Extracting prog: 4h36m17.048178205s
Minimizing prog: 50m1.033651296s
Simplifying prog options: 0s
Extracting C: 1m45.719689402s
Simplifying C: 7m9.971962931s


extracting reproducer from 28 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write-syz_usb_ep_write-mkdirat-mount-openat-write-nanosleep-write-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-ioctl-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-socket-setsockopt-bind
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-clock_nanosleep-syz_open_dev$video-ioctl$VIDIOC_LOG_STATUS
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 6, 14, 21, 19, 3, 3, 16, 9, 7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 9, 11, 16, 15]
detailed listing:
executing program 2:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='0\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/256, 0x100)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd)
executing program 3:
r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: bisecting 28 programs
bisect: split chunks (needed=false): <28>
bisect: split chunk #0 of len 28 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 9, 11, 16, 15]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 6, 14, 21, 19, 3, 3, 16, 9, 4, 2, 2, 6, 9, 11, 16, 15]
detailed listing:
executing program 2:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='0\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/256, 0x100)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd)
executing program 3:
r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: possible deadlock in console_lock_spinning_enable
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 6, 14, 21, 19, 3, 3, 16, 9]
detailed listing:
executing program 2:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='0\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/256, 0x100)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd)
executing program 3:
r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)

program did not crash
bisect: split chunks (needed=true): <10>, <8>
bisect: split chunk #0 of len 10 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 3, 16, 9, 4, 2, 2, 6, 9, 11, 16, 15]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 3, 16, 9, 9, 11, 16, 15]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <5>, <4>
bisect: split chunk #0 of len 5 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 9, 9, 11, 16, 15]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 3, 9, 11, 16, 15]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 3, 16, 15]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 3, 3, 9, 11]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: split chunks (needed=true): <3>, <2>, <2>
bisect: split chunk #0 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 11, 16, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 11, 16, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 16, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1>, <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #3 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 4 programs left: 

executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)


bisect: trying to concatenate
bisect: concatenate 4 entries
minimizing program #0 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9, 11, 15]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 9, 11, 15]
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9, 11, 15]
detailed listing:
executing program 0:
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
minimized 3 calls -> 1 calls
minimizing program #1 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 8, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 7, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5, 11, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
minimized 9 calls -> 6 calls
minimizing program #2 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
write(0xffffffffffffffff, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 9, 15]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
minimized 11 calls -> 10 calls
minimizing program #3 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 14]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 13]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 13]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 13]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 10, 11]
detailed listing:
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 0:
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300))
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r0, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
minimized 15 calls -> 12 calls
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$ubi_ctrl-mount-ioctl-mkdirat-mount-openat-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-ioctl$sock_SIOCETHTOOL-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write-mkdirat-openat-write-nanosleep-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
r4 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r4, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r5, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: concatenated prog does not crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write-mkdirat-openat-write-nanosleep-write-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-ioctl$sock_SIOCETHTOOL
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-socket-setsockopt-bind
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-clock_nanosleep-syz_open_dev$video-ioctl$VIDIOC_LOG_STATUS
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 1m40s
testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 6, 14, 21, 19, 3, 1, 16, 9, 7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 6, 10, 16, 12]
detailed listing:
executing program 2:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='0\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/256, 0x100)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd)
executing program 3:
r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: bisecting 28 programs
bisect: split chunks (needed=false): <28>
bisect: split chunk #0 of len 28 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 6, 10, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 2, 6, 6, 10, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 10, 16, 12]
detailed listing:
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 2, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)

program did not crash
bisect: split chunks (needed=true): <4>, <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 6, 10, 16, 12]
detailed listing:
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 6, 10, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 6, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 10]
detailed listing:
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 2 programs left: 

executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})


bisect: trying to concatenate
bisect: concatenate 2 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='mem\n', 0x4)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 10]
detailed listing:
executing program 0:
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}})

