last executing test programs: 4m58.843484828s ago: executing program 3 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000900039040000000000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c"], 0x5c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x100000008, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m57.563985848s ago: executing program 3 (id=104): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x4, 0xfb, 0x35, 0x100, 0xffffc147, 0xc}) syz_clone(0x9a911311, 0x0, 0x0, 0x0, 0x0, 0x0) 4m56.071752582s ago: executing program 3 (id=111): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 4m55.808385299s ago: executing program 3 (id=112): r0 = syz_clone(0x1000111, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) umount2(&(0x7f0000000140)='./file0\x00', 0x2) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x81, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x1, 0x0, 0x2, 0x1, 0x2], 0x1, 0x4}, {0x2, [0x1, 0x4, 0x5, 0x2, 0x0, 0x1], 0x1}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r4, &(0x7f0000002040)='ns/ipc\x00') tkill(r4, 0x21) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xe25, 0x7}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) setpgid(r4, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') setuid(0xee01) renameat2(r5, &(0x7f00000006c0)='./mnt\x00', r5, &(0x7f0000000040)='./mnt\x00', 0x0) exit(0x20000000000051a) 4m54.655666015s ago: executing program 3 (id=119): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(0xffffffffffffffff) syz_clone(0x91040080, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0) mremap(&(0x7f0000bb7000/0x3000)=nil, 0x3000, 0x6000, 0x3, &(0x7f0000b5c000/0x6000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) 4m52.540148214s ago: executing program 3 (id=133): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x2c, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4m52.088719225s ago: executing program 32 (id=133): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x2c, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2m55.786174943s ago: executing program 1 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0x4000, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd", 0xb5}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0x60a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m53.75267934s ago: executing program 1 (id=734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x184) fallocate(r0, 0x0, 0xfff, 0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000180)='./cgroup\x00') getdents(r1, 0x0, 0x58) 2m52.557574418s ago: executing program 1 (id=738): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x6257, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) 2m52.41867551s ago: executing program 1 (id=741): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) mount$9p_fd(0x0, 0x0, 0x0, 0x600000, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x9, 0x81}}, 0x50) write$FUSE_INIT(r0, &(0x7f00000021c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2d, 0x23b5, 0xffffffff82000002, 0x1, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) 2m51.905812482s ago: executing program 1 (id=746): socket$inet_tcp(0x2, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r0, 0x0, 0x0, 0x400) fanotify_init(0xf00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m48.241674707s ago: executing program 1 (id=765): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x38, 0x66, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2m47.083551484s ago: executing program 33 (id=765): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x38, 0x66, 0x30, 0x30, 0x35, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 14.961751973s ago: executing program 2 (id=1399): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0x1, 0x2ca, &(0x7f0000000300)="$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") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.772065561s ago: executing program 2 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x200000c, 0x0) sched_setaffinity(r2, 0x0, 0x0) r4 = gettid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x200000000000000) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.558432995s ago: executing program 4 (id=1407): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 12.429798672s ago: executing program 2 (id=1409): r0 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, &(0x7f0000000400)='./file0/../file0/file0/file0\x00', 0x8800, &(0x7f0000000000)={0x0, 0xa, 0x40000, {r2}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r3, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r6, 0x0, 0x5e) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) 8.273603718s ago: executing program 4 (id=1421): listen(0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5664b3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384ef153111536c9328394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x18, 0xc00c805}}], 0x1, 0x20040804) r3 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) r4 = fsmount(r3, 0x0, 0x0) open(0x0, 0x143142, 0x80) r5 = openat(r4, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r6 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x50) write(r6, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x7fffffff) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) 6.641381496s ago: executing program 5 (id=1426): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000fa800)={0x0, 0x0}) 6.380152042s ago: executing program 4 (id=1427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) 5.519346402s ago: executing program 5 (id=1428): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 5.406045895s ago: executing program 5 (id=1429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 5.293974327s ago: executing program 0 (id=1430): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 4.996025184s ago: executing program 2 (id=1431): rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x401000}}]}, 0xfa, 0x47a, &(0x7f0000000340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.865215077s ago: executing program 4 (id=1432): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea00090582"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 4.693160181s ago: executing program 2 (id=1433): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) setrlimit(0xd, 0x0) setpriority(0x1, 0x0, 0x80080000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.754846153s ago: executing program 5 (id=1434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf052700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e3100000005002b000100000005002e"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.716237234s ago: executing program 0 (id=1435): fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) socket$inet(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.58018825s ago: executing program 2 (id=1436): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x17, &(0x7f0000000040)=0x46, 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.353545126s ago: executing program 0 (id=1437): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f0000000280)='{*', 0x2) 2.093698601s ago: executing program 0 (id=1438): mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40001, 0x113) write(r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002200)={r3, r2, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x1392, &(0x7f0000002bc0)=ANY=[], 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.73600192s ago: executing program 0 (id=1439): r0 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, &(0x7f0000000400)='./file0/../file0/file0/file0\x00', 0x8800, &(0x7f0000000000)={0x0, 0xa, 0x40000, {r2}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00') readv(r3, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r6, 0x0, 0x5e) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) 913.431049ms ago: executing program 4 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0xfffffffe, 0x5}) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) 453.37801ms ago: executing program 5 (id=1441): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(0x0, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x2b, 0x0, @empty, @empty}}}}) write$binfmt_script(r0, 0x0, 0x0) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(0x0, &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 132.253307ms ago: executing program 0 (id=1442): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 43.724609ms ago: executing program 4 (id=1443): sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x4c) 0s ago: executing program 5 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0x4000, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a", 0x71}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0x60a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) kernel console output (not intermixed with test programs): BSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.677526][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.805152][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.829448][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.923979][ T6515] fuse: Unknown parameter 'fd0x0000000000000005' [ 120.222443][ T6561] fuse: Unknown parameter 'fd0x0000000000000005' [ 121.398503][ T6602] fuse: Unknown parameter 'fd0x0000000000000005' [ 133.136332][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.143241][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.638340][ T7304] x_tables: duplicate underflow at hook 2 [ 159.788220][ C0] sched: RT throttling activated [ 166.638445][ T7547] x_tables: duplicate underflow at hook 1 [ 167.132032][ T7279] syz.4.415 (7279) used greatest stack depth: 17800 bytes left [ 167.580563][ T7563] loop2: detected capacity change from 0 to 256 [ 167.594122][ T7563] ======================================================= [ 167.594122][ T7563] WARNING: The mand mount option has been deprecated and [ 167.594122][ T7563] and is ignored by this kernel. Remove the mand [ 167.594122][ T7563] option from the mount to silence this warning. [ 167.594122][ T7563] ======================================================= [ 167.746437][ T7563] FAT-fs (loop2): Directory bread(block 64) failed [ 167.774887][ T7563] FAT-fs (loop2): Directory bread(block 65) failed [ 167.798439][ T7563] FAT-fs (loop2): Directory bread(block 66) failed [ 167.805342][ T7563] FAT-fs (loop2): Directory bread(block 67) failed [ 167.832376][ T7563] FAT-fs (loop2): Directory bread(block 68) failed [ 167.853682][ T7563] FAT-fs (loop2): Directory bread(block 69) failed [ 167.854080][ T7568] fuse: Bad value for 'fd' [ 167.871058][ T7563] FAT-fs (loop2): Directory bread(block 70) failed [ 167.877859][ T7563] FAT-fs (loop2): Directory bread(block 71) failed [ 167.899794][ T7563] FAT-fs (loop2): Directory bread(block 72) failed [ 167.906406][ T7563] FAT-fs (loop2): Directory bread(block 73) failed [ 168.042754][ T7570] syz.1.528 (7570): drop_caches: 0 [ 168.416409][ T7577] loop2: detected capacity change from 0 to 128 [ 168.454533][ T7577] qnx4: no qnx4 filesystem (no root dir). [ 169.351000][ T7586] loop2: detected capacity change from 0 to 8 [ 169.408726][ T7586] SQUASHFS error: zlib decompression failed, data probably corrupt [ 169.417117][ T7586] SQUASHFS error: Failed to read block 0x9b: -5 [ 169.437232][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 169.458630][ T7586] SQUASHFS error: Unable to read metadata cache entry [99] [ 169.465918][ T7586] SQUASHFS error: Unable to read inode 0x127 [ 169.784621][ T7587] syzkaller0: entered promiscuous mode [ 169.791500][ T7587] syzkaller0: entered allmulticast mode [ 170.711342][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 171.700427][ T7607] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 171.842455][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.166254][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.547'. [ 173.867554][ T7627] syz.2.549 uses obsolete (PF_INET,SOCK_PACKET) [ 174.505632][ T7630] loop0: detected capacity change from 0 to 512 [ 174.791330][ T7630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 175.191354][ T7630] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.550: bg 0: block 4: invalid block bitmap [ 175.406716][ T7630] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 175.768493][ T7630] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.550: invalid indirect mapped block 1 (level 1) [ 176.249871][ T7630] EXT4-fs (loop0): 1 truncate cleaned up [ 176.659697][ T7630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.952202][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.961462][ T7649] loop2: detected capacity change from 0 to 256 [ 176.996320][ T7649] exfat: Deprecated parameter 'namecase' [ 177.022572][ T7649] exfat: Deprecated parameter 'namecase' [ 177.158335][ T7649] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 177.640672][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 177.653199][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 177.791027][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.508861][ T7655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.941690][ T28] audit: type=1800 audit(1789017015.386:2): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name="addr_trtype" dev="configfs" ino=12801 res=0 errno=0 [ 181.003368][ T7700] nvmet_tcp: address family 255 not supported [ 181.354004][ T28] audit: type=1800 audit(1789017015.436:3): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name="addr_trsvcid" dev="configfs" ino=12802 res=0 errno=0 [ 181.935258][ T7708] loop2: detected capacity change from 0 to 1024 [ 181.969501][ T7708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.051049][ T7719] binder: 7711:7719 unknown command 0 [ 182.056525][ T7719] binder: 7711:7719 ioctl c0306201 2000000004c0 returned -22 [ 182.066559][ T7708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.236524][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.354822][ T5917] IPVS: starting estimator thread 0... [ 184.371400][ T7769] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 184.509248][ T7770] IPVS: using max 15 ests per chain, 36000 per kthread [ 184.638781][ T7774] overlayfs: failed to resolve './bus': -2 [ 185.980440][ T7781] loop2: detected capacity change from 0 to 128 [ 186.370520][ T7781] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.485718][ T7781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.546542][ T7833] loop4: detected capacity change from 0 to 32768 [ 189.708867][ T7833] JBD2: Ignoring recovery information on journal [ 190.026018][ T7833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.147319][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 191.532120][ T6296] ocfs2: Unmounting