last executing test programs: 6.449859733s ago: executing program 3 (id=1867): syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x6800) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) shmctl$IPC_SET(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 5.280514582s ago: executing program 3 (id=1873): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x2, 0x2, 0x257}) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.8662222s ago: executing program 1 (id=1877): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/63) ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) ioctl(r1, 0x80480911, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r2) pwrite64(r1, &(0x7f00000006c0)="828a3525735c0df54b8bb78f81a5d81832b8a7697f5d75e4c0c5af242939136913715910e220ba67a489e41befe536d76da41ededd5f74ebac496d03322ff9751615fd6950ca7799e4aa040000000000000049f0c56eb16f3835d259d9ee8786d8254dae286fd2fbc9464dd726d0611feb21bd1c6faf6163966ee666a38becab971b7cefe444ca15d6b96917c60e7febb94de8da402651b097d85e9eaafeb11daea9395ed67e0b6ba1bf1c41f0471de83f4074b48717966f9b408a02482a815594022b34", 0xc4, 0x0) 3.63176468s ago: executing program 1 (id=1878): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = io_uring_setup(0xc90, &(0x7f00000002c0)) io_uring_setup(0x63dd, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x0, 0xffffffff, 0x0, r0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xe00) 3.631583143s ago: executing program 2 (id=1880): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.500779288s ago: executing program 0 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.457914235s ago: executing program 3 (id=1882): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) inotify_init1(0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x80000000, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x200000003, 0x4100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x80000002, 0xfffffffffffffffd], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x4) 3.258672345s ago: executing program 2 (id=1883): mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/63) ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) ioctl(r1, 0x80480911, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0xfcf9, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xf3d378653a9c3a7e, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r1, &(0x7f00000006c0)="828a3525735c0df54b8bb78f81a5d81832b8a7697f5d75e4c0c5af242939136913715910e220ba67a489e41befe536d76da41ededd5f74ebac496d03322ff9751615fd6950ca7799e4aa040000000000000049f0c56eb16f3835d259d9ee8786d8254dae286fd2fbc9464dd726d0611feb21bd1c6faf6163966ee666a38becab971b7cefe444ca15d6b96917c60e7febb94de8da402651b097d85e9eaafeb11daea9395ed67e0b6ba1bf1c41f0471de83f4074b48717966f9b408a02482a815594022b34", 0xc4, 0x0) 3.17964738s ago: executing program 0 (id=1884): io_destroy(0x0) io_setup(0x5, &(0x7f0000000100)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) unshare(0x6a040000) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r1, 0x6f2a) 3.059574998s ago: executing program 2 (id=1885): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x82) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, 0x0, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1f50d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 2.958556441s ago: executing program 3 (id=1886): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2.736982261s ago: executing program 1 (id=1887): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7", 0x7, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xa3, 0xd) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}], 0x5, &(0x7f0000001fc0)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8082}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) write(r2, &(0x7f0000000000)='3', 0x4e) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) 2.18457207s ago: executing program 2 (id=1888): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/63) ioctl(r1, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) ioctl(r1, 0x80480911, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0xfcf9, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xf3d378653a9c3a7e, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r1, &(0x7f00000006c0)="828a3525735c0df54b8bb78f81a5d81832b8a7697f5d75e4c0c5af242939136913715910e220ba67a489e41befe536d76da41ededd5f74ebac496d03322ff9751615fd6950ca7799e4aa040000000000000049f0c56eb16f3835d259d9ee8786d8254dae286fd2fbc9464dd726d0611feb21bd1c6faf6163966ee666a38becab971b7cefe444ca15d6b96917c60e7febb94de8da402651b097d85e9eaafeb11daea9395ed67e0b6ba1bf1c41f0471de83f4074b48717966f9b408a02482a815594022b34", 0xc4, 0x0) 2.171261145s ago: executing program 0 (id=1896): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x82) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, 0x0, 0x4004010) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1.732609443s ago: executing program 1 (id=1889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 1.732403027s ago: executing program 2 (id=1890): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.53800592s ago: executing program 3 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20880, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/81, 0x51}], 0x2, 0x25, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x5, 0x20, 0x1949, 0xffffffffffffffff}, &(0x7f0000000240)=0x29) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000058c0)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0xc040) 726.705839ms ago: executing program 0 (id=1891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) write(r0, &(0x7f0000000240)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy_udc.0', 0xb) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', &(0x7f00000001c0)='xfs\x00', 0x4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 628.032227ms ago: executing program 2 (id=1892): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 408.202958ms ago: executing program 3 (id=1893): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) process_vm_readv(r1, &(0x7f0000002140)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000002380)=[{&(0x7f0000002180)=""/123, 0x7b}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20050200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890b, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_clone(0x8000, &(0x7f0000000400)="b1f5674da5b890977227c08d49d76393f2933198fc922bfd7d925204637fd22099772ceaa2f6977cebac", 0x2a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000002140)="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") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff6, 0x0, 0x1, "0062007d82000000000000002240f7ffffff00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xed8}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x515d02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x9}) write$tun(r3, 0x0, 0x22) 406.537297ms ago: executing program 1 (id=1903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20880, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/81, 0x51}], 0x2, 0x25, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x5, 0x20, 0x1949, 0xffffffffffffffff}, &(0x7f0000000240)=0x29) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000058c0)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0xc040) 340.192731ms ago: executing program 0 (id=1894): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) 149.827081ms ago: executing program 0 (id=1895): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 0s ago: executing program 1 (id=1897): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000340)=""/42, 0x2a) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) syz_io_uring_setup(0x27f7, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x400, 0xc0) kernel console output (not intermixed with test programs): y failed (-90) [ 399.230843][T11529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 399.247939][T11529] md: couldn't update array info. -22 [ 399.252404][T11533] syzkaller0: entered promiscuous mode [ 399.252426][T11533] syzkaller0: entered allmulticast mode [ 399.297738][T11529] md: could not open device unknown-block(1,2). [ 399.297776][T11529] md: md_import_device returned -16 [ 399.360330][T11535] loop2: detected capacity change from 0 to 2640 [ 399.671941][T11539] pim6reg: entered allmulticast mode [ 399.801671][T11538] pim6reg: left allmulticast mode [ 399.962068][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 400.287855][T11543] hsr_slave_1 (unregistering): left promiscuous mode [ 400.407676][T11547] ublk4: read batch cmd buffer failed [ 400.407766][T11547] ublk4: read batch cmd buffer failed [ 400.417580][T11547] ublk4: read batch cmd buffer failed [ 400.417665][T11547] ublk4: read batch cmd buffer failed [ 400.967637][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 400.971976][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 402.169455][T10210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 402.317982][T10210] usb 6-1: Using ep0 maxpacket: 16 [ 402.318574][T10210] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 402.319661][T10210] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.319673][T10210] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.323371][T10210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.323390][T10210] usb 6-1: Product: syz [ 402.323403][T10210] usb 6-1: Manufacturer: syz [ 402.323413][T10210] usb 6-1: SerialNumber: syz [ 403.459552][T11580] loop2: detected capacity change from 0 to 2640 [ 403.569900][T11580] buffer_io_error: 662 callbacks suppressed [ 403.569920][T11580] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 403.569945][T11580] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 403.570017][T11580] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 403.570040][T11580] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 403.570060][T11580] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 403.570081][T11580] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 403.570102][T11580] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 403.570123][T11580] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 403.570144][T11580] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 403.570164][T11580] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 404.052504][T10210] usb 6-1: 0:2 : does not exist [ 404.052518][T10210] usb 6-1: 0:3 : does not exist [ 404.052525][T10210] usb 6-1: 0:4 : does not exist [ 404.052533][T10210] usb 6-1: 0:5 : does not exist [ 404.052562][T10210] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch [ 404.232644][T10210] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 404.258374][T10210] usb 6-1: USB disconnect, device number 10 [ 404.356552][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.415611][T11594] loop2: detected capacity change from 0 to 2640 [ 404.851045][T11597] lo speed is unknown, defaulting to 1000 [ 405.122634][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.219629][T11601] loop6: detected capacity change from 0 to 8 [ 405.234520][T11601] Dev loop6: unable to read RDB block 8 [ 405.234554][T11601] loop6: unable to read partition table [ 405.234721][T11601] loop6: partition table beyond EOD, truncated [ 405.234786][T11601] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 405.334123][T11606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.345457][T11607] futex_wake_op: syz.2.1437 tries to shift op by 144; fix this program [ 405.366769][T11607] openvswitch: netlink: Multiple metadata blocks provided [ 406.353259][T11615] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1441'. [ 406.353282][T11615] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1441'. [ 406.406959][T11617] syzkaller0: entered promiscuous mode [ 406.406975][T11617] syzkaller0: entered allmulticast mode [ 406.932755][T11630] netlink: 'syz.1.1444': attribute type 2 has an invalid length. [ 407.297118][T11634] pim6reg: entered allmulticast mode [ 407.472635][T11634] pim6reg: left allmulticast mode [ 407.685837][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 408.367114][T11650] netlink: 'syz.0.1448': attribute type 4 has an invalid length. [ 408.379236][T11650] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 408.435858][T11653] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1449'. [ 408.445426][T11653] tipc: Enabling of bearer rejected, failed to enable media [ 408.473535][T11650] md: md0: raid1 would not accept array [ 408.478063][ T5735] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 408.658653][ T5735] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 408.659583][ T5735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.659595][ T5735] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 408.661164][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.661176][ T5735] usb 6-1: Product: syz [ 408.661183][ T5735] usb 6-1: Manufacturer: syz [ 408.661190][ T5735] usb 6-1: SerialNumber: syz [ 408.688756][T11650] md0: detected capacity change from 2048 to 0 [ 408.688770][T11650] md: md0 stopped. [ 408.742819][T11660] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 408.743120][T11660] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 408.743248][T11660] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 409.213759][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 409.786128][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 409.851207][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 410.513308][ T5735] usb 6-1: USB disconnect, device number 11 [ 410.576926][T11680] netlink: 'syz.0.1455': attribute type 2 has an invalid length. [ 411.298198][T11692] loop2: detected capacity change from 0 to 2640 [ 411.331008][T11692] buffer_io_error: 655 callbacks suppressed [ 411.331046][T11692] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 411.331099][T11692] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 411.331198][T11692] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 411.331221][T11692] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 411.331289][T11692] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 411.331303][T11692] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 411.331370][T11692] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 411.331408][T11692] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 411.331499][T11692] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 411.331512][T11692] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 411.767600][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 411.786944][T11693] pim6reg: entered allmulticast mode [ 412.222344][T11694] pim6reg: left allmulticast mode [ 412.470267][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 412.782089][T11684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.903499][T11702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 412.955001][T11701] nvme_fabrics: missing parameter 'transport=%s' [ 412.955018][T11701] nvme_fabrics: missing parameter 'nqn=%s' [ 413.120263][ T44] audit: type=1326 audit(1790141950.094:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.0.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 413.120369][ T44] audit: type=1326 audit(1790141950.094:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.0.