last executing test programs: 30.268169965s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000900)='./proc/fs/nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/fs/nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 29.548277909s ago: executing program 2 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="5d4f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x8000, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0.90', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='7:0', 0x3) 26.330049864s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)='4\x00', 0x1) 26.270342818s ago: executing program 3 (id=16): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 26.219155794s ago: executing program 3 (id=17): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d0000000004000000040000010000000100000001000000010000000100000080", 0x21, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="0101010101", 0x5, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100", 0x6, 0x280c) pwrite64(r0, &(0x7f0000001110)="010000006400000064000000640000", 0xf, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150), 0x0, 0x28e0) pwrite64(r0, 0x0, 0x0, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 25.452765485s ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000240)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000280)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) close(r0) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1c) 24.738518268s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000800)=@filename='nfsd\x00', &(0x7f0000000900)='./proc/fs/nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/fs/nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r2, &(0x7f0000000600)=@in={0x2, 0x801, @local}, 0x10) sendto(r2, &(0x7f0000000700)="80000050123456780000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000006000000010000000461626364000000047465737400000000", 0x54, 0x0, 0x0, 0x0) 24.000126595s ago: executing program 3 (id=28): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 14.155176245s ago: executing program 32 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="5d4f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x8000, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='md0\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0.90', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='7:0', 0x3) 8.927307525s ago: executing program 33 (id=28): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 5.829283599s ago: executing program 5 (id=97): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 5.274960297s ago: executing program 0 (id=99): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="000000000000000000000000ffffffff000000010123456789abcdef", 0x1c, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="000000000000000000000000ffffffff000000010123456789abcdef", 0x1c, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x34, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 5.274784083s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:01.1\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.1/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000500)='\x00', 0x1, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 0 3f\x00', 0x2b) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 5.274685381s ago: executing program 4 (id=101): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1\x00', 0x48) 5.274454946s ago: executing program 5 (id=102): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005", 0x19, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="000800000000000000000000000400002000000002", 0x15, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000", 0x22, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100541901005419", 0x12, 0x2554) pwrite64(r0, 0x0, 0x0, 0x2804) pwrite64(r0, 0x0, 0x0, 0x280c) pwrite64(r0, 0x0, 0x0, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 5.182599401s ago: executing program 5 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)='4\x00', 0x1) 5.129207987s ago: executing program 4 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='ep', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='blk0\n', 0x5) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='ep1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f00000006c0)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 5.12869961s ago: executing program 5 (id=105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc299, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x8, @string={0x8, 0x3, 's\x00y\x00z\x00'}}, &(0x7f0000000200)={0x0, 0x22, 0x1b, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x8, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @main=@item_012={0x1, 0x0, 0x8, "02"}, @global=@item_012={0x1, 0x1, 0x8, "02"}, @local=@item_012={0x1, 0x2, 0x0, '1'}, @global=@item_012={0x1, 0x1, 0x9, '\a'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, &(0x7f0000000700)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.578856542s ago: executing program 4 (id=111): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005", 0x19, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="000800000000000000000000000400002000000002", 0x15, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000", 0x22, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100541901005419", 0x12, 0x2554) pwrite64(r0, 0x0, 0x0, 0x2804) pwrite64(r0, 0x0, 0x0, 0x280c) pwrite64(r0, 0x0, 0x0, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 4.577400766s ago: executing program 4 (id=112): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) 4.379665444s ago: executing program 0 (id=115): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc1, 0x0, 0x4, "05000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000002000)="0a000100010000000001") syz_usb_ep_write(r0, 0x81, 0xb, &(0x7f0000002100)="0b00020002000000000000") syz_usb_ep_write(r0, 0x82, 0x9, &(0x7f0000002200)="090003002000000000") nanosleep(&(0x7f0000003000)={0x1}, 0x0) 4.080079453s ago: executing program 5 (id=116): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d0000000004000000040000010000000100000001000000010000000100000080", 0x21, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="0101010101", 0x5, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100", 0x6, 0x280c) pwrite64(r0, &(0x7f0000001110)="010000006400000064000000640000", 0xf, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150), 0x0, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed4102", 0x3, 0x2d00) pwrite64(r0, &(0x7f0000001170), 0x0, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 4.010248268s ago: executing program 5 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='core', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='disk', 0x4) (async) 2.189470088s ago: executing program 4 (id=125): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d0000000004000000040000010000000100000001000000010000000100000080", 0x21, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="0101010101", 0x5, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100", 0x6, 0x280c) pwrite64(r0, &(0x7f0000001110)="010000006400000064000000640000", 0xf, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150), 0x0, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed4102", 0x3, 0x2d00) pwrite64(r0, &(0x7f0000001170), 0x0, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 2.188479564s ago: executing program 4 (id=126): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x100, "0f00000100"/256}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000100)) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 1.790098851s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='ep', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='blk0\n', 0x5) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='ep1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f00000006c0)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0)='1\n', 0x2) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.189905063s ago: executing program 1 (id=129): syslog(0x3, &(0x7f0000000000)=""/4096, 0x1000) 1.127281902s ago: executing program 1 (id=130): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005", 0x19, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="000800000000000000000000000400002000000002", 0x15, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000", 0x22, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100541901005419", 0x12, 0x2554) pwrite64(r0, 0x0, 0x0, 0x2804) pwrite64(r0, 0x0, 0x0, 0x280c) pwrite64(r0, 0x0, 0x0, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, &(0x7f0000001130), 0x0, 0x2854) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 1.126042176s ago: executing program 1 (id=131): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) 1.048931942s ago: executing program 1 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, 0x0, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r7, &(0x7f00000005c0)='4\x00', 0x1) 1.048469715s ago: executing program 1 (id=133): r0 = syz_usb_connect$hid(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c20000000000010902510002010080000904000002030000000921110100012223000905810340000a00000905020340000a00000904010002030000000921110100012223000905830340000a00000905040340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x5}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x1, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") 