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
minimized 4 calls -> 4 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
write(0xffffffffffffffff, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program did not crash
minimized 10 calls -> 9 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='e1000e\x00', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: concatenated prog does not crash
single: executing 5 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-syz_usb_ep_write-mkdirat-openat-write-nanosleep-write-nanosleep
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-socket$inet
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-socket-setsockopt-bind
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write-clock_nanosleep-syz_open_dev$video-ioctl$VIDIOC_LOG_STATUS
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 28 programs with base timeout 6m0s
testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 6, 14, 21, 19, 3, 1, 16, 9, 7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 6, 9, 16, 12]
detailed listing:
executing program 2:
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r4, &(0x7f00000001c0)='0\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r5, &(0x7f0000000240)='1\n\x00', 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff)
mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000400)=""/256, 0x100)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd)
executing program 3:
r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00')
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10)
write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='0\n\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff)
executing program 4:
r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: bisecting 28 programs
bisect: split chunks (needed=false): <28>
bisect: split chunk #0 of len 28 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 11, 5, 4, 29, 26, 19, 9, 33, 4, 2, 2, 6, 6, 9, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
ftruncate(r0, 0x30000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22)
write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7)
executing program 0:
r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
syz_usb_control_io(r0, 0x0, &(0x7f0000001000))
nanosleep(&(0x7f0000000100)={0x2}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0)
executing program 1:
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
nanosleep(&(0x7f0000000700)={0x1}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_RESET(r1, 0x5514)
executing program 3:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0)
write(r2, &(0x7f0000001e00)='/tmp\n', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r4, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r8, &(0x7f0000000f00)='2\n', 0x2)
nanosleep(&(0x7f0000001c00)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r9, &(0x7f0000001500)='test\x00', 0x4)
executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0)
write(r3, &(0x7f0000001900)='Y\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0)
write(r7, &(0x7f0000000f00)='2\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0)
write(r8, &(0x7f0000001500)='test\x00', 0x4)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='0\n\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9)
write(r0, &(0x7f0000000640)='1\n\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]})
executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
listen(r1, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10)
executing program 3:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000")
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b')
syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00')
clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 2, 6, 6, 9, 16, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 16, 12]
detailed listing:
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 2, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='mem\n', 0x4)
executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)

program did not crash
bisect: split chunks (needed=true): <4>, <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 6, 9, 16, 12]
detailed listing:
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 16, 12]
detailed listing:
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 6, 9]
detailed listing:
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15)
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
bisect: split chunks (needed=true): <2>, <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 9, 16, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 4:
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 16, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
sendfile(r0, r1, 0x0, 0x20000)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 3 programs left: 

executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)


bisect: trying to concatenate
bisect: concatenate 3 entries
minimizing program #0 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12]
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 12]
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
socket(0x8, 0x2, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 12]
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 12]
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 12]
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 9, 12]
detailed listing:
executing program 0:
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
minimized 6 calls -> 4 calls
minimizing program #1 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
write(0xffffffffffffffff, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 12]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 4:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
minimized 9 calls -> 9 calls
minimizing program #2 before concatenation
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 11]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 11]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 11]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 11]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 10]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 9]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 9]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 8]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 8]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 7]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 7]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 7]
detailed listing:
executing program 2:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
executing program 0:
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
minimized 12 calls -> 7 calls
testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-mkdirat-nanosleep-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
bisect: concatenation succeeded
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-mkdirat-nanosleep-write
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000800)='on\x00', 0x2)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-mkdirat-nanosleep-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-mkdirat-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-syz_usb_ep_write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-syz_usb_control_io-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-syz_usb_control_io-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-socket$inet-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
socket$inet(0x2, 0x2, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-openat-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-write-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
write(0xffffffffffffffff, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-openat-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-write-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-openat-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-mount-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='e1000e\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mkdirat-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-setsockopt-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
setsockopt(0xffffffffffffffff, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-setns-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in ADDR_check_reset_block_generic
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300), 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700), 0x0)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program did not crash
testing program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
ignore low priority crash: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=1m11.449395368s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
simplifying C reproducer
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing compiled C program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
testing program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_cfg_done_82571
validation run: crashed=true
testing program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
validation run: crashed=true
testing program (duration=1m11.449395368s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-nanosleep-mkdirat-mount-openat-write-openat-write-openat-write-nanosleep
detailed listing:
executing program 0:
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0)
nanosleep(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='e1000e\x00', 0x7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

