00'/16) 472.27297ms ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='loop\x00', 0x4) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r1, &(0x7f0000000340)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/nvme/nvme0/reset_controller\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\x00', 0x1) 0s ago: executing program 3 (id=71): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140), &(0x7f0000001000)={0x34, &(0x7f0000001100)={0x20, 0x11}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000002c0), &(0x7f0000002000)={0x34, &(0x7f0000002100)={0x40, 0x11}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440), &(0x7f0000003000)={0x34, &(0x7f0000003100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000005c0), &(0x7f0000004000)={0x34, &(0x7f0000004100)={0x40, 0x10}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000740), &(0x7f0000005000)={0x34, &(0x7f0000005100)={0x0, 0x6}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000008c0), &(0x7f0000006000)={0x34, &(0x7f0000006100)={0x20, 0x18, 0x1, ')'}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000a40), &(0x7f0000007000)={0x34, &(0x7f0000007100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000bc0), &(0x7f0000008000)={0x34, &(0x7f0000008100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40), &(0x7f0000009000)={0x34, &(0x7f0000009100), &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000ec0), &(0x7f000000a000)={0x34, &(0x7f000000a100)={0x0, 0x7}, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001040)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001080), &(0x7f000000b000)={0x34, &(0x7f000000b100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f00000010c0), &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001240), &(0x7f000000c000)={0x34, &(0x7f000000c100)={0x0, 0xf}, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000013c0), &(0x7f000000d000)={0x34, &(0x7f000000d100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001540), &(0x7f000000e000)={0x34, &(0x7f000000e100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000016c0), &(0x7f000000f000)={0x34, &(0x7f000000f100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001840), &(0x7f0000010000)={0x34, &(0x7f0000010100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)}) syz_usb_control_io$lan78xx(r0, &(0x7f00000019c0), &(0x7f0000011000)={0x34, &(0x7f0000011100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001b40), &(0x7f0000012000)={0x34, &(0x7f0000012100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001cc0), &(0x7f0000013000)={0x34, &(0x7f0000013100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001e40), &(0x7f0000014000)={0x34, &(0x7f0000014100)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40), &(0x7f0000001f80)}) syz_usb_control_io$lan78xx(r0, &(0x7f0000001fc0), &(0x7f0000015000)={0x34, &(0x7f0000015100), &(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002140), &(0x7f0000002180)}) nanosleep(&(0x7f0000017000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000016000)=@nullb, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000018000)='mem', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 91.481341][ T5580] cgroup: Unknown subsys name 'net' [ 91.703861][ T5580] cgroup: Unknown subsys name 'cpuset' [ 91.766973][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.162470][ T49] cfg80211: failed to load regulatory.db [ 93.873115][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.539228][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.559365][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.567894][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.594292][ T4908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.631632][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.640690][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.649773][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.663804][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.669180][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.699919][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.707944][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.721312][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.723851][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.741987][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.758280][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.759220][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.762903][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.763724][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.773955][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.777808][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.791258][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.802687][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.802846][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.805226][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.805658][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.947587][ T5602] Bluetooth: hci2: command tx timeout [ 99.026640][ T5602] Bluetooth: hci4: command tx timeout [ 99.026649][ T5600] Bluetooth: hci0: command tx timeout [ 99.106381][ T5602] Bluetooth: hci1: command tx timeout [ 99.106391][ T5600] Bluetooth: hci3: command tx timeout [ 99.610964][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.612548][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.625927][ T5593] bridge_slave_0: entered allmulticast mode [ 99.632858][ T5593] bridge_slave_0: entered promiscuous mode [ 99.698868][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.699263][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.700270][ T5593] bridge_slave_1: entered allmulticast mode [ 99.715254][ T5593] bridge_slave_1: entered promiscuous mode [ 99.905667][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.907559][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.908068][ T5595] bridge_slave_0: entered allmulticast mode [ 99.914672][ T5595] bridge_slave_0: entered promiscuous mode [ 99.964257][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.990683][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.991086][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.991556][ T5595] bridge_slave_1: entered allmulticast mode [ 99.997287][ T5595] bridge_slave_1: entered promiscuous mode [ 100.003145][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.003490][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.004849][ T5594] bridge_slave_0: entered allmulticast mode [ 100.029496][ T5594] bridge_slave_0: entered promiscuous mode [ 100.071758][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.112594][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.113031][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.113504][ T5594] bridge_slave_1: entered allmulticast mode [ 100.131135][ T5594] bridge_slave_1: entered promiscuous mode [ 100.174744][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.175074][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.175576][ T5592] bridge_slave_0: entered allmulticast mode [ 100.185256][ T5592] bridge_slave_0: entered promiscuous mode [ 100.237185][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.237605][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.238056][ T5597] bridge_slave_0: entered allmulticast mode [ 100.245341][ T5597] bridge_slave_0: entered promiscuous mode [ 100.279812][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.280243][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.281451][ T5592] bridge_slave_1: entered allmulticast mode [ 100.290778][ T5592] bridge_slave_1: entered promiscuous mode [ 100.311297][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.335975][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.339837][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.340369][ T5597] bridge_slave_1: entered allmulticast mode [ 100.352216][ T5597] bridge_slave_1: entered promiscuous mode [ 100.365204][ T5593] team0: Port device team_slave_0 added [ 100.391022][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.408905][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.444511][ T5593] team0: Port device team_slave_1 added [ 100.488817][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.533822][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.577832][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.603222][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.615842][ T5595] team0: Port device team_slave_0 added [ 100.640059][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.644618][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.644637][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.644684][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.707355][ T5595] team0: Port device team_slave_1 added [ 100.713702][ T5594] team0: Port device team_slave_0 added [ 100.733331][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.733409][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.733470][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.802612][ T5594] team0: Port device team_slave_1 added [ 100.837733][ T5592] team0: Port device team_slave_0 added [ 100.876727][ T5597] team0: Port device team_slave_0 added [ 100.888982][ T5592] team0: Port device team_slave_1 added [ 100.892113][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.892151][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.892225][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.950484][ T5597] team0: Port device team_slave_1 added [ 100.972828][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.972909][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.972985][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.980292][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.980335][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.980409][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.026291][ T5602] Bluetooth: hci2: command tx timeout [ 101.106507][ T5602] Bluetooth: hci0: command tx timeout [ 101.106567][ T5600] Bluetooth: hci4: command tx timeout [ 101.186400][ T5602] Bluetooth: hci1: command tx timeout [ 101.187097][ T5600] Bluetooth: hci3: command tx timeout [ 101.495949][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.496031][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.496061][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.572303][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.575145][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.575230][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.628085][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.629243][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.629273][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.677316][ T5593] hsr_slave_0: entered promiscuous mode [ 101.682735][ T5593] hsr_slave_1: entered promiscuous mode [ 