620.2244ms ago: executing program 0 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='128\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xe) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17) 50.140872ms ago: executing program 0 (id=135): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="800000008000000001000000001000000004000004", 0x15, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001090)="0d0000000004000000040000010000000100000001000000010000000100000080", 0x21, 0x2098) pwrite64(r0, 0x0, 0x0, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="0101010101", 0x5, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f0000001100)="000000000100", 0x6, 0x280c) pwrite64(r0, &(0x7f0000001110)="010000006400000064000000640000", 0xf, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, 0x0, 0x0, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150), 0x0, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed4102", 0x3, 0x2d00) pwrite64(r0, &(0x7f0000001170), 0x0, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 0s ago: executing program 0 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='e100\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000300)}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r5, r6, r7, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000320)}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000640)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000340)}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7475' (ED25519) to the list of known hosts. [ 41.877026][ T5728] cgroup: Unknown subsys name 'net' [ 42.038092][ T5728] cgroup: Unknown subsys name 'cpuset' [ 42.042137][ T5728] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.957970][ T5728] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.788128][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.794108][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.803347][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.805846][ T5756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.807340][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.807394][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.807480][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.808144][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.809131][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.810616][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.810704][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.811568][ T5761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.811769][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.812906][ T5756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.813645][ T5756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.814101][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.814633][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.816300][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.823707][ T5761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.846284][ T5761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.385212][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.388068][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.390357][ T5744] bridge_slave_0: entered allmulticast mode [ 47.393014][ T5744] bridge_slave_0: entered promiscuous mode [ 47.414875][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.417217][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.419508][ T5744] bridge_slave_1: entered allmulticast mode [ 47.422219][ T5744] bridge_slave_1: entered promiscuous mode [ 47.486626][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.494014][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.496467][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.498983][ T5746] bridge_slave_0: entered allmulticast mode [ 47.501644][ T5746] bridge_slave_0: entered promiscuous mode [ 47.505590][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.539894][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.542236][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.544456][ T5746] bridge_slave_1: entered allmulticast mode [ 47.547072][ T5746] bridge_slave_1: entered promiscuous mode [ 47.556280][ T5744] team0: Port device team_slave_0 added [ 47.570461][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.572944][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.575400][ T5745] bridge_slave_0: entered allmulticast mode [ 47.577996][ T5745] bridge_slave_0: entered promiscuous mode [ 47.581312][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.583534][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.585874][ T5745] bridge_slave_1: entered allmulticast mode [ 47.588414][ T5745] bridge_slave_1: entered promiscuous mode [ 47.591779][ T5744] team0: Port device team_slave_1 added [ 47.626713][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.636940][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.639607][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.648127][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.652768][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.654900][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.662670][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.673155][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.677388][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.682886][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.737915][ T5745] team0: Port device team_slave_0 added [ 47.750153][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.753320][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.755978][ T5747] bridge_slave_0: entered allmulticast mode [ 47.758904][ T5747] bridge_slave_0: entered promiscuous mode [ 47.764140][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.767540][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.770208][ T5747] bridge_slave_1: entered allmulticast mode [ 47.772745][ T5747] bridge_slave_1: entered promiscuous mode [ 47.776139][ T5746] team0: Port device team_slave_0 added [ 47.779074][ T5745] team0: Port device team_slave_1 added [ 47.796219][ T5746] team0: Port device team_slave_1 added [ 47.815285][ T5744] hsr_slave_0: entered promiscuous mode [ 47.817585][ T5744] hsr_slave_1: entered promiscuous mode [ 47.838251][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.840372][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.848201][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.853940][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.858170][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.860424][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.868146][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.871820][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.874043][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.882211][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.899662][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.902975][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.905432][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.913349][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.970083][ T5747] team0: Port device team_slave_0 added [ 47.976288][ T5747] team0: Port device team_slave_1 added [ 47.996902][ T5746] hsr_slave_0: entered promiscuous mode [ 47.999199][ T5746] hsr_slave_1: entered promiscuous mode [ 48.001353][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.003136][ T5746] Cannot create hsr debugfs directory [ 48.024119][ T5745] hsr_slave_0: entered promiscuous mode [ 48.026617][ T5745] hsr_slave_1: entered promiscuous mode [ 48.029405][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.031234][ T5745] Cannot create hsr debugfs directory [ 48.040998][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.043224][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.051173][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.061021][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.063180][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.070937][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.176435][ T5747] hsr_slave_0: entered promiscuous mode [ 48.179410][ T5747] hsr_slave_1: entered promiscuous mode [ 48.182000][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 48.184167][ T5747] Cannot create hsr debugfs directory [ 