program crashed: BUG: unable to handle kernel paging request in e1000_get_variants_82571
validation run: crashed=true
reproducing took 5h39m12.492129824s
repro crashed as (corrupted=false):
e1000e 0000:00:03.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode
e1000e 0000:00:03.0 0000:00:03.0 (uninitialized): Failed to initialize MSI interrupts.  Falling back to legacy interrupts.
BUG: unable to handle page fault for address: ffffc900035b4b58
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 13fe5c067 P4D 13fe5c067 PUD 1cae3067 PMD 22725067 PTE 0
Oops: Oops: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: sync_wq local_pci_probe_callback
RIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]
RIP: 0010:__er32 drivers/net/ethernet/intel/e1000e/e1000.h:604 [inline]
RIP: 0010:e1000_init_mac_params_82571 drivers/net/ethernet/intel/e1000e/82571.c:278 [inline]
RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 drivers/net/ethernet/intel/e1000e/82571.c:320
Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a
RSP: 0018:ffffc900000f7a00 EFLAGS: 00010246
RAX: ffffc900035af000 RBX: ffff88807ed91694 RCX: ffffffff86fb44f8
RDX: 1ffff1100fdb22b8 RSI: ffffffff86fb4506 RDI: ffff88801eaa2540
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200001ef45
R13: ffff88807ed915c0 R14: ffff88807ed915b8 R15: ffff88807ed90ec0
FS:  0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900035b4b58 CR3: 0000000073af9000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 e1000_probe+0x1123/0x36b0 drivers/net/ethernet/intel/e1000e/netdev.c:7494
 local_pci_probe+0xdd/0x1b0 drivers/pci/pci-driver.c:332
 local_pci_probe_callback+0x35/0x80 drivers/pci/pci-driver.c:361
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
CR2: ffffc900035b4b58
---[ end trace 0000000000000000 ]---
RIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]
RIP: 0010:__er32 drivers/net/ethernet/intel/e1000e/e1000.h:604 [inline]
RIP: 0010:e1000_init_mac_params_82571 drivers/net/ethernet/intel/e1000e/82571.c:278 [inline]
RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 drivers/net/ethernet/intel/e1000e/82571.c:320
Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a
RSP: 0018:ffffc900000f7a00 EFLAGS: 00010246
RAX: ffffc900035af000 RBX: ffff88807ed91694 RCX: ffffffff86fb44f8
RDX: 1ffff1100fdb22b8 RSI: ffffffff86fb4506 RDI: ffff88801eaa2540
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200001ef45
R13: ffff88807ed915c0 R14: ffff88807ed915b8 R15: ffff88807ed90ec0
FS:  0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900035b4b58 CR3: 0000000073af9000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	f6 ff                	idiv   %bh
   2:	ff                   	ljmp   (bad)
   3:	e8 da 1f 0f fb       	call   0xfb0f1fe2
   8:	4c 89 ea             	mov    %r13,%rdx
   b:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  12:	fc ff df
  15:	48 c1 ea 03          	shr    $0x3,%rdx
  19:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  1d:	0f 85 f7 0b 00 00    	jne    0xc1a
  23:	49 8b 87 00 07 00 00 	mov    0x700(%r15),%rax
* 2a:	8b a8 58 5b 00 00    	mov    0x5b58(%rax),%ebp <-- trapping instruction
  30:	89 e8                	mov    %ebp,%eax
  32:	31 ff                	xor    %edi,%edi
  34:	83 e0 02             	and    $0x2,%eax
  37:	89 c6                	mov    %eax,%esi
  39:	89 44 24 10          	mov    %eax,0x10(%rsp)
  3d:	e8                   	.byte 0xe8
  3e:	10 1a                	adc    %bl,(%rdx)