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 414.163686][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 414.182987][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 414.183056][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 414.183067][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 414.187182][T11717] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys", hostnqn: nqn.2014-08.org.nvmexpress:uuid:0962fadf-4d57-4e67-9fb7-58fe6bca8fa6 [ 414.785122][T11738] syzkaller0: entered promiscuous mode [ 414.785142][T11738] syzkaller0: entered allmulticast mode [ 415.006774][ T44] audit: type=1800 audit(1790141951.974:95): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1467" name="file0" dev="overlay" ino=1819 res=0 errno=0 [ 415.601823][T11747] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 415.601880][T11747] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 415.601885][T11747] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 415.929057][ T65] Bluetooth: hci1: command 0x0406 tx timeout [ 416.042928][T11760] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 416.343369][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 416.344459][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 416.344721][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 416.344813][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 416.644474][T11766] pim6reg: entered allmulticast mode [ 416.958491][T11765] pim6reg: left allmulticast mode [ 417.054403][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 417.279189][T11773] syzkaller0: entered promiscuous mode [ 417.279219][T11773] syzkaller0: entered allmulticast mode [ 418.409355][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 418.448925][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 418.449003][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 418.449064][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 418.763731][T11794] netlink: 'syz.3.1477': attribute type 1 has an invalid length. [ 419.063772][ T44] audit: type=1326 audit(1790141956.034:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.063949][ T44] audit: type=1326 audit(1790141956.034:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.064116][ T44] audit: type=1326 audit(1790141956.034:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.065184][ T44] audit: type=1326 audit(1790141956.034:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.103726][ T44] audit: type=1326 audit(1790141956.074:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.157784][T11808] netlink: 'syz.0.1480': attribute type 10 has an invalid length. [ 419.288138][ T44] audit: type=1326 audit(1790141956.234:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.288174][ T44] audit: type=1326 audit(1790141956.234:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.288221][ T44] audit: type=1326 audit(1790141956.234:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.288315][ T44] audit: type=1326 audit(1790141956.234:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 419.288395][ T44] audit: type=1326 audit(1790141956.234:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11803 comm="syz.3.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf718a910 code=0x7ffc0000 [ 419.407767][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 419.489042][T11804] XFS (nullb0): Invalid superblock magic number [ 419.568484][ T35] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 419.583462][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.583484][ T35] usb 7-1: Product: syz [ 419.583495][ T35] usb 7-1: Manufacturer: syz [ 419.583507][ T35] usb 7-1: SerialNumber: syz [ 419.976022][T11825] FAULT_INJECTION: forcing a failure. [ 419.976022][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 419.976045][T11825] CPU: 3 UID: 0 PID: 11825 Comm: syz.0.1486 Not tainted syzkaller #0 PREEMPT(full) [ 419.976059][T11825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.976066][T11825] Call Trace: [ 419.976071][T11825] [ 419.976075][T11825] dump_stack_lvl+0x100/0x190 [ 419.976107][T11825] should_fail_ex.cold+0x5/0xa [ 419.976123][T11825] should_failslab+0xc2/0x120 [ 419.976139][T11825] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 419.976154][T11825] ? key_alloc+0xc6d/0x1310 [ 419.976173][T11825] kmemdup_noprof+0x29/0x60 [ 419.976190][T11825] key_alloc+0xc6d/0x1310 [ 419.976208][T11825] ? sprintf+0xcc/0x100 [ 419.976223][T11825] ? __pfx_sprintf+0x10/0x10 [ 419.976238][T11825] ? __pfx_key_alloc+0x10/0x10 [ 419.976254][T11825] ? request_key_auth_new+0x172/0xa00 [ 419.976273][T11825] request_key_auth_new+0x667/0xa00 [ 419.976291][T11825] ? __pfx_request_key_auth_new+0x10/0x10 [ 419.976313][T11825] request_key_and_link+0x1089/0x1330 [ 419.976331][T11825] ? __pfx_request_key_and_link+0x10/0x10 [ 419.976346][T11825] ? __pfx___might_resched+0x10/0x10 [ 419.976366][T11825] ? find_held_lock+0x2b/0x80 [ 419.976380][T11825] ? __pfx_key_default_cmp+0x10/0x10 [ 419.976393][T11825] ? __pfx_keyring_search_iterator+0x10/0x10 [ 419.976407][T11825] ? _copy_from_user+0x59/0xd0 [ 419.976424][T11825] __do_sys_request_key+0x2a2/0x3c0 [ 419.976439][T11825] ? __pfx___do_sys_request_key+0x10/0x10 [ 419.976457][T11825] __do_fast_syscall_32+0x13a/0x8b0 [ 419.976478][T11825] do_fast_syscall_32+0x32/0x70 [ 419.976496][T11825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 419.976510][T11825] RIP: 0023:0xf6fdefec [ 419.976523][T11825] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 419.976528][T11825] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 419.976539][T11825] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800000c0 [ 419.976546][T11825] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.976552][T11825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 419.976559][T11825] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 419.976565][T11825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.976580][T11825] [ 420.068886][T11826] smbdirect: ib_dev[syz0] removed [ 420.128190][T11830] syzkaller0: entered promiscuous mode [ 420.128204][T11830] syzkaller0: entered allmulticast mode [ 420.220064][ T35] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 420.220092][ T35] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 420.222111][ T35] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 420.224204][ T35] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 420.487652][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 420.490854][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 420.490881][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 420.490897][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 421.228956][T11844] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 421.799067][T11860] FAULT_INJECTION: forcing a failure. [ 421.799067][T11860] name failslab, interval 1, probability 0, space 0, times 0 [ 421.799088][T11860] CPU: 2 UID: 0 PID: 11860 Comm: syz.3.1494 Not tainted syzkaller #0 PREEMPT(full) [ 421.799102][T11860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.799110][T11860] Call Trace: [ 421.799114][T11860] [ 421.799119][T11860] dump_stack_lvl+0x100/0x190 [ 421.799138][T11860] should_fail_ex.cold+0x5/0xa [ 421.799153][T11860] should_failslab+0xc2/0x120 [ 421.799169][T11860] __kvmalloc_node_noprof+0x113/0x9b0 [ 421.799172][ T5743] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 421.799182][T11860] ? lockdep_init_map_type+0x5c/0x250 [ 421.799201][T11860] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 421.799222][T11860] v4l2_ctrl_handler_init_class+0x201/0x350 [ 421.799239][T11860] ? mutex_init_lockdep+0xf1/0x120 [ 421.799255][T11860] vim2m_open+0x11c/0x830 [ 421.799273][T11860] v4l2_open+0x1d2/0x490 [ 421.799285][T11860] ? __pfx_v4l2_open+0x10/0x10 [ 421.799296][T11860] chrdev_open+0x234/0x6a0 [ 421.799310][T11860] ? __pfx_apparmor_file_open+0x10/0x10 [ 421.799333][T11860] ? __pfx_chrdev_open+0x10/0x10 [ 421.799346][T11860] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 421.799364][T11860] do_dentry_open+0x6ab/0x14d0 [ 421.799376][T11860] ? __pfx_chrdev_open+0x10/0x10 [ 421.799392][T11860] vfs_open+0x82/0x3f0 [ 421.799410][T11860] path_openat+0x19fa/0x2440 [ 421.799425][T11860] ? __pfx_path_openat+0x10/0x10 [ 421.799441][T11860] do_file_open+0x20e/0x430 [ 421.799456][T11860] ? __pfx_do_file_open+0x10/0x10 [ 421.799479][T11860] ? _raw_spin_unlock+0x28/0x50 [ 421.799493][T11860] ? alloc_fd+0x471/0x7a0 [ 421.799509][T11860] do_sys_openat2+0x10f/0x1e0 [ 421.799524][T11860] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.799544][T11860] __ia32_compat_sys_openat+0x12d/0x210 [ 421.799560][T11860] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 421.799582][T11860] __do_fast_syscall_32+0x13a/0x8b0 [ 421.799599][T11860] ? lockdep_hardirqs_on+0x7d/0x110 [ 421.799615][T11860] do_fast_syscall_32+0x32/0x70 [ 421.799633][T11860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.799646][T11860] RIP: 0023:0xf7f52fec [ 421.799659][T11860] Code: Unable to access opcode bytes at 0xf7f52fc2. [ 421.799665][T11860] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 421.799675][T11860] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 421.799682][T11860] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.799688][T11860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.799695][T11860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 421.799701][T11860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.799714][T11860] [ 422.146964][ T9] usb 7-1: USB disconnect, device number 17 [ 422.474362][T11865] syzkaller0: entered promiscuous mode [ 422.474380][T11865] syzkaller0: entered allmulticast mode [ 422.567626][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 422.567755][ T38] (NULL device *): queue 0 connect admin queue failed (-111). [ 422.567777][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 422.567791][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 422.712989][T11854] futex_wake_op: syz.0.1492 tries to shift op by 144; fix this program [ 422.713102][T11854] futex_wake_op: syz.0.1492 tries to shift op by 144; fix this program [ 422.758160][T11870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1497'. [ 422.813048][T11870] overlay: Bad value for 'verity' [ 424.534644][T11892] Console: switching to colour dummy device 80x25 [ 424.650246][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 424.651128][ T38] (NULL device *): queue 0 connect admin queue failed (-111). [ 424.651251][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 424.651267][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 424.727959][T11893] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 424.746972][T11893] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 424.747094][T11893] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 424.747302][T11893] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 424.747723][ T35] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 424.750825][T11893] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 424.884999][T11893] pci 0000:00:01.0: Adding to iommu group 1 [ 424.898637][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 424.900589][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.902632][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 424.902649][ T35] usb 8-1: Product: syz [ 424.902659][ T35] usb 8-1: Manufacturer: syz [ 424.902669][ T35] usb 8-1: SerialNumber: syz [ 424.929902][T11893] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 424.929921][T11893] pci 0000:00:01.0: vgaarb: bridge control possible [ 424.929933][T11893] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 424.960625][T11893] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 424.964222][T11893] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 424.983792][T11893] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 425.008606][T11893] [drm] Found bochs VGA, ID 0xb0c5. [ 425.008625][T11893] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 425.061030][T11893] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 425.137367][T11899] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1503'. [ 425.166156][ T35] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 425.520724][ C3] usblp0: nonzero write bulk status received: -71 [ 425.523022][T10210] usb 8-1: USB disconnect, device number 12 [ 425.554196][T11888] usblp0: removed [ 425.608598][T11893] Console: switching to colour frame buffer device 160x50 [ 425.608653][T11893] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 426.041864][T11912] set match dimension is over the limit! [ 426.060950][T11914] syzkaller0: entered promiscuous mode [ 426.060964][T11914] syzkaller0: entered allmulticast mode [ 426.735644][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 426.750010][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 426.761955][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 426.761972][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 427.120499][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 427.583368][T11927] Unsupported ieee802154 address type: 0 [ 427.686875][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 427.778711][T11934] dlm: Using TCP for communications [ 427.816272][T11937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.562903][T11950] fuse: Unknown parameter '000000000041597583360x0000000000000007' [ 428.808493][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 428.810724][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 428.810744][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 428.810753][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 428.974447][T11962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 429.045113][T11962] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 429.045127][T11962] md: pers->run() failed ... [ 429.062365][T11965] loop2: detected capacity change from 0 to 2640 [ 429.074299][T11965] buffer_io_error: 320 callbacks suppressed [ 429.074317][T11965] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 429.074343][T11965] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 429.074366][T11965] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 429.074382][T11965] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 429.074395][T11965] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 429.074408][T11965] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 429.074420][T11965] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 429.074432][T11965] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 429.074444][T11965] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 429.074456][T11965] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 429.141146][T11962] md: could not open device unknown-block(1,2). [ 429.141179][T11962] md: error, md_import_device() returned -16 [ 429.242284][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 429.298030][T11971] dlm: Using TCP for communications [ 429.328375][T11971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.487585][T10210] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 429.539504][T11977] 9p: Bad value for 'rfdno' [ 429.541436][T11976] netlink: 'syz.0.1523': attribute type 4 has an invalid length. [ 429.541455][T11976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1523'. [ 429.549418][T11976] .