48.336196][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.344663][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.348140][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.355832][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.374599][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.381258][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.397404][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.403839][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.462814][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.468763][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.472042][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.476551][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.480063][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.484385][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.497724][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.503846][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.562024][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.567472][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.570244][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.574643][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.577998][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.583000][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.588237][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.592479][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.657640][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.660098][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.664166][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.667135][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.671588][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.674320][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.679095][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.682020][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.686187][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.731363][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.745888][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.748506][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.755908][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.770388][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.772652][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.809025][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.820780][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.823055][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.826457][ T5748] Bluetooth: hci0: command tx timeout [ 48.835007][ T5748] Bluetooth: hci3: command tx timeout [ 48.836538][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.842447][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.845270][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.875526][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.879744][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.893631][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.896333][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.905284][ T5748] Bluetooth: hci1: command tx timeout [ 48.915753][ T5748] Bluetooth: hci2: command tx timeout [ 48.924155][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.927314][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.943235][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.962518][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.965555][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.982097][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.984423][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.040072][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.213780][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.238031][ T5744] veth0_vlan: entered promiscuous mode [ 49.245648][ T5744] veth1_vlan: entered promiscuous mode [ 49.255808][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.270741][ T5744] veth0_macvtap: entered promiscuous mode [ 49.280803][ T5744] veth1_macvtap: entered promiscuous mode [ 49.293933][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.298232][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.305413][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.318772][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.323290][ T5746] veth0_vlan: entered promiscuous mode [ 49.345712][ T5746] veth1_vlan: entered promiscuous mode [ 49.380039][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.400866][ T5747] veth0_vlan: entered promiscuous mode [ 49.425417][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.428060][ T5747] veth1_vlan: entered promiscuous mode [ 49.429169][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.432807][ T5745] veth0_vlan: entered promiscuous mode [ 49.446227][ T5746] veth0_macvtap: entered promiscuous mode [ 49.452022][ T5746] veth1_macvtap: entered promiscuous mode [ 49.463777][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.464272][ T5745] veth1_vlan: entered promiscuous mode [ 49.467482][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.475259][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.489089][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.502218][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.514999][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.521569][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.524533][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.526820][ T5747] veth0_macvtap: entered promiscuous mode [ 49.536590][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.543799][ T5747] veth1_macvtap: entered promiscuous mode [ 49.547829][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.551722][ T5745] veth0_macvtap: entered promiscuous mode [ 49.554341][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.563433][ T5745] veth1_macvtap: entered promiscuous mode [ 49.569236][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.599518][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.606641][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.651205][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.665353][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.677944][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.682113][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.686201][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.730132][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.733261][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.743217][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.750912][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.753839][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.783602][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.784305][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.786919][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.792494][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.812326][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.820067][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.823129][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.825938][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.828884][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.845798][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.850586][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854268][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.858467][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.872055][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.885793][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889660][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.892295][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896102][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.899120][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.913561][ T5904] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 49.918260][ T5904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 49.923410][ T5904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 49.929296][ T5904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.934084][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.937375][ T5904] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 49.964242][ T5902] NFSD: Failed to start, no listeners configured. [ 49.997219][ T5907] e1000e 0000:00:02.0 eth1: removed PHC [ 50.120758][ T5907] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 50.127719][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.196155][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.259429][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.318756][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.485284][ T5934] loop0: detected capacity change from 0 to 128 [ 50.615280][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.770087][ T5848] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 50.778045][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.786571][ T5750] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.891628][ T5955] NFSD: Failed to start, no listeners configured. [ 50.905106][ T5748] Bluetooth: hci0: command tx timeout [ 50.905250][ T5761] Bluetooth: hci3: command tx timeout [ 50.936931][ T5750] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 50.939862][ T5750] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.985240][ T5761] Bluetooth: hci2: command tx timeout [ 50.985265][ T5748] Bluetooth: hci1: command tx timeout [ 51.375247][ T42] audit: type=1800 audit(1785862098.025:2): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="idProduct" dev="configfs" ino=9572 res=0 errno=0 [ 51.383560][ T42] audit: type=1800 audit(1785862098.035:3): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="process_ump" dev="configfs" ino=9576 res=0 errno=0 [ 51.383802][ T5971] Need at least one configuration in g1. [ 51.391704][ T42] audit: type=1800 audit(1785862098.035:4): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="direction" dev="configfs" ino=9577 res=0 errno=0 [ 51.394215][ T5971] udc dummy_udc.0: failed to start g1: -22 [ 51.401704][ T42] audit: type=1800 audit(1785862098.035:5): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="name" dev="configfs" ino=9578 res=0 errno=0 [ 51.402508][ T5971] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 51.410604][ T42] audit: type=1800 audit(1785862098.035:6): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12" name="UDC" dev="configfs" ino=9579 res=0 errno=0 [ 51.413798][ T5971] UDC core: g1: couldn't find an available UDC or it's busy [ 52.204951][ T5835] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.377605][ T5835] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 52.380565][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.985218][ T5761] Bluetooth: hci3: command tx timeout [ 52.988613][ T5748] Bluetooth: hci0: command tx timeout [ 53.064927][ T5748] Bluetooth: hci1: command tx timeout [ 53.064976][ T5761] Bluetooth: hci2: command tx timeout [ 53.580736][ T34] usb 8-1: USB disconnect, device number 2 [ 53.641492][ T5978] loop0: detected capacity change from 0 to 128 [ 53.721349][ T42] audit: type=1800 audit(1785862100.375:7): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="ipv4_address" dev="configfs" ino=11308 res=0 errno=0 [ 53.728485][ T42] audit: type=1800 audit(1785862100.375:8): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="ipv4_port" dev="configfs" ino=11309 res=0 errno=0 [ 53.736274][ T42] audit: type=1800 audit(1785862100.375:9): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="num" dev="configfs" ino=11310 res=0 errno=0 [ 53.742939][ T42] audit: type=1800 audit(1785862100.375:10): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="local" dev="configfs" ino=11311 res=0 errno=0 [ 53.749943][ T42] audit: type=1800 audit(1785862100.395:11): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15" name="block_bytes" dev="configfs" ino=11318 res=0 errno=0 [ 53.780128][ T5982] siw: device registration error -23 [ 54.101528][ T5835] hid-rmi 0003:1532:011D.0003: unable to set rmi mode to 1 (-71) [ 54.103917][ T5835] hid-rmi 0003:1532:011D.0003: failed to set rmi mode [ 54.117785][ T5835] hid-rmi 0003:1532:011D.0003: hiddev0,hidraw1: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 54.125537][ T5835] usb 5-1: USB disconnect, device number 2 [ 54.163825][ T5988] fido_id[5988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 54.627471][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.648589][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.684745][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.707106][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.741458][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.764243][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.798870][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.820288][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.033996][ T5848] hid-rmi 0003:1532:011D.0002: unable to set rmi mode to 1 (-71) [ 55.036435][ T5848] hid-rmi 0003:1532:011D.0002: failed to set rmi mode [ 55.045291][ T5848] hid-rmi 0003:1532:011D.0002: hiddev0,hidraw1: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 55.052003][ T5848] usb 6-1: USB disconnect, device number 2 [ 55.066233][ T5761] Bluetooth: hci3: command tx timeout [ 55.069498][ T5748] Bluetooth: hci0: command tx timeout [ 55.074978][ T5995] fido_id[5995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 55.146160][ T5761] Bluetooth: hci2: command tx timeout [ 55.146180][ T5748] Bluetooth: hci1: command tx timeout [ 55.370702][ T6000] Need at least one configuration in g1. [ 55.372931][ T6000] udc dummy_udc.0: failed to start g1: -22 [ 55.374788][ T6000] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 55.380321][ T6000] UDC core: g1: couldn't find an available UDC or it's busy [ 55.404192][ T5998] NFSD: Failed to start, no listeners configured. [ 55.910449][ T6003] loop0: detected capacity change from 0 to 128 [ 56.010278][ T6010] siw: device registration error -23 [ 56.053111][ T6012] loop0: detected capacity change from 0 to 128 [ 56.072981][ T6012] ufs: ufs_fill_super(): fs needs fsck [ 56.114638][ T6018] Need at least one configuration in g1. [ 56.116518][ T6018] udc dummy_udc.0: failed to start g1: -22 [ 56.118353][ T6018] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 56.119399][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.122072][ T6018] UDC core: g1: couldn't find an available UDC or it's busy [ 56.159806][ T5835] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 56.163012][ T5835] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 56.183960][ T37] wlan1: authenticated [ 56.185253][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.196197][ T37] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 56.241380][ T61] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 56.244015][ T6020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.244621][ T61] wlan1: associated [ 56.310243][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.861227][ T6023] loop0: detected capacity change from 0 to 128 [ 56.865807][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.870165][ T6023] ufs: ufs_fill_super(): fs needs fsck [ 56.921450][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.940936][ T6029] loop0: detected capacity change from 0 to 128 [ 56.950860][ T6029] ufs: ufs_fill_super(): fs needs fsck [ 56.978028][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.002435][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 57.002447][ T42] audit: type=1800 audit(1785862103.655:33): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="ipv4_address" dev="configfs" ino=11385 res=0 errno=0 [ 57.011857][ T42] audit: type=1800 audit(1785862103.655:34): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="ipv4_port" dev="configfs" ino=11386 res=0 errno=0 [ 57.018363][ T42] audit: type=1800 audit(1785862103.655:35): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="num" dev="configfs" ino=11387 res=0 errno=0 [ 57.024045][ T42] audit: type=1800 audit(1785862103.665:36): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="local" dev="configfs" ino=11388 res=0 errno=0 [ 57.030036][ T42] audit: type=1800 audit(1785862103.665:37): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="block_bytes" dev="configfs" ino=11389 res=0 errno=0 [ 57.037672][ T42] audit: type=1800 audit(1785862103.665:38): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="blocks" dev="configfs" ino=11390 res=0 errno=0 [ 57.041611][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.043549][ T42] audit: type=1800 audit(1785862103.665:39): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="start_block" dev="configfs" ino=11391 res=0 errno=0 [ 57.052265][ T42] audit: type=1800 audit(1785862103.665:40): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34" name="dev" dev="configfs" ino=11392 res=0 errno=0 [ 65.979966][ T5761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.985691][ T5761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.990906][ T5761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.994962][ T5761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.002112][ T5761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.335480][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.379103][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.381385][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.383628][ T6033] bridge_slave_0: entered allmulticast mode [ 66.387396][ T6033] bridge_slave_0: entered promiscuous mode [ 66.391540][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.393960][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.397260][ T6033] bridge_slave_1: entered allmulticast mode [ 66.400912][ T6033] bridge_slave_1: entered promiscuous mode [ 66.418274][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.422966][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.439672][ T6033] team0: Port device team_slave_0 added [ 66.452072][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.458881][ T6033] team0: Port device team_slave_1 added [ 66.473356][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.475555][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.483053][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.488693][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.490964][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.499056][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.524395][ T6033] hsr_slave_0: entered promiscuous mode [ 66.526889][ T6033] hsr_slave_1: entered promiscuous mode [ 66.529721][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 66.531561][ T6033] Cannot create hsr debugfs directory [ 66.571822][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.644519][ T6033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.650343][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.653146][ T6033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.657536][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.660349][ T6033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.664420][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.669501][ T6033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.674114][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.687516][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.703971][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.706746][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.709327][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.711451][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.748606][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.770620][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.773283][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.791878][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.800214][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.802822][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.833033][ T12] bridge_slave_1: left allmulticast mode [ 66.836223][ T12] bridge_slave_1: left promiscuous mode [ 66.839117][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.846898][ T12] bridge_slave_0: left allmulticast mode [ 66.848650][ T12] bridge_slave_0: left promiscuous mode [ 66.850380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.971056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.977261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.981285][ T12] bond0 (unregistering): Released all slaves [ 66.989166][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.991506][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.000953][ T6061] lo speed is unknown, defaulting to 1000 [ 67.010660][ T6061] lo speed is unknown, defaulting to 1000 [ 67.016099][ T6061] lo speed is unknown, defaulting to 1000 [ 67.069682][ T42] audit: type=1800 audit(1785862113.725:41): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="idProduct" dev="configfs" ino=10036 res=0 errno=0 [ 67.074056][ T6068] Need at least one configuration in g1. [ 67.078577][ T6068] udc dummy_udc.0: failed to start g1: -22 [ 67.081016][ T6068] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 67.086204][ T6068] UDC core: g1: couldn't find an available UDC or it's busy [ 67.086294][ T42] audit: type=1800 audit(1785862113.725:42): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="process_ump" dev="configfs" ino=10037 res=0 errno=0 [ 67.108197][ T42] audit: type=1800 audit(1785862113.725:43): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="ep_name" dev="configfs" ino=10038 res=0 errno=0 [ 67.118810][ T42] audit: type=1800 audit(1785862113.725:44): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="direction" dev="configfs" ino=10039 res=0 errno=0 [ 67.129537][ T42] audit: type=1800 audit(1785862113.725:45): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="name" dev="configfs" ino=10040 res=0 errno=0 [ 67.135925][ T42] audit: type=1800 audit(1785862113.725:46): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="UDC" dev="configfs" ino=10041 res=0 errno=0 [ 67.162825][ T6061] infiniband syz2: set active [ 67.166822][ T6061] infiniband syz2: added lo [ 67.179133][ T6061] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 67.179709][ T34] lo speed is unknown, defaulting to 1000 [ 67.183907][ T6061] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 67.184142][ T6061] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 67.210157][ T6061] RDS/IB: syz2: added [ 67.212946][ T6061] smc: adding ib device syz2 with port count 1 [ 67.215962][ T6061] smc: ib device syz2 port 1 has no pnetid [ 67.218832][ T5856] lo speed is unknown, defaulting to 1000 [ 67.241035][ T6061] lo speed is unknown, defaulting to 1000 [ 67.242013][ T5457] 8021q: adding VLAN 0 to HW filter on device eth1 [ 67.364183][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.377643][ T6061] lo speed is unknown, defaulting to 1000 [ 67.416130][ T5457] 8021q: adding VLAN 0 to HW filter on device eth2 [ 67.528804][ T6061] lo speed is unknown, defaulting to 1000 [ 67.539853][ T6033] veth0_vlan: entered promiscuous mode [ 67.548349][ T6033] veth1_vlan: entered promiscuous mode [ 67.569493][ T6033] veth0_macvtap: entered promiscuous mode [ 67.577853][ T5457] 8021q: adding VLAN 0 to HW filter on device eth3 [ 67.581409][ T6033] veth1_macvtap: entered promiscuous mode [ 67.594254][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.603553][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.621338][ T6061] lo speed is unknown, defaulting to 1000 [ 67.674334][ T6107] loop0: detected capacity change from 0 to 128 [ 67.686500][ T6107] ufs: ufs_fill_super(): fs needs fsck [ 67.695005][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.701615][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.704347][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.736454][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.742001][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.744942][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.748665][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.752978][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.768774][ T5457] 8021q: adding VLAN 0 to HW filter on device eth4 [ 67.815127][ T6061] lo speed is unknown, defaulting to 1000 [ 67.964192][ T6122] loop0: detected capacity change from 0 to 128 [ 68.059882][ T42] audit: type=1800 audit(1785862114.715:47): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="ipv4_address" dev="configfs" ino=11456 res=0 errno=0 [ 68.077902][ T42] audit: type=1800 audit(1785862114.725:48): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="ipv4_port" dev="configfs" ino=10493 res=0 errno=0 [ 68.097175][ T42] audit: type=1800 audit(1785862114.735:49): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="num" dev="configfs" ino=10494 res=0 errno=0 [ 68.114007][ T42] audit: type=1800 audit(1785862114.735:50): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="local" dev="configfs" ino=10495 res=0 errno=0 [ 68.115198][ T5761] Bluetooth: hci4: command tx timeout [ 68.203496][ T12] hsr_slave_0: left promiscuous mode [ 68.208697][ T12] hsr_slave_1: left promiscuous mode [ 68.210757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.264948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.271093][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.276759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.296547][ T12] veth1_macvtap: left promiscuous mode [ 68.298558][ T12] veth0_macvtap: left promiscuous mode [ 68.300258][ T12] veth1_vlan: left promiscuous mode [ 68.301858][ T12] veth0_vlan: left promiscuous mode [ 68.334547][ T6137] Need at least one configuration in g1. [ 68.342954][ T6137] udc dummy_udc.0: failed to start g1: -22 [ 68.352864][ T6137] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 68.363325][ T6137] UDC core: g1: couldn't find an available UDC or it's busy [ 68.469086][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.479268][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.687068][ T6141] loop0: detected capacity change from 0 to 128 [ 68.691810][ T6141] ufs: ufs_fill_super(): fs needs fsck [ 68.768852][ T6143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.285049][ T5863] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 69.633469][ T6153] svc: failed to register lockdv1 RPC service (errno 111). [ 69.636553][ T6153] lockd_up: makesock failed, error=-111 [ 70.048803][ T6153] svc: failed to register nfsdv3 RPC service (errno 111). [ 70.052107][ T6153] svc: failed to register nfsaclv3 RPC service (errno 111). [ 70.054923][ T6153] failed to unregister tcp with rpcbind [ 70.057537][ T6153] svc: failed to register nfsdv3 RPC service (errno 97). [ 70.060324][ T6153] svc: failed to register nfsaclv3 RPC service (errno 97). [ 70.063130][ T6153] failed to unregister tcp with rpcbind [ 70.111004][ T6156] loop0: detected capacity change from 0 to 128 [ 70.122268][ T6156] ufs: ufs_fill_super(): fs needs fsck [ 70.187179][ T5748] Bluetooth: hci4: command tx timeout [ 70.221296][ T5750] hid-generic 0005:0C45:1010.0004: unknown main item tag 0x0 [ 70.228568][ T5750] hid-generic 0005:0C45:1010.0004: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 70.306376][ T6167] loop0: detected capacity change from 0 to 128 [ 70.312036][ T6167] ufs: ufs_fill_super(): fs needs fsck [ 70.361228][ T6169] Need at least one configuration in g1. [ 70.363337][ T6169] udc dummy_udc.0: failed to start g1: -22 [ 70.365675][ T6169] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 70.370364][ T6169] UDC core: g1: couldn't find an available UDC or it's busy [ 70.452554][ T5863] usb 9-1: unable to get BOS descriptor or descriptor too short [ 70.456967][ T5863] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 70.459446][ T5863] usb 9-1: can't read configurations, error -71 [ 70.908282][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.910812][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.913381][ T6171] device-mapper: table: 248:0: zero-length target [ 70.917859][ T6171] device-mapper: ioctl: error adding target to table [ 70.987959][ T6178] loop0: detected capacity change from 0 to 128 [ 70.994571][ T6178] ufs: ufs_fill_super(): fs needs fsck [ 70.996491][ T5761] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.079607][ T6187] loop0: detected capacity change from 0 to 128 [ 71.121139][ T6190] Need at least one configuration in g1. [ 71.123747][ T6190] udc dummy_udc.0: failed to start g1: -22 [ 71.125678][ T6190] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 71.140646][ T6190] UDC core: g1: couldn't