101.690250][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.690333][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.690411][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.745480][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.745566][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.745635][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.909235][ T5595] hsr_slave_0: entered promiscuous mode [ 101.912730][ T5595] hsr_slave_1: entered promiscuous mode [ 101.915486][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 101.915814][ T5595] Cannot create hsr debugfs directory [ 101.992761][ T5594] hsr_slave_0: entered promiscuous mode [ 101.996624][ T5594] hsr_slave_1: entered promiscuous mode [ 102.004376][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.004472][ T5594] Cannot create hsr debugfs directory [ 102.174460][ T5592] hsr_slave_0: entered promiscuous mode [ 102.179373][ T5592] hsr_slave_1: entered promiscuous mode [ 102.187356][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 102.187465][ T5592] Cannot create hsr debugfs directory [ 102.219203][ T5597] hsr_slave_0: entered promiscuous mode [ 102.223000][ T5597] hsr_slave_1: entered promiscuous mode [ 102.225688][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 102.225761][ T5597] Cannot create hsr debugfs directory [ 103.034163][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.098951][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.106534][ T5602] Bluetooth: hci2: command tx timeout [ 103.123707][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.160622][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.172372][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.187396][ T5602] Bluetooth: hci0: command tx timeout [ 103.187474][ T5602] Bluetooth: hci4: command tx timeout [ 103.212032][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.236801][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.266449][ T5600] Bluetooth: hci1: command tx timeout [ 103.266536][ T5600] Bluetooth: hci3: command tx timeout [ 103.301759][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.433018][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.471221][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.485213][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.532276][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.550055][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.584370][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.614568][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.640500][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.835688][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.872391][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.890497][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.930259][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.948837][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.980238][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.011911][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.040887][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.204080][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.236972][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.268386][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.301577][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.311877][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.339835][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.371275][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.415211][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.439215][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.615767][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.639915][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.653390][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.691234][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.702113][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.718043][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.761379][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.780227][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.820040][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.868918][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.870085][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.923840][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.949834][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.957146][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.081416][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.142411][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.143004][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.182146][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.182747][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.186413][ T5602] Bluetooth: hci2: command tx timeout [ 105.223259][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.276785][ T5600] Bluetooth: hci0: command tx timeout [ 105.276848][ T5602] Bluetooth: hci4: command tx timeout [ 105.346322][ T5600] Bluetooth: hci3: command tx timeout [ 105.352541][ T5602] Bluetooth: hci1: command tx timeout [ 