device (7,4) on (node local) [ 191.759272][ T7890] mmap: syz.2.614 (7890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.918848][ T7892] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 191.957377][ T7892] syz.2.614: attempt to access beyond end of device [ 191.957377][ T7892] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 192.899605][ T7897] loop2: detected capacity change from 0 to 256 [ 192.917826][ T7897] FAT-fs (loop2): Unrecognized mount option "uni�?ete=1" or missing value [ 192.936082][ T7901] warning: `syz.4.611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.099217][ T7897] syzkaller0: entered promiscuous mode [ 193.104779][ T7897] syzkaller0: entered allmulticast mode [ 194.320732][ T7902] loop0: detected capacity change from 0 to 32768 [ 194.354822][ T7902] (syz.0.618,7902,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.361347][ T7908] loop2: detected capacity change from 0 to 8 [ 194.392232][ T7902] (syz.0.618,7902,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.578591][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.593010][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665627][ T7902] (syz.0.618,7902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 194.696284][ T7902] JBD2: Ignoring recovery information on journal [ 194.737638][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.746218][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.753182][ T28] audit: type=1800 audit(1789017029.196:4): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.620" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 194.779182][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.786669][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.794498][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.801273][ T7912] SQUASHFS error: Failed to read block 0x4de: -5 [ 194.823244][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 194.866230][ T7902] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 194.884533][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 195.222947][ T7919] loop4: detected capacity change from 0 to 512 [ 195.541598][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 195.732826][ T7924] ip_tables: iptables: counters copy to user failed while replacing table [ 196.600475][ T7925] syz.2.625: attempt to access beyond end of device [ 196.600475][ T7925] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 196.873384][ T7934] loop1: detected capacity change from 0 to 64 [ 196.926521][ T7936] loop4: detected capacity change from 0 to 256 [ 197.954620][ T7934] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 198.218777][ T7940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.491019][ T28] audit: type=1804 audit(1789017033.936:5): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.632" name="/newroot/183/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=241 res=1 errno=0 [ 199.558073][ T7955] loop2: detected capacity change from 0 to 7 [ 199.569111][ T7955] Dev loop2: unable to read RDB block 7 [ 199.575001][ T7955] loop2: AHDI p1 p2 p3 [ 199.579563][ T7955] loop2: partition table partially beyond EOD, truncated [ 199.588114][ T7955] loop2: p1 start 1601398130 is beyond EOD, truncated [ 199.595709][ T7955] loop2: p2 start 1702059890 is beyond EOD, truncated [ 199.858500][ T7961] netlink: 72 bytes leftover after parsing attributes in process `syz.0.634'. [ 199.939438][ T7963] loop2: detected capacity change from 0 to 256 [ 199.989572][ T7963] exfat: Deprecated parameter 'namecase' [ 199.995320][ T7963] exfat: Deprecated parameter 'namecase' [ 200.096335][ T7963] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 201.357786][ T7975] loop4: detected capacity change from 0 to 1024 [ 201.372820][ T7975] EXT4-fs: Ignoring removed i_version option [ 201.550366][ T7975] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.737796][ T7975] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 201.832160][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.842424][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 201.851695][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 203.339006][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 203.558750][ T27] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 203.587611][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 203.615150][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.660497][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.685504][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.709501][ T27] usb 1-1: Product: syz [ 203.718647][ T27] usb 1-1: Manufacturer: syz [ 203.728677][ T27] usb 1-1: SerialNumber: syz [ 203.765348][ T27] usb 1-1: config 0 descriptor?? [ 203.784483][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.842246][ T27] usb 1-1: selecting invalid altsetting 0 [ 204.139811][ T7987] usb 1-1: BOGUS urb xfer, pipe 0 != type 3 [ 205.722377][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 205.736430][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 205.827616][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.837045][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.848682][ T8017] bridge0: entered allmulticast mode [ 205.908957][ T8017] bridge_slave_1: left allmulticast mode [ 205.915002][ T8017] bridge_slave_1: left promiscuous mode [ 205.928996][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.962950][ T5778] usb 1-1: USB disconnect, device number 2 [ 205.975588][ T8017] bridge_slave_0: left allmulticast mode [ 205.991628][ T8017] bridge_slave_0: left promiscuous mode [ 206.023969][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.019670][ T8040] batman_adv: batadv0: Adding interface: dummy0 [ 208.026023][ T8040] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.078353][ T8040] batman_adv: batadv0: Interface activated: dummy0 [ 208.133794][ T8041] batadv0: mtu less than device minimum [ 208.173177][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.186312][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.199011][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.206513][ T8040] Set syz0 is full, maxelem 0 reached [ 208.211513][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.228088][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.241094][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.253834][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.266648][ T8041] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 210.888040][ T8079] tipc: Started in network mode [ 210.893082][ T8079] tipc: Node identity 4, cluster identity 4711 [ 210.899336][ T8079] tipc: Node number set to 4 [ 211.829367][ T8072] Cannot find add_set index 0 as target [ 212.069318][ T8087] netlink: 68 bytes leftover after parsing attributes in process `syz.2.676'. [ 212.275396][ T8094] xt_nfacct: accounting object `' does not exist [ 213.835320][ T8136] input: syz0 as /devices/virtual/input/input6 [ 213.998868][ T8139] net_ratelimit: 11 callbacks suppressed [ 213.998909][ T8139] ip_tables: iptables: counters copy to user failed while replacing table [ 216.559425][ T8192] loop1: detected capacity change from 0 to 512 [ 216.574202][ T8192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.616514][ T8192] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 216.665791][ T8192] EXT4-fs (loop1): 1 truncate cleaned up [ 216.724638][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.997548][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.931823][ T8232] loop4: detected capacity change from 0 to 512 [ 217.960343][ T8232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.992253][ T8232] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 218.031402][ T8232] EXT4-fs (loop4): 1 truncate cleaned up [ 218.064447][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.260547][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.569510][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 218.577450][ T8253] loop4: detected capacity change from 0 to 1024 [ 218.644827][ T8253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.757132][ T8253] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.930065][ T8249] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.710: lblock 0 mapped to illegal pblock 0 (length 1) [ 218.980855][ T8253] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.710: Freeing blocks not in datazone - block = 0, count = 1 [ 219.078105][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.033801][ T8283] loop4: detected capacity change from 0 to 512 [ 220.107691][ T8283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.209894][ T8283] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 221.435385][ T8283] EXT4-fs (loop4): 1 truncate cleaned up [ 221.464457][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.826425][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.265087][ T8330] loop4: detected capacity change from 0 to 512 [ 223.284784][ T8330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.313581][ T8330] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 223.359397][ T8330] EXT4-fs (loop4): 1 truncate cleaned up [ 223.405320][ T8330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.650916][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.926341][ T8361] loop1: detected capacity change from 0 to 512 [ 224.990069][ T8361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 225.028474][ T8361] System zones: 0-2, 18-18, 34-34 [ 225.070679][ T8361] EXT4-fs (loop1): 1 orphan inode deleted [ 225.077955][ T8361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.152036][ T8361] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.258669][ T8370] syzkaller1: entered promiscuous mode [ 225.264417][ T8370] syzkaller1: entered allmulticast mode [ 225.335604][ T5775] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.388787][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.414091][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 225.426411][ T5775] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.454270][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.524482][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 225.538640][ T5775] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.587635][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.780698][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 225.834945][ T5775] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.857928][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 225.892795][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 225.911464][ T5775] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 226.124652][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 226.396904][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 226.599597][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 226.704887][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 226.753774][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 226.775802][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 226.847548][ T5775] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 228.893726][ T8414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 228.904106][ T8414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.762'. [ 228.941427][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.103242][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.374043][ T8420] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 229.459132][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 230.121684][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.271450][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.481739][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.167282][ T49] tipc: Left network mode [ 231.824394][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.837247][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.846690][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.859278][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.877571][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.888922][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.488554][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 234.040192][ T51] Bluetooth: hci2: command tx timeout [ 234.777960][ T8453] chnl_net:caif_netlink_parms(): no params data found [ 235.040144][ T8498] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 235.206915][ T49] hsr_slave_0: left promiscuous mode [ 235.239196][ T49] hsr_slave_1: left promiscuous mode [ 235.271159][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.297265][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.313572][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.333597][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.356703][ T49] bridge_slave_1: left allmulticast mode [ 235.369159][ T49] bridge_slave_1: left promiscuous mode [ 235.388755][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.418561][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 235.471934][ T49] bridge_slave_0: left allmulticast mode [ 235.478396][ T49] bridge_slave_0: left promiscuous mode [ 235.490756][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.535135][ T49] veth1_macvtap: left promiscuous mode [ 235.541751][ T49] veth0_macvtap: left promiscuous mode [ 235.552447][ T49] veth1_vlan: left promiscuous mode [ 235.563593][ T49] veth0_vlan: left promiscuous mode [ 235.675531][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.539987][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 236.540262][ T51] Bluetooth: hci2: command tx timeout [ 236.550616][ T23] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 236.564372][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.668701][ T23] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 238.579159][ T51] Bluetooth: hci2: command tx timeout [ 238.714124][ T5763] usb 5-1: USB disconnect, device number 2 [ 238.786598][ T5763] idmouse 5-1:1.0: disconnected [ 238.992047][ T49] team0 (unregistering): Port device team_slave_1 removed [ 239.108358][ T49] team0 (unregistering): Port device team_slave_0 removed [ 239.234317][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.425289][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.869787][ T51] Bluetooth: hci2: command tx timeout [ 241.194325][ T49] bond0 (unregistering): Released all slaves [ 241.601449][ T8549] loop4: detected capacity change from 0 to 16 [ 241.681679][ T8549] erofs: (device loop4): mounted with root inode @ nid 36. [ 242.726124][ T8549] syz.4.802: attempt to access beyond end of device [ 242.726124][ T8549] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 242.743701][ T8549] syz.4.802: attempt to access beyond end of device [ 242.743701][ T8549] loop4: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 