`: renamed from bond0 (while UP) [ 429.638522][T10210] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 429.639625][T10210] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.639695][T10210] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 429.642029][T10210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.642052][T10210] usb 7-1: Product: syz [ 429.642065][T10210] usb 7-1: Manufacturer: syz [ 429.642077][T10210] usb 7-1: SerialNumber: syz [ 429.992484][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'. [ 430.522730][T10210] usb 7-1: USB disconnect, device number 18 [ 430.899564][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 430.899820][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 430.899992][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 430.900058][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 431.097361][T11994] bond1: entered allmulticast mode [ 431.097860][T11994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.668396][T12003] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.702035][T12003] md: array md0 already has disks! [ 431.764121][T12003] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 431.764136][T12003] md: pers->run() failed ... [ 431.808060][T12003] md: could not open device unknown-block(1,2). [ 431.808091][T12003] md: error, md_import_device() returned -16 [ 431.809751][T12008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.883214][T12008] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 431.883236][T12008] md: pers->run() failed ... [ 431.928276][T12008] md: could not open device unknown-block(1,2). [ 431.928306][T12008] md: error, md_import_device() returned -16 [ 431.991590][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 432.328659][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 432.338279][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.340174][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 432.340188][ T9] usb 7-1: Product: syz [ 432.340196][ T9] usb 7-1: Manufacturer: syz [ 432.340203][ T9] usb 7-1: SerialNumber: syz [ 432.694387][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 432.968565][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 432.971080][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 432.971105][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 432.971121][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 433.027789][ T9] usb 7-1: USB disconnect, device number 19 [ 433.267585][ T9] usblp0: removed [ 433.294545][T12031] pim6reg: entered allmulticast mode [ 433.526722][T12041] loop2: detected capacity change from 0 to 2640 [ 433.701334][T12045] syzkaller0: entered promiscuous mode [ 433.701357][T12045] syzkaller0: entered allmulticast mode [ 434.039920][T12047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 434.111649][T12047] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 434.111672][T12047] md: pers->run() failed ... [ 434.168990][T12047] md: could not open device unknown-block(1,2). [ 434.169032][T12047] md: error, md_import_device() returned -16 [ 434.907952][T12029] pim6reg: left allmulticast mode [ 435.047549][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 435.048820][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 435.048840][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 435.048855][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 435.055117][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 435.271534][T12070] loop2: detected capacity change from 0 to 2640 [ 435.366070][T12070] buffer_io_error: 650 callbacks suppressed [ 435.366285][T12070] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 435.366380][T12070] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 435.366540][T12070] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 435.366583][T12070] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 435.366709][T12070] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 435.366846][T12070] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 435.366891][T12070] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 435.366937][T12070] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 435.367011][T12070] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 435.367084][T12070] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 436.261386][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.458879][T12082] loop2: detected capacity change from 0 to 2640 [ 437.025141][T12091] syzkaller0: entered promiscuous mode [ 437.025163][T12091] syzkaller0: entered allmulticast mode [ 437.130468][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 437.130559][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 437.130571][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 437.130581][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 437.294712][T12098] netlink: 'syz.1.1552': attribute type 2 has an invalid length. [ 437.299228][T12100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 437.746552][T12100] md/raid1:md0: not clean -- starting background reconstruction [ 437.746564][T12100] md/raid1:md0: active with 2 out of 2 mirrors [ 437.746899][T12100] md0: detected capacity change from 0 to 2048 [ 437.759698][T12118] md_update_sb: can't update sb for read-only array md0 [ 438.141453][T12124] nvmet: adding nsid 1 to subsystem testsubsys [ 438.183801][T12124] nvmet: failed to open block device ./file0: (-2) [ 438.758421][T12129] loop2: detected capacity change from 0 to 2640 [ 438.942059][T12132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1555'. [ 438.942689][T12132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1555'. [ 439.207678][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 439.207922][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 439.208039][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 439.208055][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 439.529617][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.529660][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.209493][T12148] syzkaller0: entered promiscuous mode [ 440.209508][T12148] syzkaller0: entered allmulticast mode [ 441.042576][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 441.288480][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 441.288585][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 441.288602][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 441.288618][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 441.547838][T12185] binder: BINDER_SET_CONTEXT_MGR already set [ 441.547848][T12185] binder: 12182:12185 ioctl 4018620d 80004a80 returned -16 [ 441.677901][T12187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 441.717815][T12187] md: couldn't update array info. -22 [ 441.717910][T12118] md_update_sb: can't update sb for read-only array md0 [ 441.757712][T12118] md_update_sb: can't update sb for read-only array md0 [ 441.797672][T12118] md_update_sb: can't update sb for read-only array md0 [ 442.163036][T12192] loop2: detected capacity change from 0 to 2640 [ 442.172515][T12192] buffer_io_error: 985 callbacks suppressed [ 442.172528][T12192] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 442.172543][T12192] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 442.172556][T12192] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 442.172568][T12192] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 442.172580][T12192] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 442.172592][T12192] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 442.172605][T12192] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 442.172617][T12192] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 442.172629][T12192] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 442.172641][T12192] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 442.407339][T12201] binder: 12200:12201 ioctl c00c6f3e 800002c0 returned -22 [ 442.623423][T12206] Console: switching to colour dummy device 80x25 [ 442.768014][T12210] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 442.785650][T12210] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 442.785787][T12210] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 442.786021][T12210] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 442.786532][T12210] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 442.901236][T12210] pci 0000:00:01.0: Adding to iommu group 1 [ 442.938306][T12210] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 442.938330][T12210] pci 0000:00:01.0: vgaarb: bridge control possible [ 442.938342][T12210] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 442.968958][T12210] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 442.969125][T12210] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 442.980824][T12210] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 443.071520][T12210] [drm] Found bochs VGA, ID 0xb0c5. [ 443.071539][T12210] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 443.133336][T12210] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 443.341601][T12210] Console: switching to colour frame buffer device 160x50 [ 443.341654][T12210] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 443.379136][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 443.380527][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 443.380551][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 443.380567][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 443.997382][T12229] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.037883][T12229] md: couldn't update array info. -22 [ 444.042683][T12118] md_update_sb: can't update sb for read-only array md0 [ 444.086906][T12118] md_update_sb: can't update sb for read-only array md0 [ 444.132062][T12118] md_update_sb: can't update sb for read-only array md0 [ 444.581026][ T5743] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 444.777595][T12236] loop2: detected capacity change from 0 to 2640 [ 445.304108][T12244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.372425][T12244] md: couldn't update array info. -22 [ 445.372490][T12118] md_update_sb: can't update sb for read-only array md0 [ 445.418261][T12118] md_update_sb: can't update sb for read-only array md0 [ 445.447554][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 445.447741][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 445.447759][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 445.447775][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 445.585720][T12248] loop2: detected capacity change from 0 to 2640 [ 445.783762][T12250] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 446.827979][ T35] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 447.040558][ T35] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 447.045568][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.045624][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 447.046201][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.046342][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.089377][ T35] hub 7-1:1.0: bad descriptor, ignoring hub [ 447.089402][ T35] hub 7-1:1.0: probe with driver hub failed with error -5 [ 447.089851][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 447.089864][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 447.089926][ T35] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 447.529444][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 447.530403][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 447.530474][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 447.530524][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 448.918798][ T35] usb 7-1: USB disconnect, device number 20 [ 449.302035][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.302242][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.450583][T12293] ptp ptp0: only physical clock in use now [ 449.469501][T12290] loop2: detected capacity change from 0 to 2640 [ 449.487741][T12290] buffer_io_error: 980 callbacks suppressed [ 449.487755][T12290] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 449.487812][T12290] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 449.487826][T12290] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 449.487838][T12290] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 449.487850][T12290] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 449.487863][T12290] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 449.487875][T12290] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 449.487887][T12290] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 449.487900][T12290] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 449.487912][T12290] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 449.595995][T12289] ptp ptp0: new virtual clock ptp2 [ 449.609255][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 449.609384][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 449.609404][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 449.609420][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 449.616305][T12289] ptp ptp0: new virtual clock ptp3 [ 449.645192][T12289] ptp ptp0: new virtual clock ptp4 [ 449.656043][T12289] ptp ptp0: new virtual clock ptp5 [ 449.668113][T12289] ptp ptp0: new virtual clock ptp6 [ 449.668135][T12289] ptp ptp0: guarantee physical clock free running [ 449.707693][ T2409] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 450.227540][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 450.288521][T12307] ublk0: read batch cmd buffer failed [ 450.288624][T12307] ublk0: read batch cmd buffer failed [ 450.297259][T12307] ublk0: read batch cmd buffer failed [ 450.297351][T12307] ublk0: read batch cmd buffer failed [ 450.379282][ T5837] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 450.658864][ T5837] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.658885][ T5837] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.658899][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 450.662008][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 450.662024][ T5837] usb 5-1: Product: syz [ 450.662031][ T5837] usb 5-1: Manufacturer: syz [ 450.662038][ T5837] usb 5-1: SerialNumber: syz [ 450.672341][ T5837] usb 5-1: config 0 descriptor?? [ 450.693108][ T5837] usb 5-1: selecting invalid altsetting 0 [ 450.893181][ T43] usb 5-1: USB disconnect, device number 14 [ 451.679153][T12322] ecryptfs_get_tree: kern_path() failed [ 451.692945][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 451.693478][T12322] Reading sb failed; rc = [-2] [ 451.698225][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 451.698249][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 451.698259][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 452.538647][T12337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.836473][T12339] netlink: 'syz.0.1606': attribute type 2 has an invalid length. [ 453.074184][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.074200][T12343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.235106][T12346] syzkaller0: entered promiscuous mode [ 453.235120][T12346] syzkaller0: entered allmulticast mode [ 453.305477][T12348] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 453.416383][T12350] xt_HMARK: proto mask must be zero with L3 mode [ 453.509959][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 453.567273][T12358] vlan2: entered allmulticast mode [ 453.567690][T12358] dummy0: entered allmulticast mode [ 453.572261][T12358] bridge0: port 3(vlan2) entered blocking state [ 453.573850][T12358] bridge0: port 3(vlan2) entered disabled state [ 453.589895][T12358] vlan2: entered promiscuous mode [ 453.589994][T12358] dummy0: entered promiscuous mode [ 453.767591][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 