final repro crashed as (corrupted=false):
e1000e 0000:00:03.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode
e1000e 0000:00:03.0 0000:00:03.0 (uninitialized): Failed to initialize MSI interrupts.  Falling back to legacy interrupts.
BUG: unable to handle page fault for address: ffffc900035b4b58
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 13fe5c067 P4D 13fe5c067 PUD 1cae3067 PMD 22725067 PTE 0
Oops: Oops: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: sync_wq local_pci_probe_callback
RIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]
RIP: 0010:__er32 drivers/net/ethernet/intel/e1000e/e1000.h:604 [inline]
RIP: 0010:e1000_init_mac_params_82571 drivers/net/ethernet/intel/e1000e/82571.c:278 [inline]
RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 drivers/net/ethernet/intel/e1000e/82571.c:320
Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a
RSP: 0018:ffffc900000f7a00 EFLAGS: 00010246
RAX: ffffc900035af000 RBX: ffff88807ed91694 RCX: ffffffff86fb44f8
RDX: 1ffff1100fdb22b8 RSI: ffffffff86fb4506 RDI: ffff88801eaa2540
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200001ef45
R13: ffff88807ed915c0 R14: ffff88807ed915b8 R15: ffff88807ed90ec0
FS:  0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900035b4b58 CR3: 0000000073af9000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 e1000_probe+0x1123/0x36b0 drivers/net/ethernet/intel/e1000e/netdev.c:7494
 local_pci_probe+0xdd/0x1b0 drivers/pci/pci-driver.c:332
 local_pci_probe_callback+0x35/0x80 drivers/pci/pci-driver.c:361
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
CR2: ffffc900035b4b58
---[ end trace 0000000000000000 ]---
RIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]
RIP: 0010:__er32 drivers/net/ethernet/intel/e1000e/e1000.h:604 [inline]
RIP: 0010:e1000_init_mac_params_82571 drivers/net/ethernet/intel/e1000e/82571.c:278 [inline]
RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 drivers/net/ethernet/intel/e1000e/82571.c:320
Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a
RSP: 0018:ffffc900000f7a00 EFLAGS: 00010246
RAX: ffffc900035af000 RBX: ffff88807ed91694 RCX: ffffffff86fb44f8
RDX: 1ffff1100fdb22b8 RSI: ffffffff86fb4506 RDI: ffff88801eaa2540
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200001ef45
R13: ffff88807ed915c0 R14: ffff88807ed915b8 R15: ffff88807ed90ec0
FS:  0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc900035b4b58 CR3: 0000000073af9000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
   0:	f6 ff                	idiv   %bh
   2:	ff                   	ljmp   (bad)
   3:	e8 da 1f 0f fb       	call   0xfb0f1fe2
   8:	4c 89 ea             	mov    %r13,%rdx
   b:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  12:	fc ff df
  15:	48 c1 ea 03          	shr    $0x3,%rdx
  19:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  1d:	0f 85 f7 0b 00 00    	jne    0xc1a
  23:	49 8b 87 00 07 00 00 	mov    0x700(%r15),%rax
* 2a:	8b a8 58 5b 00 00    	mov    0x5b58(%rax),%ebp <-- trapping instruction
  30:	89 e8                	mov    %ebp,%eax
  32:	31 ff                	xor    %edi,%edi
  34:	83 e0 02             	and    $0x2,%eax
  37:	89 c6                	mov    %eax,%esi
  39:	89 44 24 10          	mov    %eax,0x10(%rsp)
  3d:	e8                   	.byte 0xe8
  3e:	10 1a                	adc    %bl,(%rdx)