243.039732][ T8549] syz.4.802: attempt to access beyond end of device [ 243.039732][ T8549] loop4: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 243.058331][ T28] audit: type=1800 audit(1789017077.196:6): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.802" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 244.077914][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 244.238498][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.280986][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.329731][ T8453] bridge_slave_0: entered allmulticast mode [ 244.337313][ T8453] bridge_slave_0: entered promiscuous mode [ 244.408631][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.456607][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.506363][ T8453] bridge_slave_1: entered allmulticast mode [ 244.534348][ T8453] bridge_slave_1: entered promiscuous mode [ 244.727310][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.794447][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.894617][ T8564] trusted_key: encrypted_key: keylen parameter is missing [ 244.958053][ T8453] team0: Port device team_slave_0 added [ 244.989052][ T8567] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 245.224285][ T8453] team0: Port device team_slave_1 added [ 245.318370][ T8567] veth1_to_bond: entered promiscuous mode [ 245.345763][ T8570] veth1_to_bond: entered allmulticast mode [ 245.390121][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 245.523672][ T8567] veth1_to_bond (unregistering): left allmulticast mode [ 245.536137][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.548739][ T8567] veth1_to_bond (unregistering): left promiscuous mode [ 245.568409][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.580971][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.603673][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.629104][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.646890][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.666196][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.694733][ T5816] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 245.705355][ T8567] bond0: (slave bond_slave_1): Releasing backup interface [ 245.732419][ T8588] loop4: detected capacity change from 0 to 4096 [ 245.756650][ T8588] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 245.773363][ T5816] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 245.801052][ T8588] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 245.845856][ T8588] ntfs3: loop4: try to read out of volume at offset 0x1ff000 [ 245.847017][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.858429][ T8588] ntfs3: loop4: Failed to load $MFT. [ 245.900893][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.999060][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.045933][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.094401][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.190902][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.291874][ T8453] hsr_slave_0: entered promiscuous mode [ 246.458715][ T8453] hsr_slave_1: entered promiscuous mode [ 246.645556][ T28] audit: type=1800 audit(1789017081.086:7): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.812" name="addr_trtype" dev="configfs" ino=14910 res=0 errno=0 [ 247.401335][ T28] audit: type=1800 audit(1789017081.126:8): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.812" name="addr_trsvcid" dev="configfs" ino=14911 res=0 errno=0 [ 247.998511][ T8453] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.017193][ T8453] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.040334][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 248.102090][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 248.131569][ T8453] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.175659][ T8453] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.253526][ T8616] syzkaller0: entered promiscuous mode [ 248.273829][ T8616] syzkaller0: entered allmulticast mode [ 248.629652][ T8453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.695256][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.744113][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.751354][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.855835][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.863084][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.869817][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 250.884000][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.027561][ T8662] geneve2: entered promiscuous mode [ 252.013116][ T8453] veth0_vlan: entered promiscuous mode [ 252.057473][ T8453] veth1_vlan: entered promiscuous mode [ 252.235942][ T8453] veth0_macvtap: entered promiscuous mode [ 252.279057][ T8453] veth1_macvtap: entered promiscuous mode [ 252.352060][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.379672][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.404512][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.434547][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.468930][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.500907][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.532159][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.577176][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.605341][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.635112][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.668904][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.699517][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.724998][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.771138][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.807740][ T8453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.847724][ T8453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.870491][ T8453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.896201][ T8453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.218475][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.256892][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.365673][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.388438][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.055219][ T8706] IPVS: sh: FWM 3 0x00000003 - no destination available [ 254.872223][ T5861] IPVS: starting estimator thread 0... [ 255.019643][ T8707] IPVS: using max 19 ests per chain, 45600 per kthread [ 256.799478][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.805869][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.009387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021292800: rx timeout, send abort [ 258.108898][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 258.147497][ T8742] hsr_slave_0: left promiscuous mode [ 258.159207][ T8742] hsr_slave_1: left promiscuous mode [ 258.510345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021292c00: rx timeout, send abort [ 258.519135][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021292800: abort rx timeout. Force session deactivation [ 258.682388][ T8758] process 'syz.2.838' launched './file0' with NULL argv: empty string added [ 258.862633][ T8762] IPVS: sh: FWM 3 0x00000003 - no destination available [ 259.018614][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021292c00: abort rx timeout. Force session deactivation [ 259.422613][ T27] IPVS: starting estimator thread 0... [ 260.718308][ T8763] IPVS: using max 32 ests per chain, 76800 per kthread [ 261.012501][ T28] audit: type=1800 audit(1789017095.456:9): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.840" name="addr_trtype" dev="configfs" ino=15129 res=0 errno=0 [ 261.320953][ T28] audit: type=1800 audit(1789017095.486:10): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.840" name="addr_trsvcid" dev="configfs" ino=15130 res=0 errno=0 [ 261.518449][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 261.890507][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.962635][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.995927][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.015100][ T8780] netlink: 104 bytes leftover after parsing attributes in process `syz.0.843'. [ 262.036640][ T5861] usb 5-1: Product: syz [ 262.048407][ T5861] usb 5-1: Manufacturer: syz [ 262.053969][ T5861] usb 5-1: SerialNumber: syz [ 262.247713][ T8785] bridge1: entered promiscuous mode [ 262.253262][ T8785] bridge1: entered allmulticast mode [ 262.316228][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.339803][ T8785] team0: Port device bridge1 added [ 262.380706][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.460829][ T5861] cdc_ether 5-1:1.0: skipping garbage [ 262.466901][ T5861] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 262.489957][ T8785] bridge0: port 3(team0) entered blocking state [ 262.496390][ T8785] bridge0: port 3(team0) entered disabled state [ 262.531148][ T8785] team0: entered allmulticast mode [ 262.536388][ T8785] team_slave_0: entered allmulticast mode [ 262.558889][ T8785] team_slave_1: entered allmulticast mode [ 262.584382][ T5861] usb 5-1: USB disconnect, device number 3 [ 262.588863][ T8785] team0: entered promiscuous mode [ 262.608463][ T8785] team_slave_0: entered promiscuous mode [ 262.645402][ T8785] team_slave_1: entered promiscuous mode [ 262.685381][ T8785] bridge0: port 3(team0) entered blocking state [ 262.691908][ T8785] bridge0: port 3(team0) entered forwarding state [ 262.891716][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286b9000: rx timeout, send abort [ 262.979778][ T8803] IPVS: sh: FWM 3 0x00000003 - no destination available [ 263.058289][ T5861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 263.391891][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286bb800: rx timeout, send abort [ 263.400408][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286b9000: abort rx timeout. Force session deactivation [ 263.884330][ T8808] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 263.900348][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286bb800: abort rx timeout. Force session deactivation [ 263.938324][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 263.952046][ T5861] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 263.964566][ T5861] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 263.991545][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.028453][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.058253][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 264.107222][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.155350][ T8814] veth1_to_bond: entered promiscuous mode [ 264.168430][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.217071][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.227228][ T8814] veth1_to_bond: entered allmulticast mode [ 264.256353][ T5861] usb 5-1: can't set config #16, error -71 [ 264.298595][ T5861] usb 5-1: USB disconnect, device number 4 [ 264.349880][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 264.514407][ T8828] netlink: 104 bytes leftover after parsing attributes in process `syz.5.856'. [ 264.594897][ T8814] veth1_to_bond (unregistering): left allmulticast mode [ 264.648327][ T8814] veth1_to_bond (unregistering): left promiscuous mode [ 264.983338][ T8814] bond0: (slave bond_slave_1): Releasing backup interface [ 265.151037][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7c9000: rx timeout, send abort [ 265.322229][ T8846] IPVS: sh: FWM 3 0x00000003 - no destination available [ 265.345844][ T8848] netlink: 84 bytes leftover after parsing attributes in process `syz.2.861'. [ 265.651195][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7cac00: rx timeout, send abort [ 265.659602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7c9000: abort rx timeout. Force session deactivation [ 265.729021][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.952926][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.973897][ T5861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 266.027652][ T5861] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 266.041136][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.095078][ T5861] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 266.159529][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e7cac00: abort rx timeout. Force session deactivation [ 266.961393][ T8884] IPVS: sh: FWM 3 0x00000003 - no destination available [ 267.209041][ T27] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 267.424182][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.444514][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.458477][ T27] usb 5-1: Product: syz [ 267.462712][ T27] usb 5-1: Manufacturer: syz [ 267.467337][ T27] usb 5-1: SerialNumber: syz [ 267.484546][ T27] usb 5-1: config 0 descriptor?? [ 267.657129][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805df55400: rx timeout, send abort [ 267.712724][ T27] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.757090][ T8902] netlink: 52 bytes leftover after parsing attributes in process `syz.5.877'. [ 268.157235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805df55000: rx timeout, send abort [ 268.167802][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805df55400: abort rx timeout. Force session deactivation [ 268.582372][ T970] usb 1-1: USB disconnect, device number 3 [ 268.597874][ T970] idmouse 1-1:1.0: disconnected [ 268.665587][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805df55000: abort rx timeout. Force session deactivation [ 269.078694][ T8911] IPVS: sh: FWM 3 0x00000003 - no destination available [ 269.944961][ T8918] ALSA: mixer_oss: invalid OSS volume '' [ 269.982542][ T8917] bridge0: port 3(team0) entered disabled state [ 269.982698][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.983066][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.162169][ T27] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 270.169558][ T27] usb 5-1: USB disconnect, device number 5 [ 270.737779][ T8917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.752703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805faf2c00: rx timeout, send abort [ 270.829347][ T8917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.252857][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805faf2800: rx timeout, send abort [ 271.261206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805faf2c00: abort rx timeout. Force session deactivation [ 271.388491][ T8943] IPVS: sh: FWM 3 0x00000003 - no destination available [ 271.418278][ T5861] IPVS: starting estimator thread 0... [ 271.496736][ T8917] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.508441][ T8944] IPVS: using max 31 ests per chain, 74400 per kthread [ 271.515085][ T8917] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.525601][ T8917] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.559822][ T8917] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.761170][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805faf2800: abort rx timeout. Force session deactivation [ 272.689572][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.697254][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.713925][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.748304][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.797388][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.838259][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.845739][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.873426][ T8] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 272.910524][ T8] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 272.940348][ T8970] loop4: detected capacity change from 0 to 4096 [ 272.968380][ T8970] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 273.022427][ T8970] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 273.058790][ T8970] ntfs3: loop4: try to read out of volume at offset 0x1ff000 [ 273.085916][ T8970] ntfs3: loop4: Failed to load $MFT. [ 273.376756][ T28] audit: type=1800 audit(1789017107.816:11): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.901" name="addr_trtype" dev="configfs" ino=17410 res=0 errno=0 [ 274.141082][ T28] audit: type=1800 audit(1789017107.846:12): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.901" name="addr_trsvcid" dev="configfs" ino=17411 res=0 errno=0 [ 274.545347][ T8987] netlink: 'syz.0.904': attribute type 29 has an invalid length. [ 274.576132][ T8987] netlink: 'syz.0.904': attribute type 29 has an invalid length. [ 274.613469][ T8987] netlink: 'syz.0.904': attribute type 29 has an invalid length. [ 274.628621][ T8987] netlink: 'syz.0.904': attribute type 29 has an invalid length. [ 275.017684][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 275.058864][ T9006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.909'. [ 275.247726][ T5763] nvmet: connect request for invalid subsystem testsubsys! [ 275.271652][ T8997] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 276.341201][ T28] audit: type=1800 audit(1789017110.776:13): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="addr_trtype" dev="configfs" ino=17468 res=0 errno=0 [ 277.188240][ T28] audit: type=1800 audit(1789017110.786:14): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.912" name="addr_trsvcid" dev="configfs" ino=17469 res=0 errno=0 [ 277.676059][ T9045] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 277.687893][ T9045] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 277.711314][ T9045] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 277.758445][ T9045] netlink: 'syz.4.916': attribute type 29 has an invalid length. [ 277.848494][ T5763] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 278.018293][ T5763] usb 1-1: device descriptor read/64, error -71 [ 278.288373][ T5763] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 278.507116][ T5763] usb 1-1: device descriptor read/64, error -71 [ 278.638518][ T5763] usb usb1-port1: attempt power cycle [ 279.058791][ T5763] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 279.119103][ T5763] usb 1-1: device descriptor read/8, error -71 [ 279.388255][ T5763] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 279.425268][ T28] audit: type=1800 audit(1789017113.836:15): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.921" name="addr_trsvcid" dev="configfs" ino=17531 res=0 errno=0 [ 280.152391][ T5763] usb 1-1: device descriptor read/8, error -71 [ 280.288939][ T5763] usb usb1-port1: unable to enumerate USB device [ 282.873377][ T9118] netlink: 'syz.5.927': attribute type 3 has an invalid length. [ 284.194389][ T28] audit: type=1800 audit(1789017118.636:16): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.930" name="addr_trsvcid" dev="configfs" ino=16662 res=0 errno=0 [ 286.466603][ T28] audit: type=1800 audit(1789017120.906:17): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.939" name="addr_trsvcid" dev="configfs" ino=16759 res=0 errno=0 [ 287.465321][ T9154] ALSA: mixer_oss: invalid OSS volume '' [ 287.858913][ T9039] Set syz1 is full, maxelem 65536 reached [ 289.741101][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 289.818424][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 289.941785][ T9218] bridge1: entered promiscuous mode [ 289.966801][ T9218] bridge1: entered allmulticast mode [ 289.991042][ T9223] batman_adv: batadv0: Adding interface: veth0 [ 290.023686][ T9223] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.116272][ T9223] batman_adv: batadv0: Interface activated: veth0 [ 290.825267][ T5763] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 291.028873][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 291.051407][ T5763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.072980][ T5763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 291.080221][ T9259] syz.0.963 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 291.092989][ T5763] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 291.104367][ T9264] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 291.108534][ T9259] CPU: 1 PID: 9259 Comm: syz.0.963 Not tainted syzkaller #0 [ 291.119101][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.129268][ T9259] Call Trace: [ 291.132559][ T9259] [ 291.135501][ T9259] dump_stack_lvl+0x18c/0x250 [ 291.140246][ T9259] ? show_regs_print_info+0x20/0x20 [ 291.145464][ T9259] ? load_image+0x420/0x420 [ 291.149981][ T9259] ? ___ratelimit+0x478/0x610 [ 291.154679][ T9259] ? radix_tree_cpu_dead+0x160/0x160 [ 291.159989][ T9259] dump_header+0xd8/0x820 [ 291.164340][ T9259] oom_kill_process+0x390/0x580 [ 291.169214][ T9259] out_of_memory+0xe0e/0x1200 [ 291.173938][ T9259] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 291.179610][ T9259] ? mutex_lock_nested+0x20/0x20 [ 291.184573][ T9259] ? unregister_oom_notifier+0x20/0x20 [ 291.190063][ T9259] mem_cgroup_out_of_memory+0x2c2/0x390 [ 291.195625][ T9259] ? try_charge_memcg+0xc91/0x17c0 [ 291.200753][ T9259] ? drain_local_stock+0x630/0x630 [ 291.205892][ T9259] ? do_raw_spin_unlock+0x121/0x230 [ 291.211112][ T9259] try_charge_memcg+0xca1/0x17c0 [ 291.216270][ T9259] ? folio_flags+0x120/0x120 [ 291.220962][ T9259] ? percpu_ref_tryget+0x15/0x180 [ 291.226001][ T9259] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 291.231741][ T9259] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 291.237737][ T9259] ? percpu_ref_tryget+0x15/0x180 [ 291.242868][ T9259] ? percpu_ref_tryget+0x15/0x180 [ 291.247925][ T9259] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 291.253660][ T9259] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 291.259397][ T9259] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 291.265219][ T9259] obj_cgroup_charge+0x36e/0x630 [ 291.270182][ T9259] ? get_obj_cgroup_from_current+0xd4/0x280 [ 291.276092][ T9259] ? obj_cgroup_charge+0xed/0x630 [ 291.281136][ T9259] ? mod_objcg_mlstate+0x320/0x320 [ 291.286271][ T9259] ? percpu_ref_tryget+0x15/0x180 [ 291.291335][ T9259] ? get_obj_cgroup_from_current+0xd4/0x280 [ 291.297281][ T9259] slab_pre_alloc_hook+0x2e2/0x300 [ 291.302413][ T9259] ? kvmalloc_node+0x70/0x180 [ 291.307109][ T9259] ? kvmalloc_node+0x70/0x180 [ 291.311801][ T9259] __kmem_cache_alloc_node+0x53/0x250 [ 291.317195][ T9259] ? kvmalloc_node+0x70/0x180 [ 291.321886][ T9259] __kmalloc_node+0xa6/0x240 [ 291.326499][ T9259] kvmalloc_node+0x70/0x180 [ 291.331018][ T9259] alloc_fdtable+0x106/0x2c0 [ 291.335668][ T9259] dup_fd+0x747/0xa20 [ 291.339671][ T9259] ? _raw_spin_unlock+0x28/0x40 [ 291.344533][ T9259] ? copy_fs_struct+0x1c3/0x270 [ 291.349399][ T9259] ksys_unshare+0x45c/0x8f0 [ 291.353923][ T9259] ? sighand_ctor+0x50/0x50 [ 291.358439][ T9259] ? lock_chain_count+0x20/0x20 [ 291.363313][ T9259] ? syscall_enter_from_user_mode+0x25/0x80 [ 291.369243][ T9259] __x64_sys_unshare+0x38/0x40 [ 291.374041][ T9259] do_syscall_64+0x55/0xb0 [ 291.378477][ T9259] ? clear_bhb_loop+0x40/0x90 [ 291.383193][ T9259] ? clear_bhb_loop+0x40/0x90 [ 291.387888][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.393813][ T9259] RIP: 0033:0x7f32e699e159 [ 291.398241][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.417867][ T9259] RSP: 002b:00007f32e793b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.426296][ T9259] RAX: ffffffffffffffda RBX: 00007f32e6c25fa0 RCX: 00007f32e699e159 [ 291.434284][ T9259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020400 [ 291.442272][ T9259] RBP: 00007f32e6a3503b R08: 0000000000000000 R09: 0000000000000000 [ 291.450262][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.458298][ T9259] R13: 00007f32e6c26038 R14: 00007f32e6c25fa0 R15: 00007ffe301ad8c8 [ 291.466309][ T9259] [ 291.476992][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.492871][ T9259] memory: usage 4kB, limit 8kB, failcnt 20 [ 291.493437][ T5763] usb 6-1: Product: syz [ 291.503002][ T5763] usb 6-1: Manufacturer: syz [ 291.506196][ T9259] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 291.508351][ T5763] usb 6-1: SerialNumber: syz [ 291.515910][ T9259] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 291.536307][ T5763] usb 6-1: config 0 descriptor?? [ 291.543904][ T9259] Memory cgroup stats for /syz0/test: [ 291.544464][ T9259] cache 0 [ 291.553736][ T9259] rss 0 [ 291.556716][ T9259] rss_huge 0 [ 291.560793][ T9259] shmem 0 [ 291.564031][ T9259] mapped_file 0 [ 291.570573][ T9259] dirty 0 [ 291.573671][ T9259] writeback 0 [ 291.577268][ T9259] workingset_refault_anon 0 [ 291.582564][ T9259] workingset_refault_file 0 [ 291.588575][ T9259] swap 0 [ 291.591568][ T9259] pgpgin 0 [ 291.596234][ T9259] pgpgout 0 [ 291.613209][ T9259] pgfault 2 [ 291.620851][ T9259] pgmajfault 0 [ 291.628013][ T9259] inactive_anon 0 [ 291.635528][ T9259] active_anon 0 [ 291.643878][ T9259] inactive_file 0 [ 291.655473][ T9259] active_file 0 [ 291.660108][ T9267] veth1_to_bond: entered promiscuous mode [ 291.666133][ T9259] unevictable 0 [ 291.671078][ T9259] hierarchical_memory_limit 8192 [ 291.686573][ T9259] hierarchical_memsw_limit 9223372036854771712 [ 291.694022][ T9267] veth1_to_bond: entered allmulticast mode [ 291.700626][ T9259] total_cache 0 [ 291.706504][ T9259] total_rss 0 [ 291.715245][ T9259] total_rss_huge 0 [ 291.729068][ T9259] total_shmem 0 [ 291.738487][ T9259] total_mapped_file 0 [ 291.749806][ T9259] total_dirty 0 [ 291.759405][ T9259] total_writeback 0 [ 291.770207][ T9259] total_workingset_refault_anon 0 [ 291.777544][ T5763] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 291.783635][ T9259] total_workingset_refault_file 0 [ 291.812109][ T9259] total_swap 0 [ 291.822381][ T9259] total_pgpgin 0 [ 291.845971][ T9259] total_pgpgout 0 [ 291.882069][ T9259] total_pgfault 2 [ 291.921516][ T9259] total_pgmajfault 0 [ 291.925512][ T9259] total_inactive_anon 0 [ 291.933491][ T9263] veth1_to_bond: left allmulticast mode [ 291.946363][ T9263] veth1_to_bond: left promiscuous mode [ 291.958467][ T9259] total_active_anon 0 [ 291.962903][ T9259] total_inactive_file 0 [ 291.967503][ T9259] total_active_file 0 [ 291.982594][ T9259] total_unevictable 0 [ 291.990477][ T9259] anon_cost 0 [ 291.993956][ T9259] file_cost 0 [ 292.001108][ T9259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.963,pid=9258,uid=0 [ 292.033706][ T9259] Memory cgroup out of memory: Killed process 9259 (syz.0.963) total-vm:105896kB, anon-rss:1372kB, file-rss:24320kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 292.179336][ T5763] rc_core: IR keymap rc-imon-pad not found [ 292.189716][ T5763] Registered IR keymap rc-empty [ 292.202327][ T5763] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 292.218281][ T5763] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 292.272079][ T5763] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 292.323842][ T5763] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 292.346912][ T5763] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:2> initialized [ 292.439494][ C0] imon 6-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 293.330973][ T9287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.361942][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 293.467192][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 293.467560][ T5778] usb 6-1: USB disconnect, device number 2 [ 293.537355][ T9293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.571587][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 293.582914][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 293.597244][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.607100][ T9295] bond1: (slave bond0): making interface the new active one [ 293.618827][ T9295] bond1: (slave bond0): Enslaving as an active interface with an up link [ 293.628431][ T8925] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 293.820476][ T8925] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.836401][ T8925] usb 5-1: config 0 has no interface number 0 [ 293.843256][ T8925] usb 5-1: config 0 interface 41 has no altsetting 0 [ 293.854058][ T8925] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 293.863915][ T8925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.873722][ T8925] usb 5-1: Product: syz [ 293.885072][ T8925] usb 5-1: Manufacturer: syz [ 293.891600][ T8925] usb 5-1: SerialNumber: syz [ 293.910946][ T8925] usb 5-1: config 0 descriptor?? [ 294.333187][ T8925] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 294.353290][ T8925] CoreChips: probe of 5-1:0.41 failed with error -71 [ 294.368895][ T8925] usb 5-1: USB disconnect, device number 6 [ 294.373537][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 294.397403][ T9313] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9313] [ 294.498344][ T5778] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 294.689882][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 294.707210][ T5778] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 294.727328][ T5778] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.738273][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.747422][ T5778] usb 1-1: config 1 has no interface number 0 [ 294.758897][ T5778] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.770070][ T5778] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 294.788283][ T5778] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.815150][ T5778] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.837218][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.945285][ T5778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 295.130490][ T5778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 