105.412342][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.493973][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.494498][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.533297][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.582157][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.585527][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.694863][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.722951][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.819516][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.835184][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.892113][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.901170][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.998683][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.109896][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.118696][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.186877][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.187068][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.661955][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.144125][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.183312][ T5593] veth0_vlan: entered promiscuous mode [ 107.310654][ T5593] veth1_vlan: entered promiscuous mode [ 107.423750][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.595868][ T5593] veth0_macvtap: entered promiscuous mode [ 107.623178][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.662894][ T5593] veth1_macvtap: entered promiscuous mode [ 107.691444][ T5594] veth0_vlan: entered promiscuous mode [ 107.766063][ T5594] veth1_vlan: entered promiscuous mode [ 107.821055][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.872699][ T5592] veth0_vlan: entered promiscuous mode [ 107.893695][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.000999][ T5592] veth1_vlan: entered promiscuous mode [ 108.162183][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.257307][ T5595] veth0_vlan: entered promiscuous mode [ 108.290497][ T5594] veth0_macvtap: entered promiscuous mode [ 108.468498][ T5594] veth1_macvtap: entered promiscuous mode [ 108.528616][ T5595] veth1_vlan: entered promiscuous mode [ 108.622254][ T5592] veth0_macvtap: entered promiscuous mode [ 108.672275][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.722516][ T5592] veth1_macvtap: entered promiscuous mode [ 108.752632][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.810966][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.819938][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.928521][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.979635][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.038049][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.047896][ T5595] veth0_macvtap: entered promiscuous mode [ 109.055979][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.186535][ T5595] veth1_macvtap: entered promiscuous mode [ 109.436560][ T5597] veth0_vlan: entered promiscuous mode [ 109.756036][ T5597] veth1_vlan: entered promiscuous mode [ 109.871314][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.960239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.971590][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.120536][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.209089][ T1049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.483755][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.486786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.542597][ T5597] veth0_macvtap: entered promiscuous mode [ 110.773524][ T5597] veth1_macvtap: entered promiscuous mode [ 110.911825][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.913788][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.144149][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.201723][ T5793] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 111.212869][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.212891][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.325720][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.381240][ T5799] gretap0: entered promiscuous mode [ 111.416820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.424865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.453572][ T5799] erspan0: entered promiscuous mode [ 111.785662][ T5799] syz_tun: entered promiscuous mode [ 111.854949][ T5800] ip6gretap0: entered promiscuous mode [ 111.860609][ T1557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.860668][ T1557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.049742][ T5721] bond_slave_0: entered promiscuous mode [ 112.105163][ T5721] bond_slave_1: entered promiscuous mode [ 112.311863][ T5599] team_slave_0: entered promiscuous mode [ 112.343998][ T5599] team_slave_1: entered promiscuous mode [ 112.358414][ T5730] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.409584][ T5599] dummy0: entered promiscuous mode [ 112.434619][ T5806] batadv0: entered promiscuous mode [ 112.456342][ T5803] veth0: entered promiscuous mode [ 112.584421][ T5807] veth1: entered promiscuous mode [ 112.616755][ T3414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.617840][ T33] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.648438][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.681818][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.723628][ T5730] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.776916][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.790929][ T5730] usb 3-1: Product: syz [ 112.790954][ T5730] usb 3-1: Manufacturer: syz [ 112.790969][ T5730] usb 3-1: SerialNumber: syz [ 112.813823][ T3414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.929997][ T1049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.283368][ T5800] veth0_to_bridge: entered promiscuous mode [ 113.370619][ T5800] veth1_to_bridge: entered promiscuous mode [ 113.683609][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.684040][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.946942][ T3282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.018139][ T3282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.678739][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.689764][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.726008][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.229433][ T5815] nvme nvme0: failed to connect socket: -512 [ 115.501304][ T1049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.612750][ T1557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.627550][ T1557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.644923][ T1557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.153513][ T1049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.168219][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.176990][ T1557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.178089][ T1557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.705555][ T5815] syz.1.2 (5815) used greatest stack depth: 18736 bytes left [ 116.886855][ T5730] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 116.900465][ T5730] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 116.900662][ T5730] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.994908][ T5730] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.048875][ T3346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.052993][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.163355][ T5730] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 117.712364][ T1250] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.125353][ T5730] usb 3-1: USB disconnect, device number 2 [ 118.137720][ T1250] usb 5-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 118.183747][ T1250] usb 5-1: config index 0 descriptor too short (expected 39, got 25) [ 118.204593][ T1250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.206263][ T1250] usb 5-1: Product: syz [ 118.206283][ T1250] usb 5-1: Manufacturer: syz [ 118.206299][ T1250] usb 5-1: SerialNumber: syz [ 119.501165][ T5844] lo speed is unknown, defaulting to 1000 [ 119.610089][ T1250] dvb_usb_rtl28xxu 5-1:1.0: chip type detection failed -71 [ 119.617551][ T1250] dvb_usb_rtl28xxu 5-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 119.649958][ T1250] usb 5-1: USB disconnect, device number 2 [ 119.799166][ T5844] lo speed is unknown, defaulting to 1000 [ 119.893866][ T5844] lo speed is unknown, defaulting to 1000 [ 120.161602][ T5730] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.297414][ T5810] NFSD: Unable to initialize client recovery tracking! (-110) [ 120.319022][ T5730] usb 3-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice= 1.00 [ 120.338947][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.342905][ T5810] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 120.342955][ T5810] NFSD: starting 90-second grace period (net f0000442) [ 120.519435][ T5730] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 121.172895][ T5857] loop0: detected capacity change from 0 to 2048 [ 121.541422][ T5844] infiniband syz0: set active [ 121.579749][ T5844] infiniband syz0: added lo [ 121.599877][ T5730] lo speed is unknown, defaulting to 1000 [ 121.650184][ T5844] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 121.685022][ T5844] infiniband syz0: Couldn't open port 1 [ 121.705270][ T5844] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.705309][ T5844] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.705351][ T5844] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.885373][ T5844] RDS/IB: syz0: added [ 121.901429][ T5844] smc: adding ib device syz0 with port count 1 [ 121.901783][ T5844] smc: ib device syz0 port 1 has no pnetid [ 121.952132][ T5730] lo speed is unknown, defaulting to 1000 [ 122.142477][ T5844] lo speed is unknown, defaulting to 1000 [ 122.591573][ T5730] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.692111][ T5730] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.868721][ T5863] ceph: No mds server is up or the cluster is laggy [ 122.941392][ T5866] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 122.978587][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 124.727680][ T5599] usb 3-1: USB disconnect, device number 3 [ 124.837331][ T5875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.258897][ T5844] lo speed is unknown, defaulting to 1000 [ 125.476313][ T997] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 125.546394][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.648421][ T997] usb 2-1: not running at top speed; connect to a high speed hub [ 125.648514][ T997] usb 2-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 2.00 [ 125.659871][ T997] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.659977][ T997] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 125.728172][ T997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.728252][ T997] usb 2-1: Product: syz [ 125.728268][ T997] usb 2-1: Manufacturer: syz [ 125.728283][ T997] usb 2-1: SerialNumber: syz [ 125.759056][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 125.768882][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.938955][ T5898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.990199][ T5898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.191023][ T5901] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 126.280523][ T997] usb 2-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 126.352734][ T5844] lo speed is unknown, defaulting to 1000 [ 126.541317][ T5914] nvmet: adding nsid 1 to subsystem testnqn [ 126.715894][ T9] ljca 3-1:1.0: enumerate GPIO error [ 126.740274][ T9] ljca 3-1:1.0: probe with driver ljca failed with error -22 [ 127.178314][ T1557] IPVS: starting estimator thread 0... [ 127.304183][ T5926] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 127.320719][ T5844] lo speed is unknown, defaulting to 1000 [ 127.333921][ T5923] IPVS: using max 9 ests per chain, 21600 per kthread [ 127.779133][ T5599] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.907462][ T5920] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 127.954489][ T5599] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 127.966053][ T5599] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 127.976315][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.058249][ T5928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 128.102895][ T5599] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 128.110817][ T5599] gspca_mr97310a: reg write [21] error -22 [ 128.110905][ T5599] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -22 [ 128.426746][ T5844] lo speed is unknown, defaulting to 1000 [ 128.616943][ T5599] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.788931][ T5599] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 128.812861][ T5599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.328907][ T5599] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, be:55:1a:2d:e3:a6 [ 129.784434][ T5728] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 129.789399][ T9] usb 3-1: USB disconnect, device number 4 [ 129.967575][ T5728] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 130.130223][ T5728] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 130.130375][ T5728] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 130.130400][ T5728] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 130.130482][ T5728] usb 4-1: config 250 has no interface number 0 [ 130.130534][ T5728] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 is Bulk; changing to Interrupt [ 130.130561][ T5728] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 is Bulk; changing to Interrupt [ 130.130646][ T5728] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 130.130678][ T5728] usb 4-1: config 250 interface 228 has no altsetting 0 [ 130.500141][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 131.292671][ T997] dvb_usb_rtl28xxu 2-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 131.497038][ T5729] usb 5-1: USB disconnect, device number 3 [ 131.588864][ T997] usb 2-1: USB disconnect, device number 2 [ 132.483887][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.558767][ T5728] usb 4-1: can't set config #250, error -71 [ 132.664183][ T5728] usb 4-1: USB disconnect, device number 2 [ 132.956466][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.088620][ T5962] nvmet: disable ns before setting buffered_io value. [ 133.147858][ T9] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 133.158906][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.194865][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230558][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.296949][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 133.479735][ T5963] rdma_rxe: rxe_newlink: failed to add veth0 [ 133.524455][ T9] scsi host1: usb-storage 2-1:1.0 [ 134.196290][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.350160][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.350315][ T9] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 134.353717][ T9] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.365356][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.365412][ T9] usb 5-1: Product: syz [ 134.365429][ T9] usb 5-1: Manufacturer: syz [ 134.365445][ T9] usb 5-1: SerialNumber: syz [ 134.506650][ T5981] rdma_rxe: rxe_newlink: failed to add veth0 [ 134.608872][ T5943] usb 1-1: USB disconnect, device number 2 [ 134.687354][ T5943] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 134.784867][ T5986] Bluetooth: ISO socket layer initialized [ 135.237566][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 136.008519][ T5997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.189001][ T3346] scsi 1:0:0:0: CD-ROM TOSHIBA CD-ROM 1.00 PQ: 0 ANSI: 0 [ 136.430686][ T9] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 137.316594][ T5599] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.345912][ T6016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.469353][ T5599] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 137.507116][ T5599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.517577][ T5599] usb 4-1: Product: syz [ 137.517600][ T5599] usb 4-1: Manufacturer: syz [ 137.517630][ T5599] usb 4-1: SerialNumber: syz [ 137.841500][ T5599] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 138.031766][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.165694][ T9] usb 5-1: USB disconnect, device number 4 [ 138.260880][ T6012] nvme nvme0: failed to connect socket: -512 [ 138.489044][ T5325] usb 2-1: USB disconnect, device number 3 [ 138.749528][ T3346] sr 1:0:0:0: [sr0] scsi-1 drive [ 138.775552][ T3346] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 139.075535][ T6038] Bluetooth: MGMT ver 1.23 [ 139.155101][ T5600] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 139.155429][ T5600] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 139.381085][ T5599] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.565587][ T5599] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 139.582895][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.997392][ C1] ljca 3-1:1.0: cmd ack mismatch error [ 140.014303][ C1] ljca 3-1:1.0: cmd ack mismatch error [ 140.039188][ T5599] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 140.276175][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 141.036877][ T997] usb 4-1: USB disconnect, device number 3 [ 141.273323][ T3346] sr 1:0:0:0: Attached scsi generic sg1 type 5 [ 141.591868][ T5599] usb 3-1: USB disconnect, device number 5 [ 142.058794][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.275840][ T6059] nvme nvme0: failed to connect socket: -512 [ 143.026293][ T5729] wiimote 0005:057E:0306.0001: unbalanced collection at end of report description [ 143.086891][ T5729] wiimote 0005:057E:0306.0001: HID parse failed [ 143.090205][ T6051] NFSD: Failed to start, no listeners configured. [ 143.095727][ T5729] wiimote 0005:057E:0306.0001: probe with driver wiimote failed with error -22 [ 143.151593][ T6007] infiniband rxe0: set active [ 143.156578][ T6007] infiniband rxe0: added veth0 [ 143.319258][ T6007] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 143.333931][ T6007] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 143.333993][ T6007] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 143.539744][ T57] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000024: 0000 [#1] SMP KASAN PTI [ 143.551725][ T57] KASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127] [ 143.560195][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.570048][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.580151][ T57] Workqueue: nvme-reset-wq nvme_loop_reset_ctrl_work [ 143.586917][ T57] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 143.592866][ T57] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 143.593616][ T33] nvmet: connect request for invalid subsystem testnqn! [ 143.598019][ T6087] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 143.627291][ T57] RSP: 0018:ffffc9000123f8c8 EFLAGS: 00010206 [ 143.633408][ T57] RAX: dffffc0000000000 RBX: ffffffff8b57cf93 RCX: 8000000000000001 [ 143.641426][ T57] RDX: 0000000000000000 RSI: ffffffff8b57cf93 RDI: 0000000000000024 [ 143.649435][ T57] RBP: ffffc9000123fa38 R08: 0000000000000001 R09: 0000000000000000 [ 143.657441][ T57] R10: dffffc0000000000 R11: ffffed1007544acf R12: 0000000000000120 [ 143.665441][ T57] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000001 [ 143.673449][ T57] FS: 0000000000000000(0000) GS:ffff888125cd5000(0000) knlGS:0000000000000000 [ 143.682397][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.689005][ T57] CR2: 00007fd4643a1000 CR3: 0000000042a12000 CR4: 00000000003526f0 [ 143.697022][ T57] Call Trace: [ 143.700359][ T57] [ 143.703343][ T57] __kasan_check_byte+0x12/0x40 [ 143.708243][ T57] lock_acquire+0x7d/0x350 [ 143.712707][ T57] ? __pfx___flush_work+0x10/0x10 [ 143.717759][ T57] ? rcu_is_watching+0x16/0xb0 [ 143.722571][ T57] rt_spin_lock+0x83/0x400 [ 143.727053][ T57] ? blk_mq_quiesce_queue+0x2f/0x190 [ 143.732354][ T57] ? __pfx_rt_spin_lock+0x10/0x10 [ 143.737396][ T57] ? enable_work+0x17f/0x230 [ 143.742008][ T57] ? lockdep_hardirqs_on+0x7b/0x110 [ 143.747224][ T57] ? enable_work+0x1fd/0x230 [ 143.751879][ T57] blk_mq_quiesce_queue+0x2f/0x190 [ 143.757084][ T57] nvme_loop_reset_ctrl_work+0x1cf/0x810 [ 143.762772][ T57] ? process_scheduled_works+0x97a/0x1630 [ 143.767148][ T997] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.776003][ T57] process_scheduled_works+0xc3d/0x1630 [ 143.781625][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.782607][ T6007] RDS/IB: rxe0: added [ 143.785423][ T6007] smc: adding ib device rxe0 with port count 1 [ 143.785658][ T6007] smc: ib device rxe0 port 1 has no pnetid [ 143.803898][ T57] ? assign_work+0x3cf/0x5d0 [ 143.808552][ T57] worker_thread+0xa47/0xfb0 [ 143.813314][ T57] ? __kthread_parkme+0x71/0x1f0 [ 143.818319][ T57] kthread+0x38b/0x470 [ 143.822443][ T57] ? __pfx_worker_thread+0x10/0x10 [ 143.827609][ T57] ? __pfx_kthread+0x10/0x10 [ 143.832259][ T57] ret_from_fork+0x514/0xb70 [ 143.836905][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 143.842053][ T57] ? __switch_to+0xc89/0x1420 [ 143.846789][ T57] ? __pfx_kthread+0x10/0x10 [ 143.851418][ T57] ret_from_fork_asm+0x1a/0x30 [ 143.856229][ T57] [ 143.859287][ T57] Modules linked in: [ 143.863323][ T57] ---[ end trace 0000000000000000 ]--- [ 143.877282][ T57] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 143.883487][ T57] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 143.883608][ T57] RSP: 0018:ffffc9000123f8c8 EFLAGS: 00010206 [ 143.883632][ T57] RAX: dffffc0000000000 RBX: ffffffff8b57cf93 RCX: 8000000000000001 [ 143.883650][ T57] RDX: 0000000000000000 RSI: ffffffff8b57cf93 RDI: 0000000000000024 [ 143.883943][ T57] RBP: ffffc9000123fa38 R08: 0000000000000001 R09: 0000000000000000 [ 143.884010][ T57] R10: dffffc0000000000 R11: ffffed1007544acf R12: 0000000000000120 [ 143.884027][ T57] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000001 [ 143.884042][ T57] FS: 0000000000000000(0000) GS:ffff888125cd5000(0000) knlGS:0000000000000000 [ 143.884119][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.884863][ T57] CR2: 00007fd4643a1000 CR3: 0000000026138000 CR4: 00000000003526f0 [ 143.884895][ T57] Kernel panic - not syncing: Fatal exception [ 143.980910][ T57] Kernel Offset: disabled [ 143.985303][ T57] Rebooting in 86400 seconds..