453.767840][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 453.767886][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 453.767896][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 454.416494][T12369] bridge2: entered promiscuous mode [ 454.522565][T12370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1614'. [ 455.096472][ T44] kauditd_printk_skb: 84 callbacks suppressed [ 455.096580][ T44] audit: type=1326 audit(1790141992.064:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.100999][ T44] audit: type=1326 audit(1790141992.074:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.109594][ T44] audit: type=1326 audit(1790141992.074:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.111773][ T44] audit: type=1326 audit(1790141992.074:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.115000][ T44] audit: type=1326 audit(1790141992.094:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.128874][ T44] audit: type=1326 audit(1790141992.094:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.129787][ T44] audit: type=1326 audit(1790141992.094:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.1616" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 455.605626][T12385] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 455.818749][T12378] kvm [12377]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 455.857885][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 455.866844][T12378] kvm [12377]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 455.878541][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 455.878846][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 455.878914][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 455.924472][T12378] kvm [12377]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 456.061157][T12397] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 456.148356][T12399] md: couldn't update array info. -22 [ 456.148450][T12118] md_update_sb: can't update sb for read-only array md0 [ 456.187723][T12118] md_update_sb: can't update sb for read-only array md0 [ 456.226734][T12402] fuse: Bad value for 'fd' [ 456.227624][T12118] md_update_sb: can't update sb for read-only array md0 [ 456.418859][T12407] syz.1.1625 uses obsolete (PF_INET,SOCK_PACKET) [ 457.098174][T12416] md: couldn't update array info. -22 [ 457.098296][T12118] md_update_sb: can't update sb for read-only array md0 [ 457.137651][T12118] md_update_sb: can't update sb for read-only array md0 [ 457.177912][T12118] md_update_sb: can't update sb for read-only array md0 [ 457.499615][T12421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 457.807654][T12426] lo: entered promiscuous mode [ 457.810075][T12426] tunl0: entered promiscuous mode [ 457.810840][T12426] gre0: entered promiscuous mode [ 457.838593][T12426] gretap0: entered promiscuous mode [ 457.872072][T12426] erspan0: entered promiscuous mode [ 457.881205][T12426] ip_vti0: entered promiscuous mode [ 457.884749][T12426] ip6_vti0: entered promiscuous mode [ 457.890255][T12426] sit0: entered promiscuous mode [ 457.895910][T12426] ip6tnl0: entered promiscuous mode [ 457.898935][T12426] ip6gre0: entered promiscuous mode [ 457.932803][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 457.932922][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 457.932933][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 457.932942][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 457.937105][T12426] syz_tun: entered promiscuous mode [ 457.988620][T12426] ip6gretap0: entered promiscuous mode [ 458.035093][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.035417][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.045558][T12438] loop2: detected capacity change from 0 to 2640 [ 458.057014][T12438] buffer_io_error: 320 callbacks suppressed [ 458.057028][T12438] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 458.057044][T12438] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 458.057057][T12438] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 458.057069][T12438] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 458.057081][T12438] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 458.057093][T12438] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 458.057106][T12438] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 458.057118][T12438] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 458.057130][T12438] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 458.057142][T12438] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 458.062471][T12426] bridge0: entered promiscuous mode [ 458.085743][T12426] vcan0: entered promiscuous mode [ 458.090455][T12426] .`: entered promiscuous mode [ 458.090469][T12426] bond_slave_0: entered promiscuous mode [ 458.092506][T12426] bond_slave_1: entered promiscuous mode [ 458.107102][T12426] team0: entered promiscuous mode [ 458.107116][T12426] team_slave_0: entered promiscuous mode [ 458.107233][T12426] team_slave_1: entered promiscuous mode [ 458.121836][T12426] dummy0: entered promiscuous mode [ 458.181272][T12426] nlmon0: entered promiscuous mode [ 458.182504][T12426] batadv0: entered promiscuous mode [ 458.187346][T12426] vxcan0: entered promiscuous mode [ 458.190882][T12426] vxcan1: entered promiscuous mode [ 458.192849][T12426] veth0: entered promiscuous mode [ 458.199924][T12426] veth1: entered promiscuous mode [ 458.215910][T12426] wg0: entered promiscuous mode [ 458.221806][T12426] wg1: entered promiscuous mode [ 458.223045][T12426] wg2: entered promiscuous mode [ 458.223780][T12426] veth0_to_bridge: entered promiscuous mode [ 458.230122][T12426] veth1_to_bridge: entered promiscuous mode [ 458.240123][T12426] veth0_to_bond: entered promiscuous mode [ 458.245707][T12426] veth1_to_bond: entered promiscuous mode [ 458.249559][T12426] veth0_to_team: entered promiscuous mode [ 458.256101][T12426] veth1_to_team: entered promiscuous mode [ 458.265649][T12426] veth0_to_batadv: entered promiscuous mode [ 458.271709][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.273990][T12426] batadv_slave_0: entered promiscuous mode [ 458.277278][T12426] veth1_to_batadv: entered promiscuous mode [ 458.284487][T12426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.284533][T12426] batadv_slave_1: entered promiscuous mode [ 458.290558][T12426] xfrm0: entered promiscuous mode [ 458.294981][T12426] veth0_to_hsr: entered promiscuous mode [ 458.303901][T12426] hsr0: entered promiscuous mode [ 458.308922][T12426] veth1_virt_wifi: entered promiscuous mode [ 458.312932][T12426] veth0_virt_wifi: entered promiscuous mode [ 458.329835][T12426] virt_wifi0: entered promiscuous mode [ 458.381103][T12426] vlan0: entered promiscuous mode [ 458.392445][T12426] vlan1: entered promiscuous mode [ 458.423504][T12426] macvlan0: entered promiscuous mode [ 458.430267][T12426] macvlan1: entered promiscuous mode [ 458.435127][T12426] ipvlan0: entered promiscuous mode [ 458.441612][T12426] ipvlan1: entered promiscuous mode [ 458.472286][T12426] macvtap0: entered promiscuous mode [ 458.478791][T12426] macsec0: entered promiscuous mode [ 458.483853][T12426] geneve0: entered promiscuous mode [ 458.491723][T12426] geneve1: entered promiscuous mode [ 458.504992][T12426] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 458.522061][T12426] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 458.525732][T12426] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 458.538926][T12426] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 458.558985][T12426] dvmrp0: entered promiscuous mode [ 458.562155][T12426] ip6erspan0: entered promiscuous mode [ 458.564255][T12426] sit1: entered promiscuous mode [ 458.594869][T12426] gtp0: entered promiscuous mode [ 458.595988][T12426] erspan0.1: entered promiscuous mode [ 458.596192][T12426] gtp1: entered promiscuous mode [ 458.603926][T12426] vxlan0: entered promiscuous mode [ 458.604001][T12426] syztnl1: entered promiscuous mode [ 458.624772][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.624826][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.624860][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.624886][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.798152][T12453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 458.827889][T12453] md: couldn't update array info. -22 [ 458.828279][T12118] md_update_sb: can't update sb for read-only array md0 [ 458.863446][T12118] md_update_sb: can't update sb for read-only array md0 [ 458.903204][T12456] md: couldn't update array info. -22 [ 458.903465][T12118] md_update_sb: can't update sb for read-only array md0 [ 458.957662][T12118] md_update_sb: can't update sb for read-only array md0 [ 459.736482][T12469] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 459.778326][T12469] md: couldn't update array info. -22 [ 459.863540][T12472] loop2: detected capacity change from 0 to 2640 [ 459.961534][T12477] syzkaller0: entered promiscuous mode [ 459.961555][T12477] syzkaller0: entered allmulticast mode [ 460.014574][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 460.014923][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 460.014936][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 460.014945][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 460.737659][T12489] loop2: detected capacity change from 0 to 2640 [ 461.010740][ T35] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 461.148194][T12492] md: couldn't update array info. -22 [ 461.156056][T12496] lo: left promiscuous mode [ 461.156234][T12496] tunl0: left promiscuous mode [ 461.156379][T12496] gre0: left promiscuous mode [ 461.156515][T12496] gretap0: left promiscuous mode [ 461.157011][T12496] ip_vti0: left promiscuous mode [ 461.157161][T12496] ip6_vti0: left promiscuous mode [ 461.157293][T12496] sit0: left promiscuous mode [ 461.174052][T12496] ip6tnl0: left promiscuous mode [ 461.174254][T12496] ip6gre0: left promiscuous mode [ 461.176799][T12496] syz_tun: left promiscuous mode [ 461.176999][T12496] ip6gretap0: left promiscuous mode [ 461.177138][T12496] bridge0: left promiscuous mode [ 461.177295][T12496] vcan0: left promiscuous mode [ 461.196352][T12496] .`: left promiscuous mode [ 461.196954][T12496] team0: left promiscuous mode [ 461.197255][T12496] dummy0: left promiscuous mode [ 461.202857][T12118] md_update_sb: 5 callbacks suppressed [ 461.202867][T12118] md_update_sb: can't update sb for read-only array md0 [ 461.203057][T12496] nlmon0: left promiscuous mode [ 461.203222][T12496] batadv0: left promiscuous mode [ 461.203377][T12496] vxcan0: left promiscuous mode [ 461.203526][T12496] vxcan1: left promiscuous mode [ 461.203690][T12496] veth0: left promiscuous mode [ 461.216856][T12496] veth1: left promiscuous mode [ 461.217035][T12496] wg0: left promiscuous mode [ 461.217187][T12496] wg1: left promiscuous mode [ 461.217348][T12496] wg2: left promiscuous mode [ 461.229459][T12496] veth0_to_bridge: left promiscuous mode [ 461.229898][T12496] veth1_to_bridge: left promiscuous mode [ 461.230282][T12496] veth0_to_bond: left promiscuous mode [ 461.230362][T12496] bond_slave_0: left promiscuous mode [ 461.230522][T12496] veth1_to_bond: left promiscuous mode [ 461.230591][T12496] bond_slave_1: left promiscuous mode [ 461.230803][T12496] veth0_to_team: left promiscuous mode [ 461.230868][T12496] team_slave_0: left promiscuous mode [ 461.231038][T12496] veth1_to_team: left promiscuous mode [ 461.231101][T12496] team_slave_1: left promiscuous mode [ 461.231253][T12496] veth0_to_batadv: left promiscuous mode [ 461.235896][T12496] batadv_slave_0: left promiscuous mode [ 461.236064][T12496] veth1_to_batadv: left promiscuous mode [ 461.236234][T12496] batadv_slave_1: left promiscuous mode [ 461.236388][T12496] xfrm0: left promiscuous mode [ 461.236563][T12496] veth0_to_hsr: left promiscuous mode [ 461.255054][T12497] fido_id[12497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.255205][T12118] md_update_sb: can't update sb for read-only array md0 [ 461.422694][T12516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 461.464339][T12516] md: couldn't update array info. -22 [ 461.488488][T12118] md_update_sb: can't update sb for read-only array md0 [ 461.520172][T12519] loop2: detected capacity change from 0 to 2640 [ 461.567755][T12118] md_update_sb: can't update sb for read-only array md0 [ 461.619256][T12118] md_update_sb: can't update sb for read-only array md0 [ 462.090149][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 462.099740][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 462.099760][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 462.099769][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 462.454773][T12537] loop2: detected capacity change from 0 to 2640 [ 463.678734][T12543] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 464.033876][ T2409] libceph: mon0 (1)[c::]:6789 socket error on write [ 464.168088][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 464.173530][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 464.173577][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 464.173612][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 464.303042][ T5735] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 464.593388][T12564] ceph: No mds server is up or the cluster is laggy [ 464.705078][ T44] audit: type=1326 audit(1790142001.674:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.707256][ T44] audit: type=1326 audit(1790142001.674:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730833][ T44] audit: type=1326 audit(1790142001.704:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730866][ T44] audit: type=1326 audit(1790142001.704:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730887][ T44] audit: type=1326 audit(1790142001.704:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730908][ T44] audit: type=1326 audit(1790142001.704:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730929][ T44] audit: type=1326 audit(1790142001.704:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730952][ T44] audit: type=1326 audit(1790142001.704:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.730972][ T44] audit: type=1326 audit(1790142001.704:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 464.730994][ T44] audit: type=1326 audit(1790142001.704:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.0.1662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 464.991530][T12579] loop2: detected capacity change from 0 to 2640 [ 465.002550][T12579] buffer_io_error: 1640 callbacks suppressed [ 465.002565][T12579] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 465.002581][T12579] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 465.002593][T12579] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 465.002606][T12579] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 465.002618][T12579] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 465.002630][T12579] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 465.002643][T12579] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 465.002655][T12579] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 465.002667][T12579] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 465.002679][T12579] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 465.376324][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 465.524466][ T5743] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 465.599762][T12588] netlink: 'syz.2.1666': attribute type 1 has an invalid length. [ 465.635238][T12588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.721659][T12588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.721849][T12588] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 465.722324][T12588] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 465.830415][T12594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.250538][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 466.251415][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 466.251524][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 466.251629][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 467.048309][T12616] md: couldn't update array info. -22 [ 467.048388][T12118] md_update_sb: can't update sb for read-only array md0 [ 467.087713][T12118] md_update_sb: can't update sb for read-only array md0 [ 467.097747][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 467.127915][T12118] md_update_sb: can't update sb for read-only array md0 [ 467.248810][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.249906][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.249925][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.249950][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.252974][ T9] usb 5-1: config 0 descriptor?? [ 467.701032][T12626] loop2: detected capacity change from 0 to 2640 [ 468.338589][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 468.338664][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 468.338676][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 468.338686][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 468.629311][T12636] loop2: detected capacity change from 0 to 2640 [ 468.726122][T12638] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.832574][T12641] loop1: detected capacity change from 0 to 131072 [ 468.837158][T12641] device-mapper: ioctl: The device has no table. [ 468.846206][T12641] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 468.846221][T12641] device-mapper: ioctl: error adding target to table [ 468.971666][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 468.972493][T12648] netlink: 'syz.1.1681': attribute type 27 has an invalid length. [ 469.042836][T12650] syzkaller0: entered promiscuous mode [ 469.042850][T12650] syzkaller0: entered allmulticast mode [ 469.227807][T12654] md: couldn't update array info. -22 [ 469.227885][T12118] md_update_sb: can't update sb for read-only array md0 [ 469.238246][T12656] netlink: 'syz.2.1686': attribute type 2 has an invalid length. [ 469.258425][T12118] md_update_sb: can't update sb for read-only array md0 [ 469.297625][T12118] md_update_sb: can't update sb for read-only array md0 [ 469.881006][ T10] usb 5-1: USB disconnect, device number 15 [ 470.120451][T12671] loop2: detected capacity change from 0 to 2640 [ 470.133355][T12671] buffer_io_error: 980 callbacks suppressed [ 470.133367][T12671] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 470.133383][T12671] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 470.133395][T12671] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 470.133407][T12671] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 470.134646][T12671] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 470.134661][T12671] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 470.134674][T12671] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 470.134686][T12671] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 470.134753][T12671] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 470.134768][T12671] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 470.209690][T12674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.407755][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 470.407833][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 470.407845][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 470.407854][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 470.906727][T12686] loop2: detected capacity change from 0 to 2640 [ 471.241623][T12688] syzkaller0: entered promiscuous mode [ 471.241643][T12688] syzkaller0: entered allmulticast mode [ 471.667733][ T5837] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 471.789657][T12706] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 471.817573][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 471.818267][ T5837] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 471.819637][ T5837] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 471.819658][ T5837] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 471.819676][ T5837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 471.819768][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.819788][ T5837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.819808][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.819826][ T5837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.819846][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 471.819879][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.822933][ T5837] usb 6-1: config 0 descriptor?? [ 471.961024][ T5735] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 472.043657][ T5837] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 472.056965][ T5837] usb 6-1: USB disconnect, device number 13 [ 472.065293][ T5837] usblp0: removed [ 472.118424][ T5735] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.119217][ T5735] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.119231][ T5735] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.119240][ T5735] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.119259][ T5735] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.121140][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.121152][ T5735] usb 7-1: Product: syz [ 472.121160][ T5735] usb 7-1: Manufacturer: syz [ 472.131580][ T5735] cdc_wdm 7-1:1.0: skipping garbage [ 472.131591][ T5735] cdc_wdm 7-1:1.0: skipping garbage [ 472.141066][ T5735] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 472.141150][ T5735] cdc_wdm 7-1:1.0: Unknown control protocol [ 472.340432][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 472.343799][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1700'. [ 472.466527][ T43] usb 7-1: USB disconnect, device number 21 [ 472.487626][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 472.488950][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 472.488972][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 472.488987][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 472.539924][ T5735] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 472.707682][ T5735] usb 6-1: Using ep0 maxpacket: 32 [ 472.709428][ T5735] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.734795][ T5735] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 472.734838][ T5735] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 472.734951][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 472.735131][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.735245][ T5735] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.735359][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.735422][ T5735] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.735435][ T5735] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.735562][ T5735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.824129][ T5735] usb 6-1: config 0 descriptor?? [ 473.053034][ T43] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 473.678898][T12725] loop2: detected capacity change from 0 to 2640 [ 473.697115][ T5735] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.748397][T12730] md: couldn't update array info. -22 [ 473.748806][T12118] md_update_sb: can't update sb for read-only array md0 [ 473.769180][T12118] md_update_sb: can't update sb for read-only array md0 [ 473.817876][T12118] md_update_sb: can't update sb for read-only array md0 [ 474.575765][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 474.584506][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 474.584527][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 474.584537][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 475.083260][ T5837] usb 6-1: USB disconnect, device number 14 [ 475.093878][ T5837] usblp0: removed [ 475.122625][T12766] loop2: detected capacity change from 0 to 2640 [ 475.137478][T12766] buffer_io_error: 1133 callbacks suppressed [ 475.137497][T12766] Buffer I/O error on dev loop2, logical block 153, lost async page write [ 475.137523][T12766] Buffer I/O error on dev loop2, logical block 154, lost async page write [ 475.137543][T12766] Buffer I/O error on dev loop2, logical block 155, lost async page write [ 475.137567][T12766] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 475.137589][T12766] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 475.137609][T12766] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 475.137631][T12766] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 475.137653][T12766] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 475.137673][T12766] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 475.137694][T12766] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 475.588218][T12773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 475.588237][T12773] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 475.590586][T12773] vhci_hcd vhci_hcd.0: Device attached [ 475.868130][ T5837] usb 40-1: SetAddress Request (2) to port 0 [ 475.868199][ T5837] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 476.985207][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 477.115819][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 477.115888][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 477.116040][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 477.233167][T12772] wg2 speed is unknown, defaulting to 1000 [ 477.282671][T12772] wg2 speed is unknown, defaulting to 1000 [ 477.302439][T12772] wg2 speed is unknown, defaulting to 1000 [ 477.487641][T12795] md: couldn't update array info. -22 [ 477.487704][T12118] md_update_sb: can't update sb for read-only array md0 [ 477.560318][T12797] ublk6: read batch cmd buffer failed [ 477.560370][T12797] ublk6: read batch cmd buffer failed [ 477.566568][T12797] ublk6: read batch cmd buffer failed [ 477.566617][T12797] ublk6: read batch cmd buffer failed [ 477.708272][ T2409] wg2 speed is unknown, defaulting to 1000 [ 477.708350][T12772] infiniband syz2: set active [ 477.708367][T12772] infiniband syz2: added wg2 [ 477.748093][T12772] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 477.748130][T12772] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 477.748165][T12772] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 477.773267][T12118] md_update_sb: can't update sb for read-only array md0 [ 477.773730][T12772] RDS/IB: syz2: added [ 477.775665][T12772] smc: adding ib device syz2 with port count 1 [ 477.775738][T12772] smc: ib device syz2 port 1 has no pnetid [ 477.779270][ T2409] wg2 speed is unknown, defaulting to 1000 [ 477.780168][T12772] wg2 speed is unknown, defaulting to 1000 [ 477.836317][T12774] vhci_hcd: connection reset by peer [ 477.838083][T12118] md_update_sb: can't update sb for read-only array md0 [ 477.849143][ T13] vhci_hcd vhci_hcd.1: stop threads [ 477.849166][ T13] vhci_hcd vhci_hcd.1: release socket [ 477.849241][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 478.306532][T12811] futex_wake_op: syz.3.1719 tries to shift op by 144; fix this program [ 479.078008][T12772] wg2 speed is unknown, defaulting to 1000 [ 479.127625][ T757] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 479.128137][ T757] (NULL device *): queue 0 connect admin queue failed (-111). [ 479.128152][ T757] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 479.128161][ T757] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 479.307532][T12821] md: couldn't update array info. -22 [ 479.307583][T12118] md_update_sb: can't update sb for read-only array md0 [ 479.348967][T12118] md_update_sb: can't update sb for read-only array md0 [ 479.368437][T12772] wg2 speed is unknown, defaulting to 1000 [ 479.389738][T12118] md_update_sb: can't update sb for read-only array md0 [ 479.630957][T12772] wg2 speed is unknown, defaulting to 1000 [ 479.687485][T12800] Bluetooth: hci1: command 0x0406 tx timeout [ 480.008282][ T5735] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 480.168483][ T5735] usb 8-1: Using ep0 maxpacket: 8 [ 480.199393][T12831] overlay: ./file0 is not a directory [ 480.935990][ T5735] usb 8-1: unable to get BOS descriptor or descriptor too short [ 480.936098][ T5735] usb 8-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 480.937315][ T5735] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 480.937363][ T5735] usb 8-1: can't read configurations, error -71 [ 481.006571][ T5837] usb 40-1: device descriptor read/8, error -110 [ 481.208974][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 481.228148][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 481.228169][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 481.228179][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 481.400221][ T5837] usb usb40-port1: attempt power cycle [ 481.409374][T12848] loop2: detected capacity change from 0 to 2640 [ 481.416349][T12848] buffer_io_error: 167 callbacks suppressed [ 481.416362][T12848] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 481.416378][T12848] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 481.416391][T12848] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 481.416403][T12848] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 481.416416][T12848] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 481.416428][T12848] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 481.416440][T12848] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 481.416472][T12848] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 481.416485][T12848] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 481.416497][T12848] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 481.960394][ T5837] usb usb40-port1: unable to enumerate USB device [ 482.480731][ T44] kauditd_printk_skb: 41 callbacks suppressed [ 482.480745][ T44] audit: type=1800 audit(1790142019.374:248): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1730" name="file0" dev="overlay" ino=2498 res=0 errno=0 [ 483.029693][ T2409] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 483.177700][ T2409] usb 6-1: Using ep0 maxpacket: 16 [ 483.178362][ T2409] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 483.179317][ T2409] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 483.179335][ T2409] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.179352][ T2409] usb 6-1: config 0 has no interface number 0 [ 483.181204][ T2409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.181225][ T2409] usb 6-1: Product: syz [ 483.181235][ T2409] usb 6-1: Manufacturer: syz [ 483.181248][ T2409] usb 6-1: SerialNumber: syz [ 483.186239][ T2409] usb 6-1: config 0 descriptor?? [ 483.192266][ T2409] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 483.192291][ T2409] uvcvideo 6-1:0.105: No valid video chain found. [ 483.290709][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 483.558990][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 483.559010][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 483.559022][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 483.676981][T12889] uhci_hcd 0000:00:1d.0: remove, state 4 [ 483.677136][T12889] usb usb2: USB disconnect, device number 1 [ 483.700249][T12887] bridge1: entered promiscuous mode [ 483.757824][T12889] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 483.909050][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 484.165424][ T5735] usb 6-1: USB disconnect, device number 15 [ 485.134974][T12912] syzkaller0: entered promiscuous mode [ 485.134989][T12912] syzkaller0: entered allmulticast mode [ 485.609054][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 485.609976][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 485.609994][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 485.610008][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 485.746349][T12927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.228070][T12931] netlink: 'syz.3.1749': attribute type 2 has an invalid length. [ 486.365793][T12933] loop6: detected capacity change from 0 to 8 [ 486.375710][T12933] Dev loop6: unable to read RDB block 8 [ 486.375732][T12933] loop6: unable to read partition table [ 486.375829][T12933] loop6: partition table beyond EOD, truncated [ 486.375839][T12933] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 486.411549][T12933] futex_wake_op: syz.0.1747 tries to shift op by 144; fix this program [ 486.412810][T12933] openvswitch: netlink: Multiple metadata blocks provided [ 487.687603][ T6816] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 487.687727][ T6816] (NULL device *): queue 0 connect admin queue failed (-111). [ 487.687744][ T6816] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 487.687761][ T6816] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 487.707312][T12951] syzkaller0: entered promiscuous mode [ 487.707325][T12951] syzkaller0: entered allmulticast mode [ 487.825191][T12955] loop2: detected capacity change from 0 to 2640 [ 487.833163][T12955] buffer_io_error: 320 callbacks suppressed [ 487.833176][T12955] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 487.833191][T12955] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 487.833204][T12955] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 487.833216][T12955] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 487.833228][T12955] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 487.833240][T12955] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 487.833252][T12955] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 487.833264][T12955] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 487.833276][T12955] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 487.833288][T12955] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 488.016064][T12960] syzkaller0: entered promiscuous mode [ 488.016077][T12960] syzkaller0: entered allmulticast mode [ 489.301989][T12989] bridge2: entered promiscuous mode [ 489.325767][T12987] Console: switching to colour dummy device 80x25 [ 489.443712][T12990] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 489.463724][T12990] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 489.463829][T12990] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 489.464043][T12990] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 489.475921][T12990] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 489.565985][T12990] pci 0000:00:01.0: Adding to iommu group 1 [ 489.587617][T12990] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 489.587631][T12990] pci 0000:00:01.0: vgaarb: bridge control possible [ 489.587639][T12990] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 489.601789][T12990] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 489.606029][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 489.613171][T12990] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 489.629617][T12990] pci 0000:00:1d.0: Adding to iommu group 7 [ 489.645390][T12990] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 489.645506][T12990] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 489.645607][T12990] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 489.665136][T12990] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 489.689393][T12990] [drm] Found bochs VGA, ID 0xb0c5. [ 489.690577][T12990] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 489.752960][T12990] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 489.769680][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 489.773801][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 489.773827][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 489.773844][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 490.216119][T12992] futex_wake_op: syz.2.1762 tries to shift op by 144; fix this program [ 490.216248][T12992] futex_wake_op: syz.2.1762 tries to shift op by 144; fix this program [ 490.325715][T12990] Console: switching to colour frame buffer device 160x50 [ 490.352901][T12990] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 490.498535][T12990] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 139287 usecs [ 490.564200][T12990] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 490.572913][T12990] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 490.573070][T12990] uhci_hcd 0000:00:1d.0: detected 2 ports [ 490.574046][T12990] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 490.587111][T12990] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 490.593937][T12990] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 490.593953][T12990] usb usb2: Product: UHCI Host Controller [ 490.593961][T12990] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 490.593968][T12990] usb usb2: SerialNumber: 0000:00:1d.0 [ 490.623459][T13004] loop2: detected capacity change from 0 to 2640 [ 490.629702][T12990] hub 2-0:1.0: USB hub found [ 490.632305][T12990] hub 2-0:1.0: 2 ports detected [ 490.690542][T13006] syzkaller0: entered promiscuous mode [ 490.690565][T13006] syzkaller0: entered allmulticast mode [ 490.817600][T13010] md: couldn't update array info. -22 [ 490.817679][T12118] md_update_sb: can't update sb for read-only array md0 [ 490.858156][T12118] md_update_sb: can't update sb for read-only array md0 [ 490.957916][T12118] md_update_sb: can't update sb for read-only array md0 [ 491.081962][T13018] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1769'. [ 491.212773][T13025] netlink: 4064 bytes leftover after parsing attributes in process `syz.2.1770'. [ 491.426309][T13028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 491.426473][T13028] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 491.426479][T13028] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 491.476880][T13029] overlay: Bad value for 'verity' [ 491.935546][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 491.940685][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 491.940709][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 491.940724][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 492.195015][T13040] ptp ptp0: delete virtual clock ptp6 [ 492.284439][T13040] ptp ptp0: delete virtual clock ptp5 [ 492.329017][T13040] ptp ptp0: delete virtual clock ptp4 [ 492.348397][T13040] ptp ptp0: delete virtual clock ptp3 [ 492.390730][T13040] ptp ptp0: delete virtual clock ptp2 [ 492.437089][T13040] ptp ptp0: only physical clock in use now [ 492.493225][T13045] ptp ptp0: new virtual clock ptp2 [ 492.536882][T13045] ptp ptp0: new virtual clock ptp3 [ 492.557995][T13045] ptp ptp0: new virtual clock ptp4 [ 492.596002][T13045] ptp ptp0: new virtual clock ptp5 [ 493.075756][T13045] ptp ptp0: new virtual clock ptp6 [ 493.075817][T13045] ptp ptp0: guarantee physical clock free running [ 493.466377][T11642] Bluetooth: hci4: Frame reassembly failed (-84) [ 493.479607][T13059] Bluetooth: hci4: Frame reassembly failed (-90) [ 493.492446][T13061] wg2 speed is unknown, defaulting to 1000 [ 493.705327][T13065] loop2: detected capacity change from 0 to 2640 [ 493.711239][T13065] buffer_io_error: 650 callbacks suppressed [ 493.711251][T13065] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 493.711267][T13065] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 493.711280][T13065] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 493.711292][T13065] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 493.711304][T13065] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 493.711316][T13065] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 493.711328][T13065] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 493.711341][T13065] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 493.711353][T13065] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 493.711365][T13065] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 494.007676][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 494.008504][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 494.008527][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 494.008550][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 494.693488][T13073] loop2: detected capacity change from 0 to 2640 [ 495.527943][T12800] Bluetooth: hci4: command 0x1003 tx timeout [ 495.531299][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 495.744102][T13083] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 495.745789][T13083] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 495.745821][T13083] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 495.897686][T13084] loop2: detected capacity change from 0 to 2640 [ 496.097648][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 496.295354][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 496.295662][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 496.295950][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 496.428547][T13080] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.640195][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 496.792767][T13095] syzkaller0: entered promiscuous mode [ 496.792782][T13095] syzkaller0: entered allmulticast mode [ 496.971877][T13102] loop6: detected capacity change from 0 to 8 [ 496.974824][T13102] Dev loop6: unable to read RDB block 8 [ 496.974858][T13102] loop6: unable to read partition table [ 496.975054][T13102] loop6: partition table beyond EOD, truncated [ 496.975103][T13102] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 497.004120][T13104] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 497.004215][T13104] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 497.004224][T13104] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 497.063953][T13105] futex_wake_op: syz.3.1786 tries to shift op by 144; fix this program [ 497.066085][T13105] openvswitch: netlink: Multiple metadata blocks provided [ 497.265189][T11642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.265204][T11642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.293802][T13109] ptp ptp0: delete virtual clock ptp6 [ 497.304580][T13109] ptp ptp0: delete virtual clock ptp5 [ 497.329073][T13109] ptp ptp0: delete virtual clock ptp4 [ 497.336295][T13109] ptp ptp0: delete virtual clock ptp3 [ 497.342935][T13109] ptp ptp0: delete virtual clock ptp2 [ 497.350694][T13109] ptp ptp0: only physical clock in use now [ 497.368565][T13110] ptp ptp0: new virtual clock ptp2 [ 497.392848][T13110] ptp ptp0: new virtual clock ptp3 [ 497.411668][T13110] ptp ptp0: new virtual clock ptp4 [ 497.420572][T13110] ptp ptp0: new virtual clock ptp5 [ 497.434398][T13110] ptp ptp0: new virtual clock ptp6 [ 497.434419][T13110] ptp ptp0: guarantee physical clock free running [ 498.332875][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 498.352429][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 498.352451][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 498.352461][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 498.570627][T12800] Bluetooth: hci2: command 0x0406 tx timeout [ 499.024595][T13131] loop2: detected capacity change from 0 to 2640 [ 499.026777][ T6199] buffer_io_error: 980 callbacks suppressed [ 499.026788][ T6199] Buffer I/O error on dev loop2, logical block 0, async page read [ 499.027060][ T6199] Buffer I/O error on dev loop2, logical block 0, async page read [ 499.027297][ T6199] Buffer I/O error on dev loop2, logical block 0, async page read [ 499.027966][ T6199] Buffer I/O error on dev loop2, logical block 0, async page read [ 499.028217][ T6199] Buffer I/O error on dev loop2, logical block 0, async page read [ 499.056385][T13131] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 499.056437][T13131] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 499.056467][T13131] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 499.056486][T13131] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 499.056511][T13131] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 499.357120][T13136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1822 instead [ 499.357284][T13136] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 499.357290][T13136] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 499.576813][T13126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1793'. [ 500.404489][T13147] loop2: detected capacity change from 0 to 2640 [ 500.416978][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 500.417074][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 500.417086][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 500.417095][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 500.677998][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 500.971830][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.971861][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.208427][T13152] futex_wake_op: syz.3.1800 tries to shift op by 144; fix this program [ 501.208515][T13152] futex_wake_op: syz.3.1800 tries to shift op by 144; fix this program [ 501.867329][T13158] wg2 speed is unknown, defaulting to 1000 [ 501.886840][T13161] FAULT_INJECTION: forcing a failure. [ 501.886840][T13161] name failslab, interval 1, probability 0, space 0, times 0 [ 501.886869][T13161] CPU: 0 UID: 0 PID: 13161 Comm: syz.1.1802 Not tainted syzkaller #0 PREEMPT(full) [ 501.886891][T13161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 501.886902][T13161] Call Trace: [ 501.886909][T13161] [ 501.886917][T13161] dump_stack_lvl+0x100/0x190 [ 501.886944][T13161] should_fail_ex.cold+0x5/0xa [ 501.886967][T13161] should_failslab+0xc2/0x120 [ 501.887038][T13161] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 501.887065][T13161] ? key_alloc+0xc6d/0x1310 [ 501.887099][T13161] kmemdup_noprof+0x29/0x60 [ 501.887129][T13161] key_alloc+0xc6d/0x1310 [ 501.887161][T13161] ? sprintf+0xcc/0x100 [ 501.887211][T13161] ? __pfx_sprintf+0x10/0x10 [ 501.887238][T13161] ? __pfx_key_alloc+0x10/0x10 [ 501.887261][T13161] ? request_key_auth_new+0x172/0xa00 [ 501.887293][T13161] request_key_auth_new+0x667/0xa00 [ 501.887322][T13161] ? __pfx_request_key_auth_new+0x10/0x10 [ 501.887358][T13161] request_key_and_link+0x1089/0x1330 [ 501.887387][T13161] ? __pfx_request_key_and_link+0x10/0x10 [ 501.887428][T13161] ? __pfx___might_resched+0x10/0x10 [ 501.887453][T13161] ? find_held_lock+0x2b/0x80 [ 501.887475][T13161] ? __pfx_key_default_cmp+0x10/0x10 [ 501.887495][T13161] ? __pfx_keyring_search_iterator+0x10/0x10 [ 501.887523][T13161] ? _copy_from_user+0x59/0xd0 [ 501.887552][T13161] __do_sys_request_key+0x2a2/0x3c0 [ 501.887577][T13161] ? __pfx___do_sys_request_key+0x10/0x10 [ 501.887611][T13161] __do_fast_syscall_32+0x13a/0x8b0 [ 501.887644][T13161] do_fast_syscall_32+0x32/0x70 [ 