295.231040][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 295.258373][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 295.609356][ T5778] usb 1-1: USB disconnect, device number 8 [ 295.645331][ T5778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 298.598372][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.606200][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.883448][ T9386] batman_adv: batadv0: Interface deactivated: veth0 [ 299.337184][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.361231][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.822769][ T9386] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.832169][ T9386] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.844225][ T9386] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.853477][ T9386] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.959662][ T9402] bond1: option mode: unable to set because the bond device has slaves [ 299.973621][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 299.984329][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 300.060947][ T9405] bond1: (slave bond0): Releasing active interface [ 300.538483][ T5763] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 300.738279][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 300.760322][ T5763] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 300.782410][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.809820][ T5763] usb 1-1: config 0 descriptor?? [ 300.822232][ T5763] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 301.092718][ T9446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.225658][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 301.244508][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 301.891126][ T5763] gspca_sonixj: reg_r err -32 [ 301.898369][ T5763] sonixj: probe of 1-1:0.0 failed with error -32 [ 302.422101][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.438700][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.459896][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.484558][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.495713][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.514994][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.527712][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.536299][ T5763] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 302.547754][ T5763] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 302.726414][ T9468] loop4: detected capacity change from 0 to 4096 [ 302.775000][ T9468] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 302.824406][ T9468] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 302.835126][ T9468] ntfs3: loop4: try to read out of volume at offset 0x1ff000 [ 302.853047][ T9468] ntfs3: loop4: Failed to load $MFT. [ 302.997626][ T9481] bond2: option mode: unable to set because the bond device is up [ 303.014670][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 303.023850][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 303.256869][ T5917] usb 1-1: USB disconnect, device number 9 [ 303.766315][ T9505] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 303.775274][ T9505] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 303.786239][ T9505] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 303.795530][ T9505] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 305.510076][ T9572] bond1: option mode: unable to set because the bond device is up [ 305.533930][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 305.549958][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 306.174050][ T9595] bond1: option mode: unable to set because the bond device is up [ 306.217061][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 306.238332][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 306.883683][ T9628] bond1: option mode: unable to set because the bond device is up [ 308.158260][ T970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 308.191084][ T9653] bond2: option mode: unable to set because the bond device is up [ 308.358292][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 308.369767][ T970] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 308.385092][ T970] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 308.408319][ T970] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 308.417351][ T970] usb 6-1: config 1 has no interface number 0 [ 308.438555][ T970] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.458257][ T970] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 308.478361][ T970] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 308.508325][ T970] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 308.517438][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.565950][ T970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 308.762606][ T970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 308.997033][ T970] usb 6-1: USB disconnect, device number 3 [ 309.004323][ T970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 309.777874][ T9673] bond2: option mode: unable to set because the bond device is up [ 309.986533][ T9676] loop5: detected capacity change from 0 to 4096 [ 310.020979][ T9676] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 310.061773][ T9676] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 310.088500][ T9676] ntfs3: loop5: try to read out of volume at offset 0x1ff000 [ 310.114722][ T9676] ntfs3: loop5: Failed to load $MFT. [ 311.127616][ T9689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.148458][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 311.177851][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 311.223788][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.291363][ T9691] bond1: (slave bond0): making interface the new active one [ 311.329153][ T9691] bond1: (slave bond0): Enslaving as an active interface with an up link [ 312.108741][ T9698] bond2: option mode: unable to set because the bond device is up [ 312.121880][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 312.827640][ T9718] bond2: option mode: unable to set because the bond device is up [ 313.800099][ T9729] bond2: option mode: unable to set because the bond device is up [ 313.814779][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 314.128323][ T8924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.192011][ T9735] overlayfs: failed to clone upperpath [ 314.350239][ T8924] usb 6-1: Using ep0 maxpacket: 32 [ 314.357891][ T8924] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 314.378321][ T8924] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 314.387002][ T8924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 314.398514][ T8924] usb 6-1: config 1 has no interface number 0 [ 314.404683][ T8924] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.428084][ T8924] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 314.449634][ T8924] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 314.493645][ T8924] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 314.518406][ T8924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.570385][ T8924] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 314.962789][ T9748] bond2: option mode: unable to set because the bond device is up [ 314.974386][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 315.584106][ T9766] bond1: option mode: unable to set because the bond device is up [ 315.595121][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 316.454100][ T9786] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1162'. [ 316.641536][ T9790] bond1: option mode: unable to set because the bond device is up [ 316.652371][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 316.777286][ T8924] snd_usb_pod 6-1:1.1: set_interface failed [ 316.796564][ T8924] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 316.814415][ T8924] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 316.832389][ T8924] usb 6-1: USB disconnect, device number 4 [ 317.395155][ T9812] bond1: option mode: unable to set because the bond device has slaves [ 317.414455][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1177'. [ 317.462180][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.474062][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.978455][ T5763] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 318.159750][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 318.167771][ T5763] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 318.182038][ T5763] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 318.200871][ T9841] bond1: option mode: unable to set because the bond device is up [ 318.208223][ T5763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 318.217716][ T5763] usb 5-1: config 1 has no interface number 0 [ 318.229730][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 318.238270][ T5763] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.242944][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 318.258564][ T5763] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 318.258608][ T5763] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 318.258661][ T5763] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.258687][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.273061][ T5763] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 318.311387][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.329731][ T9841] bond1: (slave bond0): making interface the new active one [ 318.345576][ T9841] bond1: (slave bond0): Enslaving as an active interface with an up link [ 319.068021][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 319.082004][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 319.100908][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.120108][ T9863] bond2: (slave bond0): making interface the new active one [ 319.131299][ T9863] bond2: (slave bond0): Enslaving as an active interface with an up link [ 320.012244][ T9876] loop5: detected capacity change from 0 to 256 [ 320.076009][ T9876] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x990b46a1, utbl_chksum : 0xe619d30d) [ 320.944205][ T5763] snd_usb_pod 5-1:1.1: set_interface failed [ 320.966480][ T5763] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 320.988605][ T5763] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 321.015853][ T5763] usb 5-1: USB disconnect, device number 7 [ 321.016464][ T9889] Config c/1 of g_uac2 needs at least one function. [ 321.036163][ T9889] udc usbip-vudc.0: failed to start g_uac2: -22 [ 321.044958][ T9889] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 321.088809][ T9889] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 321.939056][ T9891] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6296] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9891] [ 323.745162][ T8924] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 323.901574][ T9920] loop5: detected capacity change from 0 to 256 [ 323.914651][ T9920] exfat: Bad value for 'dmask' [ 324.711170][ T8444] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.758493][ T8924] usb 1-1: Using ep0 maxpacket: 32 [ 324.786681][ T8924] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 324.878723][ T8924] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.887575][ T8924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.897844][ T8924] usb 1-1: config 1 has no interface number 0 [ 324.917215][ T8924] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.965006][ T8924] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 325.019259][ T8924] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 325.023260][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1222'. [ 325.049173][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1222'. [ 325.085227][ T8924] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 325.120432][ T3466] bond1: (slave bond0): link status definitely down, disabling slave [ 325.144998][ T8924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.156394][ T3466] bond1: now running without any active interface! [ 325.202643][ T8924] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 325.333589][ T9930] bond2: option mode: unable to set because the bond device has slaves [ 327.331968][ T8924] snd_usb_pod 1-1:1.1: set_interface failed [ 327.338059][ T8924] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 327.385576][ T8924] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 327.440385][ T8924] usb 1-1: USB disconnect, device number 10 [ 330.455859][ T9977] loop4: detected capacity change from 0 to 4096 [ 330.505734][ T9977] EXT4-fs (loop4): Test dummy encryption mode enabled [ 330.767659][ T9977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.059753][ T996] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 331.085519][ T996] (NULL device *): queue 0 connect admin queue failed (-111). [ 331.096300][ T996] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 331.111912][ T996] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 331.124543][ T9986] nvme nvme0: NVME-FC{0}: new ctrl: NQN "n" [ 331.221807][ T9977] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 331.453734][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.131064][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 333.358816][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 333.483505][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 333.635733][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 337.121461][T10043] input: syz1 as /devices/virtual/input/input9 [ 337.483937][ T1316] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 337.560264][ T1316] (NULL device *): queue 0 connect admin queue failed (-111). [ 337.567924][ T1316] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 337.577034][ T1316] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 338.244558][T10059] ubi0: attaching mtd0 [ 338.263417][T10059] ubi0: scanning is finished [ 338.268174][T10059] ubi0: empty MTD device detected [ 338.481546][T10059] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 338.489471][T10059] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 338.496852][T10059] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 338.504187][T10059] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 338.511778][T10059] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 338.518736][T10059] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 338.526860][T10059] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4265439724 [ 338.537008][T10059] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 338.588989][T10060] ubi0: background thread "ubi_bgt0d" started, PID 10060 [ 339.052734][T10064] loop4: detected capacity change from 0 to 128 [ 