last executing test programs: 14.354841313s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x50, {0x50, 0x22, "05010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) syz_usb_control_io(r0, &(0x7f00000001c0), 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 11.730185678s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000800)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/component_size\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='4096\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='run\x00', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/serialize_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='1\x00', 0x1) 9.458113608s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,reconnect_delay=1\x00', 0xb3) clock_nanosleep(0x0, 0x0, &(0x7f0000000b00)={0x2}, 0x0) getpid() close(r5) 9.17178319s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x40) pwrite64(r0, &(0x7f0000000300)="00b00000", 0x4, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='lpc_ich\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 b\x00', 0x29) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/drivers/lpc_ich/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0000:00:02.0\x00', 0xc) 8.977049622s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='serial8250\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/serial8250/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='serial8250\x00', 0xa) 8.403374686s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='dummy_udc.1', 0xb) nanosleep(&(0x7f00000007c0)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000800), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) 8.22424351s ago: executing program 1 (id=13): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) 8.223207581s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000300)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000000c0)='\x00\x00TO', 0x4) read(r1, &(0x7f0000000040)=""/4, 0x4) write(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4) read(r1, &(0x7f0000000044)=""/4, 0x4) write(r2, &(0x7f0000000340)="68488822", 0x4) read(r1, &(0x7f0000000048)=""/4, 0x4) write(r2, &(0x7f0000000380)="e800f00f", 0x4) read(r1, &(0x7f000000004c)=""/4, 0x4) write(r2, &(0x7f00000003c0)="2000f01f", 0x4) read(r1, &(0x7f0000000050)=""/4, 0x4) write(r2, &(0x7f0000000400)="00100000", 0x4) read(r1, &(0x7f0000000024)=""/4, 0x4) write(r2, &(0x7f0000000440)="00101000", 0x4) read(r1, &(0x7f0000000028)=""/4, 0x4) write(r2, &(0x7f0000000480)="00040002", 0x4) read(r1, &(0x7f0000000100)=""/4, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dwc2-pci\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) 7.487739856s ago: executing program 2 (id=15): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vcan0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x47, 0x0, 0x0, {0x0, @hdata, {0x0, @random}, @hdata, {0x0, @random}}}}) 7.000073758s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) 6.879775307s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='disk\x00', 0x6) 6.696244726s ago: executing program 2 (id=19): syz_usb_connect$uac2(0x5, 0xb9, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2}, @format_type_ii_discrete={0x2b}]}, {{0x9, 0x5, 0x1, 0x5, 0x400, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x0, 0x1, 0x0, 0x2}, @format_type_ii_discrete={0x2b}]}, {{0x9, 0x5, 0x82, 0x5, 0x400, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1]}) 6.688467811s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 6.406956391s ago: executing program 3 (id=22): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./sda\x00', 0x81ff, 0x800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127b, &(0x7f0000000000)={0x0, 0x1000}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)) fallocate(r0, 0x10, 0x0, 0x1000) 6.15015489s ago: executing program 3 (id=23): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05b10000000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02c08120000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02000000000000000000") 4.979589204s ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"2104250000c0fe"}}], 0x18}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.989719775s ago: executing program 1 (id=25): syz_usb_connect(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000200)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) 3.763231748s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000100)='disk', 0x4, 0x0) 3.059251538s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) 2.791507562s ago: executing program 3 (id=28): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='id_ext=0000000000000000,ioc_guid=0000000000000000,dgid=fe800000000000000000000000000000,pkey=ffff,service_id=0000000000000000\x00', 0x7c) 2.010371738s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x5) 527.97271ms ago: executing program 3 (id=30): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000100)='ffffffff0000000000000000000000000000000000000000') ioctl(r0, 0x40186f40, &(0x7f0000000100)='ffffffff0100000000000000000000000000000000000000') ioctl(r0, 0x40186f40, &(0x7f0000000100)='ffffffff0200000000000000000000000000000000000000') 319.43591ms ago: executing program 3 (id=31): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x60000, 0x900) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000100)="000000000000000000000000000000000000000000000000000000000100000000000000010000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r0, 0x40140921, &(0x7f0000000180)="0000000001000000010000000000000006000000") ioctl(r0, 0x400c0930, &(0x7f00000001c0)="000000000010000000000000") 0s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x0, 0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026100030100c000090400000101010000070581030800010904010000010200000904010101010200000b2402010203180144ac00070501010002010904020000010200000904020101010200000b2402010203180144ac0007058201000201"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000200)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000700), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000800), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 92.064348][ T199] cfg80211: failed to load regulatory.db [ 92.904130][ T5577] cgroup: Unknown subsys name 'net' [ 93.146484][ T5577] cgroup: Unknown subsys name 'cpuset' [ 93.199971][ T5577] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.209181][ T5577] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.888733][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.924555][ T5598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.963007][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.973388][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.981924][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.999753][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.024642][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.039145][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.044186][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.064270][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.066740][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.073238][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.087304][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.101985][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.112968][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.123015][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.123028][ T4906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.156764][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.157128][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.167349][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.260918][ T5598] Bluetooth: hci2: command tx timeout [ 100.261052][ T5598] Bluetooth: hci1: command tx timeout [ 100.339770][ T5598] Bluetooth: hci3: command tx timeout [ 100.351152][ T5598] Bluetooth: hci0: command tx timeout [ 100.557470][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.558967][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.559766][ T5593] bridge_slave_0: entered allmulticast mode [ 100.569162][ T5593] bridge_slave_0: entered promiscuous mode [ 100.633250][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.633595][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.633883][ T5593] bridge_slave_1: entered allmulticast mode [ 100.636994][ T5593] bridge_slave_1: entered promiscuous mode [ 100.697164][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.697439][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.697660][ T5595] bridge_slave_0: entered allmulticast mode [ 100.715287][ T5595] bridge_slave_0: entered promiscuous mode [ 100.793882][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.794347][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.794938][ T5595] bridge_slave_1: entered allmulticast mode [ 100.797542][ T5595] bridge_slave_1: entered promiscuous mode [ 100.840903][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.841267][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.841555][ T5592] bridge_slave_0: entered allmulticast mode [ 100.844280][ T5592] bridge_slave_0: entered promiscuous mode [ 100.847517][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.847900][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.848352][ T5596] bridge_slave_0: entered allmulticast mode [ 100.856938][ T5596] bridge_slave_0: entered promiscuous mode [ 100.926092][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.926951][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.927306][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.927600][ T5592] bridge_slave_1: entered allmulticast mode [ 100.936881][ T5592] bridge_slave_1: entered promiscuous mode [ 100.948154][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.958869][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.960809][ T5596] bridge_slave_1: entered allmulticast mode [ 100.975202][ T5596] bridge_slave_1: entered promiscuous mode [ 101.016251][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.106690][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.184727][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.221683][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.227775][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.269488][ T5593] team0: Port device team_slave_0 added [ 101.274436][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.279089][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.341698][ T5593] team0: Port device team_slave_1 added [ 101.393068][ T5595] team0: Port device team_slave_0 added [ 101.460350][ T5595] team0: Port device team_slave_1 added [ 101.486377][ T5592] team0: Port device team_slave_0 added [ 101.494617][ T5596] team0: Port device team_slave_0 added [ 101.523727][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.523745][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.523773][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.531156][ T5592] team0: Port device team_slave_1 added [ 101.544849][ T5596] team0: Port device team_slave_1 added [ 101.594880][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.594893][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.594913][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.670539][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.670558][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.670579][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.770362][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.770379][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.770404][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.782981][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.783041][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.783116][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.834556][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.834608][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.834683][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.917963][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.917976][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.917998][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.945447][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.945497][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.945580][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.074268][ T5593] hsr_slave_0: entered promiscuous mode [ 102.076543][ T5593] hsr_slave_1: entered promiscuous mode [ 102.339627][ T5598] Bluetooth: hci1: command tx timeout [ 102.339658][ T5598] Bluetooth: hci2: command tx timeout [ 102.419604][ T5598] Bluetooth: hci0: command tx timeout [ 102.419639][ T5598] Bluetooth: hci3: command tx timeout [ 102.454931][ T5595] hsr_slave_0: entered promiscuous mode [ 102.456659][ T5595] hsr_slave_1: entered promiscuous mode [ 102.458281][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 102.458386][ T5595] Cannot create hsr debugfs directory [ 102.544038][ T5592] hsr_slave_0: entered promiscuous mode [ 102.545830][ T5592] hsr_slave_1: entered promiscuous mode [ 102.547256][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 102.547280][ T5592] Cannot