501.887674][T13161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.887697][T13161] RIP: 0023:0xf7f85fec [ 501.887717][T13161] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 501.887725][T13161] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011f [ 501.887744][T13161] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800000c0 [ 501.887756][T13161] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.887767][T13161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.887779][T13161] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 501.887791][T13161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.887818][T13161] [ 502.186466][T13172] bond0: entered allmulticast mode [ 502.186626][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.487616][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 502.487725][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 502.487741][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 502.487755][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 502.554270][T13178] loop2: detected capacity change from 0 to 2640 [ 502.809702][T12800] Bluetooth: hci2: command 0x0406 tx timeout [ 504.569214][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 504.569417][T13205] loop6: detected capacity change from 0 to 8 [ 504.569691][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 504.569764][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 504.569845][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 504.633877][T13205] Dev loop6: unable to read RDB block 8 [ 504.634024][T13205] loop6: unable to read partition table [ 504.634753][T13205] loop6: partition table beyond EOD, truncated [ 504.634853][T13205] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 504.722415][T13205] futex_wake_op: syz.1.1815 tries to shift op by 144; fix this program [ 504.739313][T13205] openvswitch: netlink: Multiple metadata blocks provided [ 504.819091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 504.831893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 504.841590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 504.912358][T13213] syzkaller0: entered promiscuous mode [ 504.912371][T13213] syzkaller0: entered allmulticast mode [ 505.114252][ T44] audit: type=1326 audit(1790142042.084:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 505.114891][ T44] audit: type=1326 audit(1790142042.084:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz.3.1818" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 505.119009][T13220] md: couldn't update array info. -22 [ 505.120284][T12118] md_update_sb: can't update sb for read-only array md0 [ 505.168964][T12118] md_update_sb: can't update sb for read-only array md0 [ 505.208104][T12118] md_update_sb: can't update sb for read-only array md0 [ 506.189771][T13230] wg2 speed is unknown, defaulting to 1000 [ 506.265896][T13242] loop2: detected capacity change from 0 to 2640 [ 506.271216][T13242] buffer_io_error: 988 callbacks suppressed [ 506.271229][T13242] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 506.271244][T13242] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 506.271256][T13242] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 506.271268][T13242] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 506.271280][T13242] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 506.271293][T13242] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 506.271305][T13242] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 506.271317][T13242] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 506.271330][T13242] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 506.271342][T13242] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 506.647655][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 506.648700][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 506.648720][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 506.648734][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 507.376973][T13252] syzkaller0: entered promiscuous mode [ 507.376988][T13252] syzkaller0: entered allmulticast mode [ 507.394497][ T44] audit: type=1326 audit(1790142044.364:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 507.396139][ T44] audit: type=1326 audit(1790142044.364:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 507.422431][T13255] md: couldn't update array info. -22 [ 507.422498][T12118] md_update_sb: can't update sb for read-only array md0 [ 507.473630][T12118] md_update_sb: can't update sb for read-only array md0 [ 507.519632][T12118] md_update_sb: can't update sb for read-only array md0 [ 507.561379][ T44] audit: type=1326 audit(1790142044.534:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.0.1840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 507.562238][ T44] audit: type=1326 audit(1790142044.534:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.0.1840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 508.026864][T13271] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 508.040795][T13271] kvm: pic: level sensitive irq not supported [ 508.041142][T13271] kvm: pic: non byte read [ 508.042416][T13271] kvm: pic: level sensitive irq not supported [ 508.042786][T13271] kvm: pic: non byte read [ 508.147743][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 508.298179][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 508.299106][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.305608][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 508.305628][ T10] usb 5-1: Product: syz [ 508.305639][ T10] usb 5-1: Manufacturer: syz [ 508.305650][ T10] usb 5-1: SerialNumber: syz [ 508.564449][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 508.727910][ T757] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 508.728723][ T757] (NULL device *): queue 0 connect admin queue failed (-111). [ 508.728736][ T757] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 508.728745][ T757] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 508.730019][T13279] loop6: detected capacity change from 0 to 8 [ 508.745837][T13279] Dev loop6: unable to read RDB block 8 [ 508.745868][T13279] loop6: unable to read partition table [ 508.746027][T13279] loop6: partition table beyond EOD, truncated [ 508.746053][T13279] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 508.772638][T13279] futex_wake_op: syz.3.1837 tries to shift op by 144; fix this program [ 508.774646][T13279] openvswitch: netlink: Multiple metadata blocks provided [ 508.778643][T13283] loop2: detected capacity change from 0 to 2640 [ 509.049991][ T35] usb 5-1: USB disconnect, device number 16 [ 509.062917][ T35] usblp0: removed [ 509.748003][T13293] md: couldn't update array info. -22 [ 509.748055][T12118] md_update_sb: can't update sb for read-only array md0 [ 509.767740][T12118] md_update_sb: can't update sb for read-only array md0 [ 509.808091][T12118] md_update_sb: can't update sb for read-only array md0 [ 509.967486][ T5735] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 510.615312][ T5735] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 510.616810][ T5735] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.629343][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 510.629365][ T5735] usb 6-1: Product: syz [ 510.629377][ T5735] usb 6-1: Manufacturer: syz [ 510.629388][ T5735] usb 6-1: SerialNumber: syz [ 510.807631][ T757] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 510.807916][ T757] (NULL device *): queue 0 connect admin queue failed (-111). [ 510.807979][ T757] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 510.808042][ T757] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 511.078984][T13307] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 511.090706][T13307] kvm: pic: level sensitive irq not supported [ 511.091050][T13307] kvm: pic: non byte read [ 511.092773][T13307] kvm: pic: level sensitive irq not supported [ 511.093485][T13307] kvm: pic: non byte read [ 511.198959][ T5735] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 511.350800][ T10] usb 6-1: USB disconnect, device number 16 [ 511.352209][ T10] usblp0: removed [ 511.498901][T13317] loop2: detected capacity change from 0 to 2640 [ 511.505362][T13317] buffer_io_error: 653 callbacks suppressed [ 511.505377][T13317] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 511.505398][T13317] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 511.505415][T13317] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 511.505430][T13317] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 511.505447][T13317] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 511.505463][T13317] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 511.505479][T13317] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 511.505495][T13317] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 511.505510][T13317] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 511.505526][T13317] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 512.900492][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 512.902564][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 512.902582][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 512.902592][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 512.927577][T13335] loop2: detected capacity change from 0 to 2640 [ 513.247015][T11427] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 513.418276][T11427] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 513.420476][T11427] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 513.420504][T11427] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 513.420537][T11427] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.422114][T11427] usb 8-1: config 0 descriptor?? [ 513.629633][T11427] usbhid 8-1:0.0: can't add hid device: -71 [ 513.629724][T11427] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 513.631793][T11427] usb 8-1: USB disconnect, device number 15 [ 514.067599][ T35] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 514.248128][ T35] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 514.249028][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 514.249045][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 514.249063][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.250468][ T35] usb 8-1: config 0 descriptor?? [ 514.461990][T13332] devpts: Bad value for 'max' [ 514.466516][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 514.466575][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 514.471539][ T35] usb 8-1: USB disconnect, device number 16 [ 514.978331][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 514.978460][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 514.978480][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 514.978504][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 515.076937][T13347] syzkaller0: entered promiscuous mode [ 515.076959][T13347] syzkaller0: entered allmulticast mode [ 515.322640][T13353] syzkaller0: entered promiscuous mode [ 515.322663][T13353] syzkaller0: entered allmulticast mode [ 515.447334][T13355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1856'. [ 515.451525][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1856'. [ 515.773636][T13359] wg2 speed is unknown, defaulting to 1000 [ 516.116113][T13363] syzkaller0: entered promiscuous mode [ 516.116127][T13363] syzkaller0: entered allmulticast mode [ 516.414485][T13370] syzkaller0: entered promiscuous mode [ 516.414502][T13370] syzkaller0: entered allmulticast mode [ 516.453938][T13371] loop2: detected capacity change from 0 to 2640 [ 516.657507][ T5837] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 516.818336][ T5837] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 516.819139][ T5837] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.824228][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 516.824243][ T5837] usb 7-1: Product: syz [ 516.824250][ T5837] usb 7-1: Manufacturer: syz [ 516.824260][ T5837] usb 7-1: SerialNumber: syz [ 517.042563][ T5837] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 517.047640][T11642] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 517.048633][T11642] (NULL device *): queue 0 connect admin queue failed (-111). [ 517.048650][T11642] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 517.048662][T11642] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 517.294582][ T35] usb 7-1: USB disconnect, device number 22 [ 517.299477][ T35] usblp0: removed [ 517.924520][T13378] syzkaller0: entered promiscuous mode [ 517.924534][T13378] syzkaller0: entered allmulticast mode [ 518.020495][T13381] ecryptfs_get_tree: kern_path() failed [ 518.023738][T13381] Reading sb failed; rc = [-2] [ 518.071370][T13376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 518.115934][T13376] kvm: pic: level sensitive irq not supported [ 518.116386][T13376] kvm: pic: non byte read [ 518.118065][T13376] kvm: pic: level sensitive irq not supported [ 518.118373][T13376] kvm: pic: non byte read [ 518.846312][T13391] Console: switching to colour dummy device 80x25 [ 518.903377][T13393] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 518.921479][T13393] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 518.921592][T13393] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 518.921776][T13393] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 518.922109][T13393] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 518.929619][T13393] pci 0000:00:01.0: Adding to iommu group 1 [ 518.946059][T13393] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 518.946079][T13393] pci 0000:00:01.0: vgaarb: bridge control possible [ 518.946091][T13393] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 518.970929][T13393] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 518.971040][T13393] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 518.972052][T13393] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 518.988688][T13393] [drm] Found bochs VGA, ID 0xb0c5. [ 518.988699][T13393] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 519.015004][T13393] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 519.137584][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 519.137754][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 519.137767][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 519.137776][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 519.157669][T13393] Console: switching to colour frame buffer device 160x50 [ 519.220534][T13393] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 519.408477][T13403] syzkaller0: entered promiscuous mode [ 519.408492][T13403] syzkaller0: entered allmulticast mode [ 520.041526][T13406] set match dimension is over the limit! [ 521.330969][ T7039] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 521.335027][ T7039] (NULL device *): queue 0 connect admin queue failed (-111). [ 521.335054][ T7039] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 521.335070][ T7039] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 521.429656][T13418] md: couldn't update array info. -22 [ 521.429718][T12118] md_update_sb: can't update sb for read-only array md0 [ 521.481952][T12118] md_update_sb: can't update sb for read-only array md0 [ 521.507813][T12118] md_update_sb: can't update sb for read-only array md0 [ 521.636210][ T44] audit: type=1326 audit(1790142058.604:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.636269][ T44] audit: type=1326 audit(1790142058.604:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.636558][ T44] audit: type=1326 audit(1790142058.604:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.636593][ T44] audit: type=1326 audit(1790142058.604:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.637124][ T44] audit: type=1326 audit(1790142058.604:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.683883][ T44] audit: type=1326 audit(1790142058.654:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.683913][ T44] audit: type=1326 audit(1790142058.654:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.2.1880" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 521.739928][ T44] audit: type=1326 audit(1790142058.714:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.0.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 521.740864][ T44] audit: type=1326 audit(1790142058.714:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.0.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 521.741017][ T44] audit: type=1326 audit(1790142058.714:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.0.1881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 521.796519][T13428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.003206][T13430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 522.013556][T13430] kvm: pic: level sensitive irq not supported [ 522.015225][T13430] kvm: pic: non byte read [ 522.015589][T13435] wg2 speed is unknown, defaulting to 1000 [ 522.017159][T13430] kvm: pic: level sensitive irq not supported [ 522.023366][T13432] md: couldn't update array info. -22 [ 522.023419][T12118] md_update_sb: can't update sb for read-only array md0 [ 522.029877][T13430] kvm: pic: non byte read [ 522.057660][T12118] md_update_sb: can't update sb for read-only array md0 [ 522.097571][T12118] md_update_sb: can't update sb for read-only array md0 [ 522.205756][T13442] loop2: detected capacity change from 0 to 2640 [ 522.210917][T13442] buffer_io_error: 980 callbacks suppressed [ 522.210930][T13442] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 522.210946][T13442] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 522.210958][T13442] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 522.210970][T13442] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 522.210982][T13442] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 522.210995][T13442] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 522.211007][T13442] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 522.211019][T13442] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 522.211031][T13442] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 522.211043][T13442] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 522.501387][T13448] netlink: 'syz.1.1887': attribute type 2 has an invalid length. [ 523.077642][T13452] md: couldn't update array info. -22 [ 523.077899][T12118] md_update_sb: can't update sb for read-only array md0 [ 523.118857][T12118] md_update_sb: can't update sb for read-only array md0 [ 523.151554][T12118] md_update_sb: can't update sb for read-only array md0 [ 523.302760][T13457] loop2: detected capacity change from 0 to 2640 [ 523.371216][ T757] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 523.371651][ T757] (NULL device *): queue 0 connect admin queue failed (-111). [ 523.371665][ T757] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 523.371674][ T757] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 524.368028][T13465] syzkaller0: entered promiscuous mode [ 524.368044][T13465] syzkaller0: entered allmulticast mode [ 524.684064][T13478] XFS (nullb0): Invalid superblock magic number [ 524.765288][T13475] configfs-gadget.g1 gadget.0: HOST MAC d6:01:5e:32:fd:a4 [ 524.765314][T13475] configfs-gadget.g1 gadget.0: MAC fa:75:61:65:5f:aa [ 524.910021][T13489] syzkaller0: entered promiscuous mode [ 524.910041][T13489] syzkaller0: entered allmulticast mode [ 525.037742][ T35] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 525.318008][ T35] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 525.319219][ T35] usb 5-1: config 1 interface 5 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 525.319297][ T35] usb 5-1: config 1 interface 5 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 525.320874][ T35] usb 5-1: Dual-Role OTG device on HNP port [ 525.321265][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.368402][ C3] configfs-gadget.g1 gadget.0: Using interface 1 [ 525.368652][ C3] ------------[ cut here ]------------ [ 525.368660][ C3] usb_ep_enable: ep138 (ep10in-int) has maxpacket 0 [ 525.368668][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: kworker/3:3/5837 [ 525.377178][ C3] Modules linked in: [ 525.378501][ C3] CPU: 3 UID: 0 PID: 5837 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 525.381185][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.384076][ C3] Workqueue: events delayed_vfree_work [ 525.385739][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 525.387309][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a d3 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 08 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 fb d9 8c [ 525.392857][ C3] RSP: 0018:ffffc900005f8a00 EFLAGS: 00010046 [ 525.394639][ C3] RAX: dffffc0000000000 RBX: ffff888022cb4338 RCX: ffffffff8cda40a0 [ 525.396921][ C3] RDX: 000000000000008a RSI: ffffffff8cda08c0 RDI: ffffffff9152e090 [ 525.399256][ C3] RBP: 000000000000008a R08: ffffffff8cd9fba0 R09: 0000000000000000 [ 525.401577][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cd9fba0 [ 525.404044][ C3] R13: 0000000000000000 R14: ffff888022cb4338 R15: ffff888024c8e5a0 [ 525.406353][ C3] FS: 0000000000000000(0000) GS:ffff888096c60000(0000) knlGS:0000000000000000 [ 525.408971][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.410974][ C3] CR2: 000000008000f000 CR3: 000000005ba4c000 CR4: 0000000000352ef0 [ 525.413406][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 525.415710][ C3] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 525.418044][ C3] Call Trace: [ 525.419053][ C3] [ 525.419939][ C3] hidg_set_alt+0x190/0xa10 [ 525.421317][ C3] ? sourcesink_set_alt+0x1ec/0x7b0 [ 525.422873][ C3] composite_setup+0x2ccf/0x9290 [ 525.424338][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 525.425805][ C3] ? __pfx_composite_setup+0x10/0x10 [ 525.427358][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.429000][ C3] ? do_raw_spin_lock+0x128/0x260 [ 525.430497][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.432095][ C3] ? configfs_composite_setup+0xfb/0x130 [ 525.433780][ C3] configfs_composite_setup+0xfb/0x130 [ 525.435379][ C3] dummy_timer+0x2039/0x3700 [ 525.436753][ C3] ? trace_seq_printf+0x250/0x380 [ 525.438268][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.439999][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 525.441656][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 525.443159][ C3] ? mark_held_locks+0x40/0x70 [ 525.444594][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.446337][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 525.447887][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 525.449461][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 525.450991][ C3] handle_softirqs+0x1e6/0x9d0 [ 525.452415][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 525.454021][ C3] ? _raw_spin_unlock+0x28/0x50 [ 525.455474][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 525.457125][ C3] __irq_exit_rcu+0x16a/0x210 [ 525.458542][ C3] irq_exit_rcu+0x9/0x30 [ 525.459829][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 525.461476][ C3] [ 525.462368][ C3] [ 525.463294][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.465053][ C3] RIP: 0010:trace_mm_page_free+0xf/0x1a0 [ 525.466693][ C3] Code: ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 55 41 54 55 53 66 90 65 8b 1d f9 07 1e 12 <83> fb 07 0f 87 23 01 00 00 48 89 d8 be 08 00 00 00 48 c1 e8 06 48 [ 525.472228][ C3] RSP: 0018:ffffc9000649f9f0 EFLAGS: 00000246 [ 525.474052][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff826edbde [ 525.476362][ C3] RDX: 1ffffd40003c3601 RSI: 0000000000000000 RDI: ffffea0001e1b000 [ 525.478706][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffea0001e1b000 [ 525.481024][ C3] R10: ffffea0001e1b007 R11: 1ffffffff1dbef51 R12: ffffea0001e1b008 [ 525.483361][ C3] R13: ffffea0001e1b000 R14: ffffea0001e1b000 R15: ffffea0001e1b000 [ 525.485675][ C3] ? free_pages_prepare+0x2e/0xe00 [ 525.487203][ C3] free_pages_prepare+0xc7/0xe00 [ 525.488652][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.490362][ C3] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 525.492274][ C3] __free_contig_range_common+0x14f/0x250 [ 525.493956][ C3] free_pages_bulk+0x12a/0x200 [ 525.495416][ C3] vm_area_free_pages+0xb2/0x2a0 [ 525.496901][ C3] vfree+0xf7/0x6d0 [ 525.498103][ C3] ? process_one_work+0xa2c/0x1b10 [ 525.499636][ C3] ? process_one_work+0x906/0x1b10 [ 525.501207][ C3] ? process_one_work+0x906/0x1b10 [ 525.502739][ C3] delayed_vfree_work+0x56/0x80 [ 525.504192][ C3] process_one_work+0xac7/0x1b10 [ 525.505668][ C3] ? __pfx_process_one_work+0x10/0x10 [ 525.507254][ C3] ? lock_acquire+0x1d1/0x380 [ 525.508643][ C3] ? __pfx_delayed_vfree_work+0x10/0x10 [ 525.510323][ C3] worker_thread+0x5ef/0xe50 [ 525.511736][ C3] ? __pfx_worker_thread+0x10/0x10 [ 525.513287][ C3] ? kthread+0x13a/0x450 [ 525.514567][ C3] ? __pfx_worker_thread+0x10/0x10 [ 525.516087][ C3] kthread+0x373/0x450 [ 525.517304][ C3] ? __pfx_kthread+0x10/0x10 [ 525.518686][ C3] ret_from_fork+0x730/0xd60 [ 525.520089][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 525.521590][ C3] ? __switch_to+0x800/0x10f0 [ 525.523094][ C3] ? __pfx_kthread+0x10/0x10 [ 525.524487][ C3] ret_from_fork_asm+0x1a/0x30 [ 525.525933][ C3] [ 525.526867][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 525.528999][ C3] CPU: 3 UID: 0 PID: 5837 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 525.531674][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.534579][ C3] Workqueue: events delayed_vfree_work [ 525.536193][ C3] Call Trace: [ 525.537184][ C3] [ 525.538050][ C3] dump_stack_lvl+0x100/0x190 [ 525.539434][ C3] vpanic+0x553/0x970 [ 525.540600][ C3] ? __pfx_vpanic+0x10/0x10 [ 525.541969][ C3] panic+0xd1/0xe0 [ 525.543076][ C3] ? __pfx_panic+0x10/0x10 [ 525.544400][ C3] check_panic_on_warn.cold+0x19/0x34 [ 525.545951][ C3] ? usb_ep_enable+0x3e6/0x490 [ 525.547384][ C3] __warn.cold+0x191/0x318 [ 525.548713][ C3] __report_bug+0x30f/0x440 [ 525.550060][ C3] ? usb_ep_enable+0x3e6/0x490 [ 525.551469][ C3] ? __pfx___report_bug+0x10/0x10 [ 525.552937][ C3] ? do_raw_spin_lock+0x128/0x260 [ 525.554457][ C3] ? find_held_lock+0x2b/0x80 [ 525.555867][ C3] ? dummy_queue+0x3c5/0xb00 [ 525.557256][ C3] report_bug_entry+0xe2/0x290 [ 525.558672][ C3] ? usb_ep_enable+0x3f8/0x490 [ 525.560086][ C3] handle_bug+0x1cd/0x2a0 [ 525.561349][ C3] exc_invalid_op+0x17/0x50 [ 525.562687][ C3] asm_exc_invalid_op+0x1a/0x20 [ 525.564094][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 525.565656][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a d3 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 08 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 fb d9 8c [ 525.571244][ C3] RSP: 0018:ffffc900005f8a00 EFLAGS: 00010046 [ 525.573053][ C3] RAX: dffffc0000000000 RBX: ffff888022cb4338 RCX: ffffffff8cda40a0 [ 525.575460][ C3] RDX: 000000000000008a RSI: ffffffff8cda08c0 RDI: ffffffff9152e090 [ 525.577808][ C3] RBP: 000000000000008a R08: ffffffff8cd9fba0 R09: 0000000000000000 [ 525.580103][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cd9fba0 [ 525.582536][ C3] R13: 0000000000000000 R14: ffff888022cb4338 R15: ffff888024c8e5a0 [ 525.584885][ C3] hidg_set_alt+0x190/0xa10 [ 525.586280][ C3] ? sourcesink_set_alt+0x1ec/0x7b0 [ 525.587965][ C3] composite_setup+0x2ccf/0x9290 [ 525.589511][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 525.591022][ C3] ? __pfx_composite_setup+0x10/0x10 [ 525.592599][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.594236][ C3] ? do_raw_spin_lock+0x128/0x260 [ 525.595754][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.597389][ C3] ? configfs_composite_setup+0xfb/0x130 [ 525.599136][ C3] configfs_composite_setup+0xfb/0x130 [ 525.600785][ C3] dummy_timer+0x2039/0x3700 [ 525.602180][ C3] ? trace_seq_printf+0x250/0x380 [ 525.603729][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.605467][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 525.607126][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 525.608612][ C3] ? mark_held_locks+0x40/0x70 [ 525.610069][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.611812][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 525.613338][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 525.614894][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 525.616430][ C3] handle_softirqs+0x1e6/0x9d0 [ 525.617909][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 525.619502][ C3] ? _raw_spin_unlock+0x28/0x50 [ 525.620962][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 525.622652][ C3] __irq_exit_rcu+0x16a/0x210 [ 525.624103][ C3] irq_exit_rcu+0x9/0x30 [ 525.625398][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 525.627076][ C3] [ 525.627972][ C3] [ 525.628859][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.630660][ C3] RIP: 0010:trace_mm_page_free+0xf/0x1a0 [ 525.632343][ C3] Code: ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 55 41 54 55 53 66 90 65 8b 1d f9 07 1e 12 <83> fb 07 0f 87 23 01 00 00 48 89 d8 be 08 00 00 00 48 c1 e8 06 48 [ 525.637993][ C3] RSP: 0018:ffffc9000649f9f0 EFLAGS: 00000246 [ 525.639799][ C3] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff826edbde [ 525.642109][ C3] RDX: 1ffffd40003c3601 RSI: 0000000000000000 RDI: ffffea0001e1b000 [ 525.644479][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffea0001e1b000 [ 525.646819][ C3] R10: ffffea0001e1b007 R11: 1ffffffff1dbef51 R12: ffffea0001e1b008 [ 525.649154][ C3] R13: ffffea0001e1b000 R14: ffffea0001e1b000 R15: ffffea0001e1b000 [ 525.651506][ C3] ? free_pages_prepare+0x2e/0xe00 [ 525.653026][ C3] free_pages_prepare+0xc7/0xe00 [ 525.654524][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 525.656236][ C3] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 525.658228][ C3] __free_contig_range_common+0x14f/0x250 [ 525.659928][ C3] free_pages_bulk+0x12a/0x200 [ 525.661373][ C3] vm_area_free_pages+0xb2/0x2a0 [ 525.662882][ C3] vfree+0xf7/0x6d0 [ 525.664059][ C3] ? process_one_work+0xa2c/0x1b10 [ 525.665594][ C3] ? process_one_work+0x906/0x1b10 [ 525.667167][ C3] ? process_one_work+0x906/0x1b10 [ 525.668724][ C3] delayed_vfree_work+0x56/0x80 [ 525.670207][ C3] process_one_work+0xac7/0x1b10 [ 525.671679][ C3] ? __pfx_process_one_work+0x10/0x10 [ 525.673276][ C3] ? lock_acquire+0x1d1/0x380 [ 525.674704][ C3] ? __pfx_delayed_vfree_work+0x10/0x10 [ 525.676416][ C3] worker_thread+0x5ef/0xe50 [ 525.677890][ C3] ? __pfx_worker_thread+0x10/0x10 [ 525.679500][ C3] ? kthread+0x13a/0x450 [ 525.680837][ C3] ? __pfx_worker_thread+0x10/0x10 [ 525.682484][ C3] kthread+0x373/0x450 [ 525.683787][ C3] ? __pfx_kthread+0x10/0x10 [ 525.685246][ C3] ret_from_fork+0x730/0xd60 [ 525.686726][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 525.688346][ C3] ? __switch_to+0x800/0x10f0 [ 525.689832][ C3] ? __pfx_kthread+0x10/0x10 [ 525.691279][ C3] ret_from_fork_asm+0x1a/0x30 [ 525.692740][ C3] [ 525.694248][ C3] Kernel Offset: disabled [ 525.695603][ C3] Rebooting in 86400 seconds..