339.088890][T10064] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 339.118951][T10064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.628010][ T9976] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 339.650898][ T9976] (NULL device *): queue 0 connect admin queue failed (-111). [ 339.679923][ T9976] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 339.717276][ T9976] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 341.769416][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 341.791256][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 341.820975][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 341.831699][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 342.568519][T10094] IPVS: length: 104 != 24 [ 343.964449][T10101] ubi: mtd0 is already attached to ubi0 [ 344.263695][ T9976] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 344.330303][ T9976] (NULL device *): queue 0 connect admin queue failed (-111). [ 344.348245][ T9976] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 344.356049][ T9976] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 344.812740][T10113] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8453] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10113] [ 345.952521][T10121] loop5: detected capacity change from 0 to 1024 [ 346.418617][ T9976] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 346.768666][ T9976] (NULL device *): queue 0 connect admin queue failed (-111). [ 346.807007][ T9976] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 346.840465][T10125] tipc: Failed to remove unknown binding: 66,0,0/0:1828311666/1828311668 [ 346.868220][ T9976] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 346.875472][T10125] tipc: Failed to remove unknown binding: 66,0,0/0:1828311666/1828311667 [ 348.053692][T10136] input: syz1 as /devices/virtual/input/input10 [ 348.718870][T10139] loop4: detected capacity change from 0 to 4096 [ 348.968835][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 348.983207][T10139] ntfs: volume version 3.1. [ 349.311083][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 349.515919][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 349.709955][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 349.751406][T10149] loop5: detected capacity change from 0 to 256 [ 349.905681][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 349.938447][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 350.194456][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3dfe instead [ 350.208445][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x1a36 instead [ 350.454157][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 350.625526][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 351.089018][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 351.241828][T10158] bond1: option mode: unable to set because the bond device is up [ 351.245713][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 351.261918][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 351.272616][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 351.296764][T10149] jffs2: Further such events for this erase block will not be printed [ 351.334755][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 351.548311][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 351.639217][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3dfe instead [ 352.052438][T10167] CIFS mount error: No usable UNC path provided in device string! [ 352.052438][T10167] [ 352.062857][T10167] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.096121][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x1a36 instead [ 352.102206][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 352.121869][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 352.129822][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 352.139332][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 352.149873][ T8] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 352.163053][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 352.173697][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 352.293406][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 352.318865][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 352.335607][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 352.351170][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 352.372214][T10149] jffs2: Further such events for this erase block will not be printed [ 352.381232][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 352.398578][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 352.418265][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3dfe instead [ 352.434055][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x0050 instead [ 352.444704][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0007 instead [ 352.476137][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x002d instead [ 352.555369][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0003 instead [ 352.616678][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x2000 instead [ 352.723795][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002040: 0x8000 instead [ 352.827702][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002044: 0x0002 instead [ 352.926187][T10149] jffs2: Further such events for this erase block will not be printed [ 353.005800][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 353.053302][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 353.084315][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 353.119048][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 353.159212][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3dfe instead [ 353.274604][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x1a36 instead [ 353.286476][ T8] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 353.296590][ T8] usb 5-1: config 0 has no interface number 0 [ 353.312354][ T8] usb 5-1: config 0 interface 41 has no altsetting 0 [ 353.319410][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 353.335072][T10177] bond2: (slave bond0): Releasing active interface [ 353.347951][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 353.358733][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3dfe instead [ 353.370235][ T8] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 353.380654][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.407623][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x1a36 instead [ 353.419803][ T8] usb 5-1: Product: syz [ 353.424392][ T8] usb 5-1: Manufacturer: syz [ 353.434368][ T8] usb 5-1: SerialNumber: syz [ 353.439392][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 353.444189][T10179] tipc: Started in network mode [ 353.456775][ T8] usb 5-1: config 0 descriptor?? [ 353.463107][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 353.469787][T10179] tipc: Node identity 7f000001, cluster identity 4711 [ 353.477347][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3dfe instead [ 353.500415][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x1a36 instead [ 353.511627][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 353.522924][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 353.533804][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3dfe instead [ 353.544493][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x1a36 instead [ 353.555568][T10179] tipc: New replicast peer: 127.0.0.1 [ 353.562219][T10179] tipc: Enabled bearer , priority 10 [ 353.568772][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 353.626663][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 353.638648][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3dfe instead [ 353.653782][ T8] CoreChips: probe of 5-1:0.41 failed with error -71 [ 353.685799][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x1a36 instead [ 353.706657][ T8] usb 5-1: USB disconnect, device number 8 [ 353.774465][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 353.786234][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 353.797553][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3dfe instead [ 353.808330][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x1a36 instead [ 353.822115][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 353.841676][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 353.854940][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3dfe instead [ 353.871646][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x1a36 instead [ 353.885624][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 353.907033][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 353.928046][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3dfe instead [ 353.957296][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x1a36 instead [ 353.985419][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 354.014450][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 354.028688][T10185] loop4: detected capacity change from 0 to 4096 [ 354.035130][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3dfe instead [ 354.046293][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x1a36 instead [ 354.056431][T10185] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 354.056931][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 354.076847][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 354.087320][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3dfe instead [ 354.097874][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x1a36 instead [ 354.109333][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 354.170793][T10190] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10190] [ 354.238547][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 354.251484][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3dfe instead [ 354.329000][ T3466] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 354.385719][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x1a36 instead [ 354.548909][ T3466] (NULL device *): queue 0 connect admin queue failed (-111). [ 354.602978][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 354.681196][ T5816] tipc: Node number set to 2130706433 [ 354.688025][ T3466] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 354.723288][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 354.735192][ T3466] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 354.788064][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3dfe instead [ 354.824659][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x1a36 instead [ 354.890026][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 354.901280][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 354.912733][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3dfe instead [ 354.923454][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1a36 instead [ 354.935865][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 354.944394][T10185] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 354.946437][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 354.963814][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3dfe instead [ 354.974410][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1a36 instead [ 354.985548][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 354.996832][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 355.029699][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3dfe instead [ 355.049126][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1a36 instead [ 355.069272][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 355.096334][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 355.126289][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3dfe instead [ 355.146995][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1a36 instead [ 355.185971][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 355.228261][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 355.253863][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3dfe instead [ 355.278497][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1a36 instead [ 355.298260][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 355.325801][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 355.358450][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3dfe instead [ 355.369349][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 355.389148][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1a36 instead [ 355.445311][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 355.469624][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 355.493726][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 355.508604][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 355.517762][T10206] bond1: option mode: unable to set because the bond device is up [ 355.518371][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3dfe instead [ 355.559103][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1a36 instead [ 355.577566][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 355.588927][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 355.602272][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3dfe instead [ 355.614004][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1a36 instead [ 355.649034][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 355.687752][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 355.744464][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3dfe instead [ 355.808525][ T5816] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 355.833330][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1a36 instead [ 355.942185][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 356.012204][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 356.087330][ T5816] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 356.113294][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3dfe instead [ 356.148339][ T5816] usb 5-1: config 0 has no interface number 0 [ 356.185846][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1a36 instead [ 356.205819][ T5816] usb 5-1: config 0 interface 41 has no altsetting 0 [ 356.275624][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 356.343528][ T5816] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 356.368001][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 356.404847][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.441992][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3dfe instead [ 356.478597][ T5816] usb 5-1: Product: syz [ 356.483678][ T5816] usb 5-1: Manufacturer: syz [ 356.494217][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1a36 instead [ 356.505287][ T5816] usb 5-1: SerialNumber: syz [ 356.518711][ T5816] usb 5-1: config 0 descriptor?? [ 356.548922][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 