create hsr debugfs directory [ 102.575870][ T5596] hsr_slave_0: entered promiscuous mode [ 102.577725][ T5596] hsr_slave_1: entered promiscuous mode [ 102.579155][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.579180][ T5596] Cannot create hsr debugfs directory [ 103.564641][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.617833][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.638392][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.664142][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.672565][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.716942][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.748408][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.773608][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.941285][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.988961][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.003197][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.044659][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.057914][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.108683][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.143590][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.176187][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.386699][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.416573][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.423327][ T5608] Bluetooth: hci2: command tx timeout [ 104.423370][ T5608] Bluetooth: hci1: command tx timeout [ 104.445163][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.486349][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.499487][ T5598] Bluetooth: hci3: command tx timeout [ 104.506566][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.510660][ T5598] Bluetooth: hci0: command tx timeout [ 104.550734][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.585563][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.623649][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.786751][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.826606][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.838585][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.875172][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.896771][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.924533][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.945976][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.975791][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.017587][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.143661][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.198947][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.216086][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.328975][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.329155][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.375472][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.520408][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.596735][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.596909][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.655034][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.677090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.677286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.857854][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.897889][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.963795][ T2181] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.964069][ T2181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.068882][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.069144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.147183][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.198703][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.198818][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.356156][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.357558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.499538][ T5598] Bluetooth: hci2: command tx timeout [ 106.499555][ T5608] Bluetooth: hci1: command tx timeout [ 106.579419][ T5608] Bluetooth: hci0: command tx timeout [ 106.579453][ T5608] Bluetooth: hci3: command tx timeout [ 106.783119][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.315698][ T5593] veth0_vlan: entered promiscuous mode [ 107.435712][ T5593] veth1_vlan: entered promiscuous mode [ 107.581893][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.725689][ T5593] veth0_macvtap: entered promiscuous mode [ 107.827996][ T5593] veth1_macvtap: entered promiscuous mode [ 107.974419][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.016816][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.131617][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.164286][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.200108][ T5592] veth0_vlan: entered promiscuous mode [ 108.225675][ T2181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.252180][ T2181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.287905][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.304334][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.381984][ T5592] veth1_vlan: entered promiscuous mode [ 108.713637][ T5596] veth0_vlan: entered promiscuous mode [ 108.850299][ T5596] veth1_vlan: entered promiscuous mode [ 108.911776][ T5595] veth0_vlan: entered promiscuous mode [ 108.933555][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.933579][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.972128][ T5592] veth0_macvtap: entered promiscuous mode [ 109.030475][ T5592] veth1_macvtap: entered promiscuous mode [ 109.066893][ T5595] veth1_vlan: entered promiscuous mode [ 109.118185][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.118208][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.204262][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.250435][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.251797][ T5596] veth0_macvtap: entered promiscuous mode [ 109.314190][ T5596] veth1_macvtap: entered promiscuous mode [ 109.330609][ T2181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.375120][ T2181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.378261][ T2181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.419071][ T2181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.436927][ T5595] veth0_macvtap: entered promiscuous mode [ 109.559635][ T5595] veth1_macvtap: entered promiscuous mode [ 109.607333][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.804895][ T38] audit: type=1800 audit(1785866894.365:2): pid=5739 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.1" name="local" dev="configfs" ino=6066 res=0 errno=0 [ 109.841103][ T38] audit: type=1800 audit(1785866894.425:3): pid=5739 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.1" name="nodeid" dev="configfs" ino=6067 res=0 errno=0 [ 110.107790][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.167451][ T5741] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.346156][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.400685][ T2215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.405739][ T2215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.441304][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.447451][ T2215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.506031][ T2215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.547030][ T1453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.549766][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.549782][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.577647][ T1453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.642773][ T1453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.658765][ T1453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.144106][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.144130][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.823475][ T1008] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.994832][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.994853][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.117328][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.117348][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.219332][ T1008] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 112.219365][ T1008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.295314][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.295336][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.576856][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.576874][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.550597][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550640][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550667][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550695][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550721][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550748][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550775][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550802][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550829][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.550864][ T1008] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0 [ 114.807198][ T38] audit: type=1800 audit(1785866899.385:4): pid=5760 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.8" name="attr_allow_any_host" dev="configfs" ino=7455 res=0 errno=0 [ 114.887970][ T1008] hid-rmi 0003:1532:011D.0001: hidraw0: USB HID v1.11 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 115.458262][ T5763] nvme nvme0: failed to connect socket: -512 [ 115.601866][ T5754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.877394][ T5773] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 116.105980][ T1008] usb 1-1: USB disconnect, device number 2 [ 116.246729][ T2181] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 116.305031][ T1188] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 116.316309][ T2181] (NULL device *): queue 0 connect admin queue failed (-6). [ 116.316411][ T2181] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 116.316465][ T2181] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 116.352301][ T5773] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:e7bb4819-d336-456c-bd71-3f31a634f627 [ 116.485512][ T10] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 116.485557][ T10] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 116.485596][ T10] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 116.485607][ T10] lpc_ich 0000:00:00.0: No MFD cells added [ 116.611417][ T10] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 116.611463][ T10] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 116.611498][ T10] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 116.611512][ T10] lpc_ich 0000:00:01.0: No MFD cells added [ 116.686621][ T10] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 116.686748][ T10] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 116.686763][ T10] lpc_ich 0000:00:01.3: No MFD cells added [ 116.731600][ T5603] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 116.731642][ T5603] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 116.731673][ T5603] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 116.731684][ T5603] lpc_ich 0000:00:05.0: No MFD cells added [ 117.220595][ T5598] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 117.396960][ T1027] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 117.405144][ T2181] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 117.446504][ T1027] (NULL device *): queue 0 connect admin queue failed (-6). [ 117.446536][ T1027] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 117.446555][ T1027] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 117.522998][ T38] audit: type=1800 audit(1785866902.105:5): pid=5792 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.12" name="UDC" dev="configfs" ino=8596 res=0 errno=0 [ 117.629599][ T5696] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.848554][ T5696] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 117.848588][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.867039][ T5785] UDC core: g1: couldn't find an available UDC or it's busy [ 118.162480][ T5696] usbtest 2-1:1.0: Linux gadget zero [ 118.162504][ T5696] usbtest 2-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 118.517866][ T157] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 118.518617][ T2181] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 118.520457][ T157] (NULL device *): queue 0 connect admin queue failed (-6). [ 118.520532][ T157] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 118.520577][ T157] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 118.981070][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.135841][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 119.169284][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.196913][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.196945][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.224629][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.262569][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 119.262613][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.262636][ T9] usb 3-1: Product: syz [ 119.262651][ T9] usb 3-1: Manufacturer: syz [ 119.262667][ T9] usb 3-1: SerialNumber: syz [ 119.405520][ T5603] usb 2-1: USB disconnect, device number 2 [ 119.449449][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.542339][ T1453] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 119.545488][ T2181] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 119.545836][ T1453] (NULL device *): queue 0 connect admin queue failed (-6). [ 119.545859][ T1453] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 119.545874][ T1453] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 119.702786][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 119.702857][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.285060][ T5813] NFSD: Failed to start, no listeners configured. [ 120.488515][ T10] wacom 0003:056A:00B1.0002: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 120.590173][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 120.591753][ T157] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 120.592196][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 120.592221][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 120.592239][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 120.602304][ T10] wacom 0003:056A:00B1.0002: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.3-1/input0 [ 120.754428][ T10] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:00B1.0002/input/input5 [ 120.872899][ T9] usb 3-1: unit 37 not found! [ 120.872929][ T9] usb 3-1: unit 0 not found! [ 121.606536][ T32] usb 4-1: USB disconnect, device number 2 [ 121.623929][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 121.628720][ T157] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 121.667815][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 121.667839][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 121.667853][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 121.676635][ T5830] PM: hibernation: hibernation entry [ 121.946581][ T9] usb 3-1: USB disconnect, device number 2 [ 122.349654][ T5830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.349829][ T5830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.742316][ T4278] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 122.742441][ T157] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 122.742654][ T4278] (NULL device *): queue 0 connect admin queue failed (-6). [ 122.742678][ T4278] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 122.742696][ T4278] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 122.825967][ T5837] lo speed is unknown, defaulting to 1000 [ 122.827293][ T5830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.827701][ T5837] lo speed is unknown, defaulting to 1000 [ 123.027441][ T5837] lo speed is unknown, defaulting to 1000 [ 123.053891][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.054060][ T5830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.209859][ T5830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.377488][ T5837] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 123.377520][ T5837] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 123.390443][ T5837] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 123.469363][ T103] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 123.469404][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94246) [ 123.470693][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 123.471967][ T13] Buffer I/O error on device sda1, logical block 94208 [ 123.546686][ T157] device offline error, dev sda, sector 753990 op 0x1:(WRITE) flags 0x4000 phys_seg 13 prio class 2 [ 123.547012][ T103] device offline error, dev sda, sector 754496 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 123.547043][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94312) [ 123.548306][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 123.548332][ T13] Buffer I/O error on device sda1, logical block 94210 [ 123.548358][ T13] Buffer I/O error on device sda1, logical block 94211 [ 123.548374][ T13] Buffer I/O error on device sda1, logical block 94212 [ 123.548391][ T13] Buffer I/O error on device sda1, logical block 94213 [ 123.548407][ T13] Buffer I/O error on device sda1, logical block 94214 [ 123.548431][ T13] Buffer I/O error on device sda1, logical block 94215 [ 123.548447][ T13] Buffer I/O error on device sda1, logical block 94216 [ 123.548480][ T13] Buffer I/O error on device sda1, logical block 94217 [ 123.548497][ T13] Buffer I/O error on device sda1, logical block 94218 [ 123.750541][ T33] device offline error, dev sda, sector 754662 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 123.750578][ T33] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94332) [ 123.751596][ T1453] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 123.779420][ T4278] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 123.805987][ T5830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.806234][ T5830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.838881][ T13] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 123.838996][ T4278] (NULL device *): queue 0 connect admin queue failed (-6). [ 123.839021][ T4278] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 123.839040][ T4278] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 123.878589][ T5837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.934115][ T103] device offline error, dev sda, sector 754694 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 2 [ 123.934144][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94336) [ 123.934256][ T1188] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 123.970348][ T103] device offline error, dev sda, sector 754822 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 123.970445][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94352) [ 123.981488][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.028207][ T5598] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.028873][ T5830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.062354][ T103] device offline error, dev sda, sector 754966 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 124.062392][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94370) [ 124.064610][ T5837] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 124.065883][ T1188] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.147525][ T157] device offline error, dev sda, sector 755134 op 0x1:(WRITE) flags 0x4000 phys_seg 63 prio class 2 [ 124.147810][ T103] device offline error, dev sda, sector 755640 