find an available UDC or it's busy [ 71.234623][ T61] sl0: header compression turned on [ 71.241230][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.250381][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.253581][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.257895][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.260535][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.440127][ T6206] lo speed is unknown, defaulting to 1000 [ 71.510799][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.601644][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.681968][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.684403][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.686876][ T6206] bridge_slave_0: entered allmulticast mode [ 71.690052][ T6206] bridge_slave_0: entered promiscuous mode [ 71.702417][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.711845][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.714191][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.716766][ T6206] bridge_slave_1: entered allmulticast mode [ 71.720508][ T6206] bridge_slave_1: entered promiscuous mode [ 71.740644][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.746177][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.760977][ T6206] team0: Port device team_slave_0 added [ 71.764580][ T6206] team0: Port device team_slave_1 added [ 71.785737][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.788126][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.796689][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.810290][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.824642][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.827052][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.835461][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.864318][ T6206] hsr_slave_0: entered promiscuous mode [ 71.866709][ T6206] hsr_slave_1: entered promiscuous mode [ 71.869329][ T6206] debugfs: 'hsr0' already exists in 'hsr' [ 71.871028][ T6206] Cannot create hsr debugfs directory [ 71.933877][ T6247] Zero length message leads to an empty skb [ 71.998967][ T6253] loop0: detected capacity change from 0 to 128 [ 72.002850][ T5848] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 72.004258][ T6253] ufs: ufs_fill_super(): fs needs fsck [ 72.020742][ T6253] ufs: error (device loop0): ufs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=512, rec_len=0, name_len=0 [ 72.041869][ T12] bridge_slave_1: left allmulticast mode [ 72.043700][ T12] bridge_slave_1: left promiscuous mode [ 72.046675][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.053062][ T12] bridge_slave_0: left allmulticast mode [ 72.060647][ T12] bridge_slave_0: left promiscuous mode [ 72.062648][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.077431][ T6260] Bluetooth: MGMT ver 1.23 [ 72.081866][ T6258] Need at least one configuration in g1. [ 72.085526][ T6258] udc dummy_udc.0: failed to start g1: -22 [ 72.087861][ T6258] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 72.100118][ T6258] UDC core: g1: couldn't find an available UDC or it's busy [ 72.163442][ T6269] loop0: detected capacity change from 0 to 128 [ 72.168697][ T6269] ufs: ufs_fill_super(): fs needs fsck [ 72.179158][ T5848] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 72.183362][ T5848] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 72.191428][ T5848] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 72.195690][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.202223][ T6236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 72.204696][ T6236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 72.212913][ T5848] cp210x 9-1:1.0: cp210x converter detected [ 72.213034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.217641][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 72.217651][ T42] audit: type=1800 audit(1785862118.865:104): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="ipv4_address" dev="configfs" ino=12726 res=0 errno=0 [ 72.231004][ T42] audit: type=1800 audit(1785862118.875:105): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="ipv4_port" dev="configfs" ino=12727 res=0 errno=0 [ 72.238625][ T42] audit: type=1800 audit(1785862118.875:106): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="num" dev="configfs" ino=12728 res=0 errno=0 [ 72.245980][ T42] audit: type=1800 audit(1785862118.875:107): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="local" dev="configfs" ino=12729 res=0 errno=0 [ 72.251633][ T42] audit: type=1800 audit(1785862118.875:108): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="block_bytes" dev="configfs" ino=12730 res=0 errno=0 [ 72.253908][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.261960][ T42] audit: type=1800 audit(1785862118.875:109): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="blocks" dev="configfs" ino=12731 res=0 errno=0 [ 72.268305][ T5748] Bluetooth: hci4: command tx timeout [ 72.275277][ T12] bond0 (unregistering): Released all slaves [ 72.275936][ T42] audit: type=1800 audit(1785862118.875:110): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="start_block" dev="configfs" ino=12732 res=0 errno=0 [ 72.283820][ T42] audit: type=1800 audit(1785862118.875:111): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="dev" dev="configfs" ino=12733 res=0 errno=0 [ 72.370664][ T6206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.375017][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.377807][ T6206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.382142][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.385033][ T6206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.389698][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.393020][ T6206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.397063][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.471321][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.508555][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.515928][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.518849][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.529535][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.531874][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.537410][ T5457] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.555131][ T845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.663343][ T12] hsr_slave_0: left promiscuous mode [ 72.668533][ T12] hsr_slave_1: left promiscuous mode [ 72.670624][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.673011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.678320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.681025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.692890][ T12] veth1_macvtap: left promiscuous mode [ 72.694717][ T12] veth0_macvtap: left promiscuous mode [ 72.697634][ T12] veth1_vlan: left promiscuous mode [ 72.700129][ T12] veth0_vlan: left promiscuous mode [ 72.705676][ T6307] loop0: detected capacity change from 0 to 128 [ 72.708085][ T845] usb 5-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 72.713858][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.722182][ T845] usb 5-1: Product: syz [ 72.723583][ T845] usb 5-1: Manufacturer: syz [ 72.725202][ T845] usb 5-1: SerialNumber: syz [ 72.762760][ T42] audit: type=1800 audit(1785862119.415:112): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.89" name="attr_allow_any_host" dev="configfs" ino=12943 res=0 errno=0 [ 72.772057][ T6309] nvmet: adding nsid 1 to subsystem testnqn [ 72.777742][ T42] audit: type=1800 audit(1785862119.435:113): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.89" name="device_path" dev="configfs" ino=11740 res=0 errno=0 [ 72.844307][ T96] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:01b7ec3b-7f0e-41cb-bca9-b43d88616f81. [ 72.857018][ T6309] nvme nvme0: creating 4 I/O queues. [ 72.863421][ T6309] nvme nvme0: new ctrl: "testnqn" [ 72.919708][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.937936][ T12] team0 (unregistering): Port device team_slave_0 removed [ 73.012400][ T5457] 8021q: adding VLAN 0 to HW filter on device eth6 [ 73.068367][ T6279] ushc 5-1:1.0: probe with driver ushc failed with error -110 [ 73.161103][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.193328][ T5457] 8021q: adding VLAN 0 to HW filter on device eth7 [ 73.305750][ T5748] Bluetooth: hci3: command tx timeout [ 73.315845][ T6206] veth0_vlan: entered promiscuous mode [ 73.322928][ T6206] veth1_vlan: entered promiscuous mode [ 73.344080][ T6206] veth0_macvtap: entered promiscuous mode [ 73.350733][ T6206] veth1_macvtap: entered promiscuous mode [ 73.359213][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.367289][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.395095][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401317][ T5827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.407629][ T5457] 8021q: adding VLAN 0 to HW filter on device eth8 [ 73.436506][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.439154][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.464605][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.468041][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.476937][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.480315][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.671375][ T6359] UDC core: g1: couldn't find an available UDC or it's busy [ 74.107064][ T5761] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.117167][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.159186][ T4051] usb 5-1: USB disconnect, device number 3 [ 74.344397][ T6368] infiniband syz1: set active [ 74.346317][ T5761] Bluetooth: hci4: command tx timeout [ 74.348449][ T6368] infiniband syz1: added veth0 [ 74.357963][ T6368] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.362854][ T6368] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.368858][ T6368] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.389623][ T6368] RDS/IB: syz1: added [ 74.391607][ T6368] smc: adding ib device syz1 with port count 1 [ 74.394147][ T6368] smc: ib device syz1 port 1 has no pnetid [ 74.771285][ T5848] cp210x 9-1:1.0: failed to get vendor val 0x370b size 1: -71 [ 74.787148][ T5848] cp210x 9-1:1.0: querying part number failed [ 74.793343][ T6381] rdma_rxe: rxe_newlink: failed to add lo [ 74.795948][ T6381] siw: device registration error -23 [ 74.801046][ T5848] usb 9-1: cp210x converter now attached to ttyUSB0 [ 74.801594][ T96] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 74.811535][ T5848] usb 9-1: USB disconnect, device number 4 [ 74.832901][ T6386] loop0: detected capacity change from 0 to 128 [ 74.849636][ T12] nvme nvme1: rdma_resolve_route failed (-110). [ 74.852004][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 74.854186][ T6381] nvme nvme1: rdma connection establishment failed (-19) [ 74.864429][ T5848] cp210x 9-1:1.0: device disconnected [ 74.917279][ T6391] Need at least one configuration in g1. [ 74.919152][ T6391] udc dummy_udc.0: failed to start g1: -22 [ 74.920885][ T6391] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 74.924291][ T6391] UDC core: g1: couldn't find an available UDC or it's busy [ 75.053818][ T6397] ubi0: attaching mtd0 [ 75.056623][ T6397] ubi0: scanning is finished [ 75.058902][ T6397] ubi0: empty MTD device detected [ 75.106665][ T6398] UBIFS error (pid: 6398): cannot open "ubi0_0", error -19 [ 75.107802][ T6398] UBIFS error (pid: 6398): cannot open "ubi0_0", error -19 [ 75.111741][ T6398] UBIFS error (pid: 6398): cannot open "ubi0_0", error -19 [ 75.164911][ T5822] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 75.172123][ T6397] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.174616][ T6397] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.177259][ T6397] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.180094][ T6397] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 75.183715][ T6397] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.186315][ T6397] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.189222][ T6397] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2519970575 [ 75.193095][ T6397] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.197359][ T6399] ubi0: background thread "ubi_bgt0d" started, PID 6399 [ 75.318421][ T5822] usb 10-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 75.320053][ T6405] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.321511][ T5822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.321525][ T5822] usb 10-1: Product: syz [ 75.321533][ T5822] usb 10-1: Manufacturer: syz [ 75.321541][ T5822] usb 10-1: SerialNumber: syz [ 75.385524][ T5761] Bluetooth: hci3: command tx timeout [ 75.397066][ T6405] md: array md0 already has disks! [ 75.438462][ T6405] md: pers->run() failed ... [ 75.496675][ T6405] md: serialize_policy is only effective for raid1 [ 75.744982][ T3268] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 75.894986][ T5848] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.896912][ T3268] usb 9-1: not running at top speed; connect to a high speed hub [ 75.901400][ T3268] usb 9-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 75.904674][ T3268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.916431][ T3268] i2c-tiny-usb 9-1:1.0: version 1.00 found at bus 009 address 005 [ 75.941300][ T5822] usbhid 10-1:1.0: can't add hid device: -71 [ 75.943158][ T5822] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 75.953311][ T5822] usb 10-1: USB disconnect, device number 2 [ 75.978291][ T6421] loop0: detected capacity change from 0 to 128 [ 76.018213][ T6423] PM: hibernation: hibernation entry [ 76.052549][ T5848] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 76.055386][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.058337][ T5848] usb 5-1: Product: syz [ 76.059606][ T5848] usb 5-1: Manufacturer: syz [ 76.061066][ T5848] usb 5-1: SerialNumber: syz [ 76.147453][ T6427] UDC core: g1: couldn't find an available UDC or it's busy [ 76.377366][ T6428] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 76.385730][ T6428] i2c i2c-1: new_device: Instantiated device tps6598x at 0x38 [ 76.776235][ T5848] usb 5-1: failed to set cport flags for port 0 [ 76.778402][ T5848] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 76.789205][ T5848] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 76.848733][ T6423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.850859][ T6423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.858367][ T6423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.863905][ T6423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.867067][ T6423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.870740][ T6423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.873850][ T6423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.876129][ T6423] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.878636][ T6423] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.882576][ T6423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.885125][ T6423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.888145][ T6423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.913418][ T12] Filesystems sync: 0.019 seconds [ 77.319913][ T3268] (null): failure reading functionality [ 77.323676][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 77.323687][ T42] audit: type=1800 audit(1785862123.975:157): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="ipv4_address" dev="configfs" ino=13615 res=0 errno=0 [ 77.324765][ T3268] i2c i2c-2: failure reading functionality [ 77.326715][ T42] audit: type=1800 audit(1785862123.985:158): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="ipv4_port" dev="configfs" ino=13616 res=0 errno=0 [ 77.338002][ T3268] i2c i2c-2: connected i2c-tiny-usb device [ 77.343660][ T42] audit: type=1800 audit(1785862123.985:159): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="num" dev="configfs" ino=13119 res=0 errno=0 [ 77.350661][ T42] audit: type=1800 audit(1785862123.995:160): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="block_bytes" dev="configfs" ino=13120 res=0 errno=0 [ 77.352844][ T3268] usb 9-1: USB disconnect, device number 5 [ 77.357333][ T42] audit: type=1800 audit(1785862123.995:161): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="blocks" dev="configfs" ino=13121 res=0 errno=0 [ 77.357357][ T42] audit: type=1800 audit(1785862123.995:162): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="start_block" dev="configfs" ino=13122 res=0 errno=0 [ 77.357377][ T42] audit: type=1800 audit(1785862123.995:163): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.123" name="dev" dev="configfs" ino=13123 res=0 errno=0 [ 78.104976][ T5761] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.135634][ T4051] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 78.287944][ T4051] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 78.289005][ T42] audit: type=1800 audit(1785862124.945:164): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="idProduct" dev="configfs" ino=13627 res=0 errno=0 [ 78.291646][ T4051] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.298842][ T42] audit: type=1800 audit(1785862124.955:165): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="process_ump" dev="configfs" ino=13628 res=0 errno=0 [ 78.300282][ T4051] usb 9-1: Product: syz [ 78.307592][ T42] audit: type=1800 audit(1785862124.965:166): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="ep_name" dev="configfs" ino=11913 res=0 errno=0 [ 78.307716][ T4051] usb 9-1: Manufacturer: syz [ 78.307727][ T4051] usb 9-1: SerialNumber: syz [ 78.313514][ T6455] UDC core: g1: couldn't find an available UDC or it's busy [ 78.905128][ T5761] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.905165][ T5748] Bluetooth: hci3: command 0x0419 tx timeout [ 78.905306][ T5754] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.264972][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.395130][ T5863] usb 5-1: USB disconnect, device number 4 [ 79.416345][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 79.419383][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.637312][ T5822] lg-g15 0003:046D:C222.0005: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 79.994759][ T6502] loop0: detected capacity change from 0 to 128 [ 80.000338][ T6502] ufs: ufs_fill_super(): fs needs fsck [ 80.075191][ T6504] ------------[ cut here ]------------ [ 80.076864][ T6504] UBSAN: shift-out-of-bounds in drivers/net/ethernet/intel/e100.c:768:21 [ 80.079577][ T6504] shift exponent 65529 is too large for 32-bit type 'int' [ 80.082582][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 80.082598][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.082614][ T6504] Call Trace: [ 80.082628][ T6504] [ 80.082634][ T6504] dump_stack_lvl+0x100/0x190 [ 80.082659][ T6504] ubsan_epilogue+0xa/0x30 [ 80.082672][ T6504] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 80.082694][ T6504] e100_eeprom_load.cold+0x55/0x9e [ 80.082712][ T6504] ? dma_alloc_attrs+0x1cd/0x3a0 [ 80.082729][ T6504] ? __pfx_e100_eeprom_load+0x10/0x10 [ 80.082746][ T6504] ? lockdep_init_map_type+0x5c/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.082760][ T6504] e100_probe+0xd07/0x1ab0 [ 80.082778][ T6504] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.082796][ T6504] ? __pfx_e100_probe+0x10/0x10 [ 80.082812][ T6504] local_pci_probe+0xdd/0x1b0 [ 80.082828][ T6504] pci_call_probe+0x176/0x800 [ 80.082842][ T6504] ? __pfx_pci_call_probe+0x10/0x10 [ 80.082857][ T6504] ? find_held_lock+0x2b/0x80 [ 80.082871][ T6504] ? pci_match_device+0x450/0x5f0 [ 80.082887][ T6504] ? pci_match_device+0x450/0x5f0 [ 80.082902][ T6504] ? pci_match_id+0x34d/0x3f0 [ 80.082917][ T6504] ? pci_match_device+0xb4/0x5f0 [ 80.082934][ T6504] pci_device_probe+0x1cd/0x370 [ 80.082947][ T6504] ? __pfx_pci_device_probe+0x10/0x10 [ 80.082961][ T6504] really_probe+0x241/0xa60 [ 80.082982][ T6504] __driver_probe_device+0x20e/0x450 [ 80.083005][ T6504] device_driver_attach+0xd1/0x220 [ 80.083022][ T6504] bind_store+0xf4/0x190 [ 80.083038][ T6504] ? __pfx_bind_store+0x10/0x10 [ 80.083052][ T6504] drv_attr_store+0x74/0xb0 [ 80.083065][ T6504] ? __pfx_drv_attr_store+0x10/0x10 [ 80.083079][ T6504] sysfs_kf_write+0xf2/0x150 [ 80.083099][ T6504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 80.083113][ T6504] ? __pfx_sysfs_kf_write+0x10/0x10 [ 80.083130][ T6504] vfs_write+0x6ac/0x1050 [ 80.083143][ T6504] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 80.083158][ T6504] ? __pfx_vfs_write+0x10/0x10 [ 80.083167][ T6504] ? find_held_lock+0x2b/0x80 [ 80.083189][ T6504] ksys_write+0x12a/0x250 [ 80.083199][ T6504] ? __pfx_ksys_write+0x10/0x10 [ 80.083214][ T6504] __do_fast_syscall_32+0xe7/0x970 [ 80.083232][ T6504] do_fast_syscall_32+0x32/0x70 [ 80.083248][ T6504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.083262][ T6504] RIP: 0023:0xf7f62fec [ 80.083278][ T6504] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 80.083290][ T6504] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 80.083303][ T6504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 80.083311][ T6504] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 80.083319][ T6504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.083327][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.083334][ T6504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.083349][ T6504] [ 80.083354][ T6504] ---[ end trace ]--- [ 80.174950][ T6504] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 80.177105][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 80.179854][ T6504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.182840][ T6504] Call Trace: [ 80.183914][ T6504] [ 80.184972][ T6504] dump_stack_lvl+0x100/0x190 [ 80.186405][ T6504] vpanic+0x552/0x970 [ 80.187669][ T6504] ? __pfx_vpanic+0x10/0x10 [ 80.189060][ T6504] panic+0xd1/0xe0 [ 80.190192][ T6504] ? __pfx_panic+0x10/0x10 [ 80.191575][ T6504] check_panic_on_warn.cold+0x19/0x34 [ 80.193205][ T6504] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 80.195135][ T6504] e100_eeprom_load.cold+0x55/0x9e [ 80.196735][ T6504] ? dma_alloc_attrs+0x1cd/0x3a0 [ 80.198483][ T6504] ? __pfx_e100_eeprom_load+0x10/0x10 [ 80.200139][ T6504] ? lockdep_init_map_type+0x5c/0x250 [ 80.201833][ T6504] e100_probe+0xd07/0x1ab0 [ 80.203267][ T6504] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.205102][ T6504] ? __pfx_e100_probe+0x10/0x10 [ 80.206644][ T6504] local_pci_probe+0xdd/0x1b0 [ 80.208136][ T6504] pci_call_probe+0x176/0x800 [ 80.209627][ T6504] ? __pfx_pci_call_probe+0x10/0x10 [ 80.211273][ T6504] ? find_held_lock+0x2b/0x80 [ 80.212776][ T6504] ? pci_match_device+0x450/0x5f0 [ 80.214374][ T6504] ? pci_match_device+0x450/0x5f0 [ 80.215906][ T6504] ? pci_match_id+0x34d/0x3f0 [ 80.217373][ T6504] ? pci_match_device+0xb4/0x5f0 [ 80.218934][ T6504] pci_device_probe+0x1cd/0x370 [ 80.220451][ T6504] ? __pfx_pci_device_probe+0x10/0x10 [ 80.222116][ T6504] really_probe+0x241/0xa60 [ 80.223543][ T6504] __driver_probe_device+0x20e/0x450 [ 80.225187][ T6504] device_driver_attach+0xd1/0x220 [ 80.226770][ T6504] bind_store+0xf4/0x190 [ 80.228088][ T6504] ? __pfx_bind_store+0x10/0x10 [ 80.229827][ T6504] drv_attr_store+0x74/0xb0 [ 80.231254][ T6504] ? __pfx_drv_attr_store+0x10/0x10 [ 80.232879][ T6504] sysfs_kf_write+0xf2/0x150 [ 80.234329][ T6504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 80.235982][ T6504] ? __pfx_sysfs_kf_write+0x10/0x10 [ 80.237616][ T6504] vfs_write+0x6ac/0x1050 [ 80.238968][ T6504] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 80.240781][ T6504] ? __pfx_vfs_write+0x10/0x10 [ 80.242289][ T6504] ? find_held_lock+0x2b/0x80 [ 80.243779][ T6504] ksys_write+0x12a/0x250 [ 80.245127][ T6504] ? __pfx_ksys_write+0x10/0x10 [ 80.246627][ T6504] __do_fast_syscall_32+0xe7/0x970 [ 80.248210][ T6504] do_fast_syscall_32+0x32/0x70 [ 80.249744][ T6504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.251690][ T6504] RIP: 0023:0xf7f62fec [ 80.252981][ T6504] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 80.255003][ T6504] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 80.257577][ T6504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 80.260005][ T6504] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 80.262445][ T6504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.265098][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.267523][ T6504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.269975][ T6504] [ 80.271577][ T6504] Kernel Offset: disabled [ 80.272962][ T6504] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:48:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90006937320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b6f7220 R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c290fbd CR3=000000004b98c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d2f2e01ffffffff fffffffff30801c0 8003000200019403 6020808080820001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffe70802c0 80030073667501ff fffffffffffffff7 080280800300746e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0280800201c08002 0180020a0144f400 6e75733d65707974 73667501ffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c69662f746e6d 2f2e01ffffffffff ffffffe908038080 0302c08002000800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000102080003c0 8002010000040806 06017ba641020803 c0800307fe040001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8408000380800201 c70800080446c000 656c69662f746e6d 2f2e01ffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffe908038080 0302c08002000800 0280800201c08002 0180020a0144f400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75733d65707974 73667501ffffffff ffffffffe70802c0 80030073667501ff ZMM25=b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e ZMM26=ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ZMM27=d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 info registers vcpu 1 CPU#1 RAX=000000000007e75f RBX=ffff88801c742540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c41b61e CR3=0000000070564000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff82857f4a RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ebe8000 RBP=ffffffff8ebe8000 RSP=ffffc90003cb7038 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000ff R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=c0ca054beb0e6e00 RIP=ffffffff81e55d28 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e41f3e300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056282af57000 CR3=00000000501f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000090 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c616b7a797301ff ffffffffffffffeb 0800033800000462 0000001a00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4180030180c80800 2a080040c0020100 0000080608015482 0400000400000010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001000000 80000000802a0840 c003018090080030 0800408002010000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060801548200 0000000000000000 00000c0000000b00 00000a0000000830 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0840800308808008 0001000000080604 0107de0008000002 040043dc0072656c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75733d65707974 73667501ffffffff ffffffffe70802c0 80030073667501ff ZMM25=b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e b100909eb100909e ZMM26=ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ec61425dec61425d ZMM27=d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 d7ab8e98d7ab8e98 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 a3020000a3020000 info registers vcpu 3 CPU#3 RAX=00000000000a3771 RBX=ffff88801c7fa540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a27 RDI=ffffffff8c400a80 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f423e880 CR3=000000005f5c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000