356.588476][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 356.618445][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3dfe instead [ 356.858788][ T1316] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 356.878332][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1a36 instead [ 356.911991][ T1316] (NULL device *): queue 0 connect admin queue failed (-111). [ 356.931562][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 356.940863][ T1316] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 356.942060][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 356.960648][ T1316] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 356.966825][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3dfe instead [ 357.760304][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1a36 instead [ 357.790045][ T5816] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 357.856780][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 357.872398][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 357.898055][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3dfe instead [ 357.917652][ T5816] CoreChips: probe of 5-1:0.41 failed with error -71 [ 357.928714][ T5816] usb 5-1: USB disconnect, device number 9 [ 357.953118][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1a36 instead [ 357.973445][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 357.983920][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 357.994624][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3dfe instead [ 358.034251][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1a36 instead [ 358.045041][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 358.055796][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 358.068612][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3dfe instead [ 358.079295][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1a36 instead [ 358.090212][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 358.101511][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 358.112297][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3dfe instead [ 358.124525][T10149] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1a36 instead [ 358.136261][T10149] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 358.162719][T10149] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 358.604089][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 358.625140][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 358.662265][T10235] bond1: (slave bond0): Releasing active interface [ 358.759570][T10237] loop4: detected capacity change from 0 to 8 [ 358.969040][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 359.005818][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 359.022104][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 359.040363][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 359.189393][ T5816] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 359.398386][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 359.422523][ T5816] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 359.467752][ T5816] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 359.551879][ T5816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 359.708735][ T5816] usb 6-1: config 1 has no interface number 0 [ 359.825037][ T5816] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.964179][ T5816] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 360.008092][ T5816] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 360.017829][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.110391][ T5816] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 360.214326][T10260] bond1: option mode: unable to set because the bond device has slaves [ 360.309479][ T5816] snd_usb_pod 6-1:1.1: invalid control EP [ 360.315274][ T5816] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 360.322720][ T5816] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 360.330540][ T5816] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 360.508266][ T970] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 360.522879][ T5816] usb 6-1: USB disconnect, device number 5 [ 360.713004][ T970] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 360.721288][ T970] usb 1-1: config 0 has no interface number 0 [ 360.727477][ T970] usb 1-1: config 0 interface 41 has no altsetting 0 [ 360.736977][ T970] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 360.746136][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.754207][ T970] usb 1-1: Product: syz [ 360.758450][ T970] usb 1-1: Manufacturer: syz [ 360.763068][ T970] usb 1-1: SerialNumber: syz [ 360.770251][ T970] usb 1-1: config 0 descriptor?? [ 361.023092][T10267] capability: warning: `syz.2.1332' uses deprecated v2 capabilities in a way that may be insecure [ 361.048937][ T40] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 361.088358][ T40] (NULL device *): queue 0 connect admin queue failed (-111). [ 361.095968][ T40] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 361.134963][ T40] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 361.191037][ T970] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 361.204504][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 361.233213][ T970] CoreChips: probe of 1-1:0.41 failed with error -71 [ 361.236217][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1333'. [ 361.255542][ T970] usb 1-1: USB disconnect, device number 11 [ 361.273863][T10269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.287076][T10269] bond1: (slave bond0): making interface the new active one [ 361.302666][T10269] bond1: (slave bond0): Enslaving as an active interface with an up link [ 361.518292][ T5816] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 361.711643][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.722155][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.742622][ T5816] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.756101][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.765903][ T5816] usb 5-1: Product: syz [ 361.774577][ T5816] usb 5-1: Manufacturer: syz [ 361.780976][ T5816] usb 5-1: SerialNumber: syz [ 362.005020][ T5816] usb 5-1: 0:2 : does not exist [ 362.016556][ T5816] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 362.480587][ T5816] usb 5-1: USB disconnect, device number 10 [ 362.772749][ T8444] udevd[8444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.249247][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 363.276051][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 363.285898][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 363.431754][T10299] Bluetooth: MGMT ver 1.22 [ 363.657445][ T970] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.173636][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 364.321795][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 364.330907][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 364.336612][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 364.347965][ T970] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 364.358686][T10302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.367004][ T970] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 364.378230][ T970] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 364.389830][T10302] bond1: (slave bond0): making interface the new active one [ 364.398026][ T970] usb 6-1: config 1 has no interface number 0 [ 364.410006][ T970] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 364.413028][T10302] bond1: (slave bond0): Enslaving as an active interface with an up link [ 364.421482][ T970] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 365.097099][ T970] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 365.106749][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.123215][ T970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 365.334426][ T970] snd_usb_pod 6-1:1.1: invalid control EP [ 365.356714][ T970] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 365.379389][ T970] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 365.388948][ T970] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 365.544311][ T8924] usb 6-1: USB disconnect, device number 6 [ 366.231087][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.253351][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.262825][ T1316] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 366.283724][ T1316] (NULL device *): queue 0 connect admin queue failed (-111). [ 366.298037][ T1316] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 366.312570][ T1316] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 366.321900][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.348276][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.382020][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.466103][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.483704][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.508029][ T5816] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 366.515103][T10329] loop4: detected capacity change from 0 to 4096 [ 366.530726][T10329] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 366.558039][T10329] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 366.561386][ T5816] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 366.593622][T10329] ntfs3: loop4: try to read out of volume at offset 0x1ff000 [ 366.598885][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 366.621728][T10329] ntfs3: loop4: Failed to load $MFT. [ 366.633026][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 366.663362][T10337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.700125][T10337] bond2: (slave bond0): making interface the new active one [ 366.745350][T10338] fido_id[10338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.766797][T10337] bond2: (slave bond0): Enslaving as an active interface with an up link [ 368.369219][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 368.469419][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 368.513928][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 368.568639][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 369.125578][T10356] loop5: detected capacity change from 0 to 8 [ 371.059081][ T9976] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 371.168540][ T9976] (NULL device *): queue 0 connect admin queue failed (-111). [ 371.176091][ T9976] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 371.241512][ T9976] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 373.288380][ T40] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 373.913217][ T40] (NULL device *): queue 0 connect admin queue failed (-111). [ 373.948447][ T40] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 373.956250][ T40] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 375.992298][T10409] bond1: option mode: unable to set because the bond device has slaves [ 376.086134][T10417] loop4: detected capacity change from 0 to 2048 [ 376.103000][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 376.204988][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 376.221734][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 376.229675][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 376.244638][T10417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.398354][ T970] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 376.675065][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1387'. [ 377.052314][T10416] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 377.241055][T10416] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 377.253979][T10416] EXT4-fs (loop4): This should not happen!! Data will be lost [ 377.253979][T10416] [ 377.272815][T10416] EXT4-fs (loop4): Total free blocks count 0 [ 377.297377][ T970] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 377.306772][T10425] loop5: detected capacity change from 0 to 256 [ 377.311864][ T970] usb 1-1: config 0 has no interface number 0 [ 377.320471][T10416] EXT4-fs (loop4): Free/Dirty block details [ 377.334103][T10425] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.340543][ T970] usb 1-1: config 0 interface 41 has no altsetting 0 [ 377.358490][T10416] EXT4-fs (loop4): free_blocks=4096 [ 377.376399][ T970] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 377.392912][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.402351][T10416] EXT4-fs (loop4): dirty_blocks=32 [ 377.407529][T10416] EXT4-fs (loop4): Block reservation details [ 377.424994][ T970] usb 1-1: Product: syz [ 377.429466][ T970] usb 1-1: Manufacturer: syz [ 377.434192][T10416] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 377.434625][T10425] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 377.440337][ T970] usb 1-1: SerialNumber: syz [ 377.474950][ T970] usb 1-1: config 0 descriptor?? [ 377.804293][ T6296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.016287][ T970] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 378.273525][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 378.309812][ T970] CoreChips: probe of 1-1:0.41 failed with error -71 [ 378.332520][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 378.353737][ T970] usb 1-1: USB disconnect, device number 12 [ 378.372697][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 378.400572][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 378.999317][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005790][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.962354][T10453] Invalid ELF header magic: != ELF [ 380.741185][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 381.041359][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 381.098197][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 381.116260][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 381.121975][T10456] loop4: detected capacity change from 0 to 2048 [ 381.241138][T10456] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 381.438392][ T5917] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 381.778244][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 381.803329][ T5917] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 381.832160][ T5917] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 381.851789][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 381.872672][ T5917] usb 1-1: config 1 has no interface number 0 [ 381.881583][ T5917] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.891659][ T5917] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 381.907495][ T5917] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 381.922655][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.978726][ T5917] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 382.210422][ T5917] snd_usb_pod 