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 124.147831][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94455) [ 124.147914][ T1453] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.228523][ T103] device offline error, dev sda, sector 755670 op 0x1:(WRITE) flags 0x0 phys_seg 18 prio class 2 [ 124.228563][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94458) [ 124.228685][ T1453] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.275057][ T5837] lo speed is unknown, defaulting to 1000 [ 124.288263][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94541) [ 124.288392][ T2181] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.338061][ T5830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.338239][ T5830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.358620][ T103] EXT4-fs warning (device sda1): ext4_end_bio:372: I/O error 16 writing to inode 2022 starting block 94547) [ 124.358751][ T1453] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 124.445774][ T5837] lo speed is unknown, defaulting to 1000 [ 124.457721][ T5837] lo speed is unknown, defaulting to 1000 [ 124.474499][ T5837] lo speed is unknown, defaulting to 1000 [ 124.574507][ T5830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.821601][ T157] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 124.821704][ T157] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 124.821783][ T157] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 124.821856][ T157] Buffer I/O error on dev sda1, logical block 5752, lost async page write [ 124.821924][ T157] Buffer I/O error on dev sda1, logical block 5753, lost async page write [ 124.821991][ T157] Buffer I/O error on dev sda1, logical block 5754, lost async page write [ 124.822060][ T157] Buffer I/O error on dev sda1, logical block 5755, lost async page write [ 124.822129][ T157] Buffer I/O error on dev sda1, logical block 5756, lost async page write [ 124.822242][ T157] Buffer I/O error on dev sda1, logical block 5757, lost async page write [ 124.822310][ T157] Buffer I/O error on dev sda1, logical block 5758, lost async page write [ 124.934161][ T4919] Aborting journal on device sda1-8. [ 124.934348][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 124.946787][ T4278] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 124.953490][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 124.953566][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 124.953619][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 1 seconds [ 125.000324][ T4919] JBD2: I/O error when updating journal superblock for sda1-8. [ 125.042228][ T5843] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm syz.3.31: Detected aborted journal [ 125.064189][ T5598] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.125411][ T1188] Filesystems sync: 0.431 seconds [ 125.188026][ T5830] Freezing user space processes [ 125.524528][ T5834] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 125.859406][ T5598] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.994448][ T5323] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 125.994468][ T5323] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 125.994494][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.994513][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.994523][ T5323] Workqueue: sync_wq local_pci_probe_callback [ 125.994556][ T5323] RIP: 0010:software_node_register+0x30/0x1f0 [ 125.994575][ T5323] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 1f 19 1a fc 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 e1 6f 86 fc 49 8b 2c 24 48 85 ed [ 125.994587][ T5323] RSP: 0018:ffffc900047c7940 EFLAGS: 00010202 [ 125.994600][ T5323] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801effbe80 [ 125.994637][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.994648][ T5323] RBP: ffffc900047c7b10 R08: 0000000000000000 R09: 0000000000000000 [ 125.994661][ T5323] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 125.994673][ T5323] R13: ffff88803a46e010 R14: dffffc0000000000 R15: 0000000000000000 [ 125.994687][ T5323] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 125.994704][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.994718][ T5323] CR2: 00007ff49c5b0020 CR3: 00000000348ae000 CR4: 00000000003526f0 [ 125.994735][ T5323] Call Trace: [ 125.994743][ T5323] [ 125.994753][ T5323] device_add_software_node+0x1a0/0x300 [ 125.994778][ T5323] dwc3_pci_probe+0x542/0xad0 [ 125.994804][ T5323] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 125.994833][ T5323] ? rt_spin_unlock+0x163/0x200 [ 125.994863][ T5323] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 125.994884][ T5323] local_pci_probe_callback+0x120/0x1e0 [ 125.994914][ T5323] ? process_one_work+0x7fd/0x1480 [ 125.994934][ T5323] process_one_work+0xaaf/0x1480 [ 125.994963][ T5323] ? __pfx_process_one_work+0x10/0x10 [ 125.994981][ T5323] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.995010][ T5323] ? assign_work+0x3cf/0x5d0 [ 125.995031][ T5323] worker_thread+0xb05/0x10d0 [ 125.995057][ T5323] ? __kthread_parkme+0x71/0x1f0 [ 125.995084][ T5323] kthread+0x388/0x470 [ 125.995110][ T5323] ? __pfx_worker_thread+0x10/0x10 [ 125.995197][ T5323] ? __pfx_kthread+0x10/0x10 [ 125.995229][ T5323] ret_from_fork+0x514/0xb70 [ 125.995259][ T5323] ? __pfx_ret_from_fork+0x10/0x10 [ 125.995287][ T5323] ? __switch_to+0xc89/0x1420 [ 125.995310][ T5323] ? __pfx_kthread+0x10/0x10 [ 125.995336][ T5323] ret_from_fork_asm+0x1a/0x30 [ 125.995374][ T5323] [ 125.995381][ T5323] Modules linked in: [ 125.995414][ T5323] ---[ end trace 0000000000000000 ]--- [ 125.995430][ T5323] RIP: 0010:software_node_register+0x30/0x1f0 [ 125.995456][ T5323] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 1f 19 1a fc 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 e1 6f 86 fc 49 8b 2c 24 48 85 ed [ 125.995469][ T5323] RSP: 0018:ffffc900047c7940 EFLAGS: 00010202 [ 125.995482][ T5323] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801effbe80 [ 125.995493][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.995502][ T5323] RBP: ffffc900047c7b10 R08: 0000000000000000 R09: 0000000000000000 [ 125.995512][ T5323] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 125.995520][ T5323] R13: ffff88803a46e010 R14: dffffc0000000000 R15: 0000000000000000 [ 125.995531][ T5323] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 125.995543][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.995554][ T5323] CR2: 00007ff49c5b0020 CR3: 00000000348ae000 CR4: 00000000003526f0 [ 125.995568][ T5323] Kernel panic - not syncing: Fatal exception [ 125.996179][ T5323] Kernel Offset: disabled