1-1:1.1: invalid control EP [ 382.234918][ T5917] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 382.268989][ T5917] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 382.301414][ T5917] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 382.443788][ T5917] usb 1-1: USB disconnect, device number 13 [ 382.618698][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 382.638392][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 382.679779][ T3423] bond1: (slave bond0): link status definitely down, disabling slave [ 382.707640][ T3423] bond1: now running without any active interface! [ 383.138663][ T3446] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 383.216361][ T3446] (NULL device *): queue 0 connect admin queue failed (-111). [ 383.264176][ T3446] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 383.328396][ T3446] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 383.628480][ T5816] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 384.900962][ T5816] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 384.910394][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.918931][ T5816] usb 1-1: Product: syz [ 384.928763][ T5816] usb 1-1: Manufacturer: syz [ 384.933653][ T5816] usb 1-1: SerialNumber: syz [ 385.029344][T10494] loop5: detected capacity change from 0 to 512 [ 385.087223][T10494] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.1408: corrupted in-inode xattr: invalid ea_ino [ 385.188847][T10494] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1408: couldn't read orphan inode 15 (err -117) [ 385.231407][ T5816] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 385.283330][T10494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.325238][ T5816] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 385.528185][ T3446] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 385.549547][T10494] overlayfs: missing 'lowerdir' [ 385.681535][ T3446] (NULL device *): queue 0 connect admin queue failed (-111). [ 385.715862][ T3446] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 385.740715][ T3446] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 385.740846][ T8453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.788748][ T5816] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 385.811013][ T5816] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 385.869116][ T5816] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.913899][ T5816] lan78xx: probe of 1-1:1.0 failed with error -71 [ 385.982349][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1410'. [ 385.994078][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1410'. [ 386.041339][ T5816] usb 1-1: USB disconnect, device number 14 [ 386.912273][T10471] udevd[10471]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory [ 386.912429][T10476] udevd[10476]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 386.926698][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 386.936660][ T8004] udevd[8004]: inotify_add_watch(7, /dev/loop4p27, 10) failed: No such file or directory [ 386.945845][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 386.957422][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 386.966355][T10472] udevd[10472]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 386.974113][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 386.986417][T10475] udevd[10475]: inotify_add_watch(7, /dev/loop4p23, 10) failed: No such file or directory [ 386.996322][ T8448] udevd[8448]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 387.061344][T10513] nvmet: adding nsid 1 to subsystem testsubsys [ 387.769299][ T4944] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 387.861210][ T4944] (NULL device *): queue 0 connect admin queue failed (-111). [ 387.907721][ T4944] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 387.976863][ T4944] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 388.844778][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 388.889075][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 389.092947][ T3486] bond1: (slave bond0): link status definitely down, disabling slave [ 389.159844][ T3486] bond1: now running without any active interface! [ 390.254732][ T3486] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 390.428905][ T3486] (NULL device *): queue 0 connect admin queue failed (-111). [ 390.479448][ T3486] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 390.541040][ T3486] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 393.507653][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 393.538534][ T5816] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 393.567070][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 393.588600][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 393.597762][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 394.688241][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 394.750525][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 394.772925][ T5816] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 394.788422][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 394.808648][ T5816] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 394.828733][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 394.837752][ T5816] usb 5-1: config 1 has no interface number 0 [ 394.895459][ T5816] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.978309][ T5816] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 395.038404][ T5816] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 395.072405][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.160293][ T5816] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 395.402502][ T5816] snd_usb_pod 5-1:1.1: invalid control EP [ 395.438191][ T5816] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 395.468517][ T5816] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 395.476222][ T5816] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 395.648705][ T5763] usb 5-1: USB disconnect, device number 11 [ 395.699095][ T40] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 395.768755][ T40] (NULL device *): queue 0 connect admin queue failed (-111). [ 395.819717][ T40] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 395.827524][ T40] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 397.036113][T10585] loop5: detected capacity change from 0 to 512 [ 397.086825][T10585] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 397.275202][T10587] [ 397.277601][T10587] ====================================================== [ 397.284647][T10587] WARNING: possible circular locking dependency detected [ 397.291691][T10587] syzkaller #0 Not tainted [ 397.296131][T10587] ------------------------------------------------------ [ 397.303178][T10587] syz.0.1442/10587 is trying to acquire lock: [ 397.309273][T10587] ffff8880200415a0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 397.320834][T10587] [ 397.320834][T10587] but task is already holding lock: [ 397.328310][T10587] ffff88801cb85920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 397.337490][T10587] [ 397.337490][T10587] which lock already depends on the new lock. [ 397.337490][T10587] [ 397.347917][T10587] [ 397.347917][T10587] the existing dependency chain (in reverse order) is: [ 397.356964][T10587] [ 397.356964][T10587] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 397.364659][T10587] __mutex_lock+0x135/0xc80 [ 397.369788][T10587] tcm_set_name+0x2a/0x90 [ 397.374696][T10587] function_make+0x199/0x350 [ 397.379841][T10587] configfs_mkdir+0x515/0x9e0 [ 397.385081][T10587] vfs_mkdir+0x2a5/0x470 [ 397.389886][T10587] do_mkdirat+0x1dc/0x450 [ 397.394778][T10587] __x64_sys_mkdir+0x6e/0x80 [ 397.399934][T10587] do_syscall_64+0x55/0xb0 [ 397.404964][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.411456][T10587] [ 397.411456][T10587] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 397.419750][T10587] __mutex_lock+0x135/0xc80 [ 397.424880][T10587] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 397.431655][T10587] configfs_symlink+0x5a5/0xfe0 [ 397.437069][T10587] vfs_symlink+0x138/0x2b0 [ 397.442050][T10587] do_symlinkat+0x1ba/0x400 [ 397.447100][T10587] __x64_sys_symlink+0x7e/0x90 [ 397.452411][T10587] do_syscall_64+0x55/0xb0 [ 397.457390][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.463852][T10587] [ 397.463852][T10587] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 397.472602][T10587] __lock_acquire+0x37ef/0x7d80 [ 397.478012][T10587] lock_acquire+0x19e/0x420 [ 397.483080][T10587] down_write+0x97/0x200 [ 397.487891][T10587] configfs_depend_item_unlocked+0x157/0x430 [ 397.494436][T10587] usbg_make_tpg+0x1f7/0x580 [ 397.499595][T10587] target_fabric_make_tpg+0xa4/0x6d0 [ 397.505444][T10587] configfs_mkdir+0x515/0x9e0 [ 397.510679][T10587] vfs_mkdir+0x2a5/0x470 [ 397.515478][T10587] do_mkdirat+0x1dc/0x450 [ 397.520364][T10587] __x64_sys_mkdir+0x6e/0x80 [ 397.525504][T10587] do_syscall_64+0x55/0xb0 [ 397.530480][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.536938][T10587] [ 397.536938][T10587] other info that might help us debug this: [ 397.536938][T10587] [ 397.547202][T10587] Chain exists of: [ 397.547202][T10587] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 397.547202][T10587] [ 397.561968][T10587] Possible unsafe locking scenario: [ 397.561968][T10587] [ 397.569458][T10587] CPU0 CPU1 [ 397.574856][T10587] ---- ---- [ 397.580247][T10587] lock(&opts->dep_lock); [ 397.584698][T10587] lock(gadget_subsys.su_mutex); [ 397.592289][T10587] lock(&opts->dep_lock); [ 397.599260][T10587] lock(&sb->s_type->i_mutex_key#23); [ 397.604777][T10587] [ 397.604777][T10587] *** DEADLOCK *** [ 397.604777][T10587] [ 397.612953][T10587] 5 locks held by syz.0.1442/10587: [ 397.618181][T10587] #0: ffff888017dd2418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 397.627488][T10587] #1: ffff888040671fc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 397.638360][T10587] #2: ffffffff8db2b470 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 397.648172][T10587] #3: ffffffff8de58e48 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 397.657908][T10587] #4: ffff88801cb85920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 397.667469][T10587] [ 397.667469][T10587] stack backtrace: [ 397.673386][T10587] CPU: 1 PID: 10587 Comm: syz.0.1442 Not tainted syzkaller #0 [ 397.680880][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.690972][T10587] Call Trace: [ 397.694279][T10587] [ 397.697241][T10587] dump_stack_lvl+0x18c/0x250 [ 397.701958][T10587] ? load_image+0x420/0x420 [ 397.706520][T10587] ? show_regs_print_info+0x20/0x20 [ 397.711762][T10587] ? print_circular_bug+0x12b/0x1a0 [ 397.717011][T10587] check_noncircular+0x2fc/0x400 [ 397.721990][T10587] ? look_up_lock_class+0x75/0x140 [ 397.727153][T10587] ? print_deadlock_bug+0x5d0/0x5d0 [ 397.732394][T10587] ? lockdep_lock+0xf5/0x230 [ 397.737055][T10587] ? __lock_acquire+0x357f/0x7d80 [ 397.742470][T10587] ? _find_first_zero_bit+0xd6/0x100 [ 397.747810][T10587] __lock_acquire+0x37ef/0x7d80 [ 397.752721][T10587] ? is_bpf_text_address+0x28f/0x2a0 [ 397.758062][T10587] ? verify_lock_unused+0x140/0x140 [ 397.763313][T10587] lock_acquire+0x19e/0x420 [ 397.767866][T10587] ? configfs_depend_item_unlocked+0x157/0x430 [ 397.774064][T10587] ? trace_raw_output_contention_end+0xd0/0xd0 [ 397.780255][T10587] ? __might_sleep+0xe0/0xe0 [ 397.784879][T10587] ? rcu_is_watching+0x15/0xb0 [ 397.789659][T10587] ? read_lock_is_recursive+0x20/0x20 [ 397.795048][T10587] ? trace_contention_end+0x39/0xe0 [ 397.800270][T10587] ? __mutex_lock+0x30d/0xc80 [ 397.804979][T10587] ? do_syscall_64+0x55/0xb0 [ 397.810042][T10587] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.816155][T10587] down_write+0x97/0x200 [ 397.820440][T10587] ? configfs_depend_item_unlocked+0x157/0x430 [ 397.826629][T10587] ? down_read_killable+0x340/0x340 [ 397.831878][T10587] configfs_depend_item_unlocked+0x157/0x430 [ 397.837985][T10587] usbg_make_tpg+0x1f7/0x580 [ 397.842616][T10587] ? usbg_drop_tport+0x20/0x20 [ 397.847428][T10587] ? vscnprintf+0x80/0x80 [ 397.851815][T10587] target_fabric_make_tpg+0xa4/0x6d0 [ 397.857137][T10587] ? target_fabric_release_wwn+0xb0/0xb0 [ 397.862805][T10587] configfs_mkdir+0x515/0x9e0 [ 397.867518][T10587] vfs_mkdir+0x2a5/0x470 [ 397.871811][T10587] do_mkdirat+0x1dc/0x450 [ 397.876173][T10587] ? vfs_mkdir+0x470/0x470 [ 397.880619][T10587] ? getname_flags+0x20a/0x500 [ 397.885426][T10587] __x64_sys_mkdir+0x6e/0x80 [ 397.890048][T10587] do_syscall_64+0x55/0xb0 [ 397.894504][T10587] ? clear_bhb_loop+0x40/0x90 [ 397.899221][T10587] ? clear_bhb_loop+0x40/0x90 [ 397.903933][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.909858][T10587] RIP: 0033:0x7f32e699e159 [ 397.914300][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.933954][T10587] RSP: 002b:00007f32e793b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 397.942384][T10587] RAX: ffffffffffffffda RBX: 00007f32e6c25fa0 RCX: 00007f32e699e159 [ 397.950365][T10587] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 397.958361][T10587] RBP: 00007f32e6a3503b R08: 0000000000000000 R09: 0000000000000000 [ 397.966339][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.974314][T10587] R13: 00007f32e6c26038 R14: 00007f32e6c25fa0 R15: 00007ffe301ad8c8 [ 397.982289][T10587] [ 397.986458][ T4944] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 398.003286][ T4944] (NULL device *): queue 0 connect admin queue failed (-111). [ 398.011491][ T4944] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 398.019544][ T4944] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 400.088693][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 400.101804][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 400.109527][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 400.117267][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 402.169554][ T3423] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 402.182127][ T3423] (NULL device *): queue 0 connect admin queue failed (-111). [ 402.189701][ T3423] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 402.197446][ T3423] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 404.248613][ T4944] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 404.261597][ T4944] (NULL device *): queue 0 connect admin queue failed (-111). [ 404.269264][ T4944] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 404.277016][ T4944] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 406.338510][ T1316] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 406.351635][ T1316] (NULL device *): queue 0 connect admin queue failed (-111). [ 406.359153][ T1316] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 406.366943][ T1316] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds