last executing test programs: 2.600083956s ago: executing program 2 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 2.292171886s ago: executing program 2 (id=41): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="644f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', 0xc, 0x3f0200) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x0, 0x400000) pwrite64(r2, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r2, &(0x7f0000000000)='Z\x00\x00', 0x3, 0x3f0008) pwrite64(r2, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r2, &(0x7f0000000000)="664f2ba9", 0x4, 0x3f0098) pwrite64(r2, &(0x7f0000000000)="010000000700000001000000", 0xc, 0x3f0200) pwrite64(r2, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x8000, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='md', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='0.90', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='7:0', 0x3) write(r6, &(0x7f0000000400)='7:1', 0x3) 2.192121001s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 1.86018805s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 1.597057977s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r4, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r5, &(0x7f0000000900), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 1.430982269s ago: executing program 0 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) 1.430469555s ago: executing program 0 (id=50): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="644f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', 0xc, 0x3f0200) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x0, 0x400000) pwrite64(r2, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r2, &(0x7f0000000000)='Z\x00\x00', 0x3, 0x3f0008) pwrite64(r2, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r2, &(0x7f0000000000)="664f2ba9", 0x4, 0x3f0098) pwrite64(r2, &(0x7f0000000000)="010000000700000001000000", 0xc, 0x3f0200) pwrite64(r2, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x8000, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='0.90', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='7:0', 0x3) write(r6, &(0x7f0000000400)='7:1', 0x3) 1.319806619s ago: executing program 3 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 1.319387096s ago: executing program 2 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 1.112346248s ago: executing program 0 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r5, &(0x7f0000000900), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 1.012126002s ago: executing program 2 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0x1d6b\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r3, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 1.011827108s ago: executing program 3 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") ioctl(r2, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000007001000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") 1.011611432s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x1000000}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00), 0x0) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) 918.221269ms ago: executing program 3 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 913.777137ms ago: executing program 1 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 839.046347ms ago: executing program 0 (id=59): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) 770.661003ms ago: executing program 0 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r4, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r5, &(0x7f0000000900), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 571.547756ms ago: executing program 1 (id=61): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x400000) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="644f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', 0xc, 0x3f0200) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x0, 0x400000) pwrite64(r2, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r2, &(0x7f0000000000)='Z\x00\x00', 0x3, 0x3f0008) pwrite64(r2, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r2, &(0x7f0000000000)="664f2ba9", 0x4, 0x3f0098) pwrite64(r2, &(0x7f0000000000)="010000000700000001000000", 0xc, 0x3f0200) pwrite64(r2, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x8000, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='md0', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000340)='0.90', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='7:0', 0x3) write(r6, &(0x7f0000000400)='7:1', 0x3) 486.43826ms ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 361.754439ms ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000900), 0x64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000980), 0x64) 162.057298ms ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 62.222267ms ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 449.704µs ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063727970745f64657600"/325) 0s ago: executing program 3 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x1000000}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) kernel console output (not intermixed with test programs): [ 37.895519][ T42] audit: type=1400 audit(1785853032.846:114): avc: denied { rlimitinh } for pid=5644 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.902079][ T42] audit: type=1400 audit(1785853032.846:115): avc: denied { siginh } for pid=5644 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.516893][ T42] audit: type=1400 audit(1785853033.486:116): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.577563][ T42] audit: type=1400 audit(1785853033.546:117): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.659748][ T42] audit: type=1400 audit(1785853033.626:118): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.698015][ T42] audit: type=1400 audit(1785853033.666:119): avc: denied { write } for pid=5658 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.760844][ T42] audit: type=1400 audit(1785853033.726:120): avc: denied { write } for pid=5661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:28055' (ED25519) to the list of known hosts. [ 42.058307][ T5694] cgroup: Unknown subsys name 'net' [ 42.209796][ T5694] cgroup: Unknown subsys name 'cpuset' [ 42.215165][ T5694] cgroup: Unknown subsys name 'rlimit' [ 42.435939][ T5729] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.134336][ T5694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.298953][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.298966][ T42] audit: type=1400 audit(1785853041.266:158): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.459011][ T42] audit: type=1400 audit(1785853041.426:159): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.465738][ T42] audit: type=1400 audit(1785853041.426:160): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.472710][ T42] audit: type=1400 audit(1785853041.426:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.480203][ T42] audit: type=1400 audit(1785853041.436:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[7431]" dev="sockfs" ino=7431 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.492031][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.495359][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.499085][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.503234][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.503241][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.505874][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.509425][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.511246][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.512668][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.515288][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.517613][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.519086][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.519519][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.520809][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.523023][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.525169][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.532365][ T42] audit: type=1400 audit(1785853041.496:163): avc: denied { read } for pid=5741 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.532703][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.536378][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.545630][ T42] audit: type=1400 audit(1785853041.496:164): avc: denied { open } for pid=5741 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.549737][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.552836][ T42] audit: type=1400 audit(1785853041.496:165): avc: denied { mounton } for pid=5741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.556392][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.561683][ T42] audit: type=1400 audit(1785853041.506:166): avc: denied { module_request } for pid=5741 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.564498][ T42] audit: type=1400 audit(1785853041.526:167): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.069247][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.072337][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.074867][ T5738] bridge_slave_0: entered allmulticast mode [ 47.077845][ T5738] bridge_slave_0: entered promiscuous mode [ 47.082438][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.084855][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.087249][ T5738] bridge_slave_1: entered allmulticast mode [ 47.090017][ T5738] bridge_slave_1: entered promiscuous mode [ 47.096364][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.098632][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.100782][ T5741] bridge_slave_0: entered allmulticast mode [ 47.103339][ T5741] bridge_slave_0: entered promiscuous mode [ 47.130962][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.133901][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.136292][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.138590][ T5741] bridge_slave_1: entered allmulticast mode [ 47.141179][ T5741] bridge_slave_1: entered promiscuous mode [ 47.166977][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.192712][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.206610][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.209047][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.211343][ T5739] bridge_slave_0: entered allmulticast mode [ 47.214049][ T5739] bridge_slave_0: entered promiscuous mode [ 47.217826][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.220105][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.222304][ T5739] bridge_slave_1: entered allmulticast mode [ 47.225276][ T5739] bridge_slave_1: entered promiscuous mode [ 47.228782][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.247474][ T5738] team0: Port device team_slave_0 added [ 47.264934][ T5741] team0: Port device team_slave_0 added [ 47.272742][ T5738] team0: Port device team_slave_1 added [ 47.283034][ T5741] team0: Port device team_slave_1 added [ 47.309737][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.314942][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.336084][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.338910][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.341324][ T5750] bridge_slave_0: entered allmulticast mode [ 47.343867][ T5750] bridge_slave_0: entered promiscuous mode [ 47.353335][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.355650][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.363560][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.368593][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.371271][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.379156][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.383700][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.386113][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.388482][ T5750] bridge_slave_1: entered allmulticast mode [ 47.391250][ T5750] bridge_slave_1: entered promiscuous mode [ 47.401132][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.403139][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.410640][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.422967][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.425846][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.435580][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.448574][ T5739] team0: Port device team_slave_0 added [ 47.456137][ T5739] team0: Port device team_slave_1 added [ 47.486692][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.488821][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.496846][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.502596][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.505480][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.515154][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.519944][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.533036][ T5741] hsr_slave_0: entered promiscuous mode [ 47.535610][ T5741] hsr_slave_1: entered promiscuous mode [ 47.544231][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.566238][ T5738] hsr_slave_0: entered promiscuous mode [ 47.568576][ T5738] hsr_slave_1: entered promiscuous mode [ 47.571405][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.573228][ T5738] Cannot create hsr debugfs directory [ 47.612437][ T5750] team0: Port device team_slave_0 added [ 47.620601][ T5750] team0: Port device team_slave_1 added [ 47.635319][ T5739] hsr_slave_0: entered promiscuous mode [ 47.637568][ T5739] hsr_slave_1: entered promiscuous mode [ 47.639618][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.641427][ T5739] Cannot create hsr debugfs directory [ 47.669591][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.672257][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.682465][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.714604][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.717253][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.727194][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.830641][ T5750] hsr_slave_0: entered promiscuous mode [ 47.833989][ T5750] hsr_slave_1: entered promiscuous mode [ 47.836265][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 47.838059][ T5750] Cannot create hsr debugfs directory [ 47.967560][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.976202][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.986939][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.990809][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.993932][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.998790][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.001524][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.006693][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.044732][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.049184][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.051852][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.056661][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.060612][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.064242][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.067093][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.070971][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.122514][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.127366][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.130133][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.134095][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.138065][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.141884][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.145441][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.149404][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.234375][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.239252][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.241809][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.245620][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.249007][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.253051][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.256037][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.259544][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.264059][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.306353][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.312827][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.323492][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.326369][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.347346][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.349660][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.362803][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.371015][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.373426][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.382020][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.385890][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.388496][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.441582][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.458352][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.460767][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.474172][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.476545][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.485311][ T5741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.519315][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.542224][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.567931][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.570261][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.580639][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.582993][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.617351][ T5751] Bluetooth: hci2: command tx timeout [ 48.617966][ T5744] Bluetooth: hci3: command tx timeout [ 48.617974][ T64] Bluetooth: hci1: command tx timeout [ 48.625170][ T5744] Bluetooth: hci0: command tx timeout [ 48.718986][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.729493][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.758781][ T5738] veth0_vlan: entered promiscuous mode [ 48.766153][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.777604][ T5738] veth1_vlan: entered promiscuous mode [ 48.794246][ T5741] veth0_vlan: entered promiscuous mode [ 48.806744][ T5741] veth1_vlan: entered promiscuous mode [ 48.821962][ T5739] veth0_vlan: entered promiscuous mode [ 48.833893][ T5738] veth0_macvtap: entered promiscuous mode [ 48.837098][ T5739] veth1_vlan: entered promiscuous mode [ 48.848382][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.851369][ T5738] veth1_macvtap: entered promiscuous mode [ 48.860969][ T5741] veth0_macvtap: entered promiscuous mode [ 48.869058][ T5741] veth1_macvtap: entered promiscuous mode [ 48.884536][ T5739] veth0_macvtap: entered promiscuous mode [ 48.889439][ T5739] veth1_macvtap: entered promiscuous mode [ 48.895530][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.902555][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.914244][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.919919][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.944516][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.969802][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.981509][ T5750] veth0_vlan: entered promiscuous mode [ 49.010235][ T5750] veth1_vlan: entered promiscuous mode [ 49.044831][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.050702][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.053541][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.067113][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.069669][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.099884][ T5750] veth0_macvtap: entered promiscuous mode [ 49.109504][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.109651][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.109885][ T5750] veth1_macvtap: entered promiscuous mode [ 49.112448][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.116161][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.132694][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.135740][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.148811][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.152588][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.155553][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.158268][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.170359][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.196790][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201828][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.238358][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.241980][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.293052][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.296195][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.305190][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.308407][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.325309][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.332841][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.333771][ T5894] nvmet: adding nsid 1 to subsystem testnqn [ 49.357466][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.366087][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.386663][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.391918][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.395037][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.397833][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.399688][ T60] nvmet: connect request for invalid subsystem testnqn! [ 49.400880][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.404115][ T5894] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 49.424183][ T5903] se_device not configured yet, cannot port link [ 49.426415][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.426440][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.432011][ T5904] nvmet: disable ns before setting buffered_io value. [ 49.624856][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.641087][ T5909] se_device not configured yet, cannot port link [ 49.671059][ T5911] nvmet: disable ns before setting buffered_io value. [ 49.675319][ T5911] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 49.700681][ T36] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 49.709928][ T5911] nvme nvme0: creating 4 I/O queues. [ 49.717804][ T5911] nvme nvme0: new ctrl: "testnqn" [ 49.776537][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 49.779082][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 49.781967][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.888761][ T5918] se_device not configured yet, cannot port link [ 49.960910][ T5921] se_device not configured yet, cannot port link [ 50.282752][ T5924] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.311617][ T48] nvme nvme0: Removing ctrl: NQN "testnqn" [ 50.320004][ T36] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 50.327738][ T5925] nvme nvme1: creating 4 I/O queues. [ 50.336987][ T5925] nvme nvme1: new ctrl: "testnqn" [ 50.379619][ T5928] nvmet: disable ns before setting buffered_io value. [ 50.384018][ T5928] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.414318][ T1169] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 50.421471][ T5928] nvme nvme2: creating 4 I/O queues. [ 50.428591][ T5928] nvme nvme2: new ctrl: "testnqn" [ 50.526049][ T5931] loop0: detected capacity change from 0 to 8192 [ 50.563515][ T5931] loop1: detected capacity change from 0 to 8192 [ 50.644316][ T5936] nvmet: disable ns before setting buffered_io value. [ 50.652243][ T5936] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.695388][ T5744] Bluetooth: hci2: command tx timeout [ 50.695625][ T5751] Bluetooth: hci1: command tx timeout [ 50.695665][ T5097] Bluetooth: hci3: command tx timeout [ 50.697780][ T64] Bluetooth: hci0: command tx timeout [ 50.748830][ T5943] nvmet: disable ns before setting buffered_io value. [ 50.771795][ T48] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 50.777844][ T5946] se_device not configured yet, cannot port link [ 50.779141][ T5943] nvme nvme3: creating 4 I/O queues. [ 50.785551][ T5943] nvme nvme3: new ctrl: "testnqn" [ 50.792565][ T1169] nvme nvme1: rescanning namespaces. [ 50.794961][ T48] nvme nvme2: rescanning namespaces. [ 50.829725][ T60] nvme nvme3: rescanning namespaces. [ 50.833664][ T5948] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.859893][ T36] nvme nvme1: Removing ctrl: NQN "testnqn" [ 50.860760][ T1169] nvme nvme2: Removing ctrl: NQN "testnqn" [ 50.860806][ T1166] nvme nvme3: Removing ctrl: NQN "testnqn" [ 50.869638][ T225] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 50.876505][ T5951] nvme nvme4: creating 4 I/O queues. [ 50.883206][ T5951] nvme nvme4: new ctrl: "testnqn" [ 50.916449][ T5954] se_device not configured yet, cannot port link [ 50.965840][ T5956] loop1: detected capacity change from 0 to 8192 [ 51.024301][ T5961] nvmet: disable ns before setting buffered_io value. [ 51.029634][ T5960] nvmet: disable ns before setting buffered_io value. [ 51.032870][ T5961] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.033462][ T5960] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.065680][ T60] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 51.071844][ T5960] nvme nvme5: creating 4 I/O queues. [ 51.077018][ T5960] nvme nvme5: new ctrl: "testnqn" [ 51.322676][ T42] kauditd_printk_skb: 189 callbacks suppressed [ 51.322695][ T42] audit: type=1400 audit(1785853046.286:357): avc: denied { write } for pid=5968 comm="syz.2.26" name="lun_0" dev="configfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.323202][ T5969] se_device not configured yet, cannot port link [ 51.325559][ T42] audit: type=1400 audit(1785853046.286:358): avc: denied { write } for pid=5968 comm="syz.2.26" name="lun_0" dev="configfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.333473][ T5971] se_device not configured yet, cannot port link [ 51.341038][ T42] audit: type=1400 audit(1785853046.296:359): avc: denied { write } for pid=5970 comm="syz.0.27" name="lun_0" dev="configfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.353555][ T42] audit: type=1400 audit(1785853046.296:360): avc: denied { write } for pid=5970 comm="syz.0.27" name="lun_0" dev="configfs" ino=9446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.362225][ T42] audit: type=1400 audit(1785853046.306:361): avc: denied { write } for pid=5968 comm="syz.2.26" name="c.1" dev="configfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.369099][ T42] audit: type=1400 audit(1785853046.306:362): avc: denied { write } for pid=5968 comm="syz.2.26" name="c.1" dev="configfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.375837][ T42] audit: type=1400 audit(1785853046.316:363): avc: denied { write } for pid=5970 comm="syz.0.27" name="c.1" dev="configfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.382956][ T42] audit: type=1400 audit(1785853046.316:364): avc: denied { write } for pid=5970 comm="syz.0.27" name="c.1" dev="configfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.646970][ T42] audit: type=1800 audit(1785853046.616:365): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.28" name="attr_allow_any_host" dev="configfs" ino=10604 res=0 errno=0 [ 51.649395][ T5975] nvmet: disable ns before setting buffered_io value. [ 51.653969][ T42] audit: type=1800 audit(1785853046.616:366): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.28" name="device_path" dev="configfs" ino=10605 res=0 errno=0 [ 51.660125][ T5975] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.767628][ T5977] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.793327][ T60] nvme nvme4: Removing ctrl: NQN "testnqn" [ 51.793668][ T1166] nvme nvme5: Removing ctrl: NQN "testnqn" [ 51.797541][ T36] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 51.800015][ T5978] nvme nvme1: creating 4 I/O queues. [ 51.807131][ T5978] nvme nvme1: new ctrl: "testnqn" [ 51.892483][ T5981] loop1: detected capacity change from 0 to 8192 [ 51.941382][ T5985] nvmet: disable ns before setting buffered_io value. [ 51.946802][ T5985] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.957223][ T5987] nvmet: disable ns before setting buffered_io value. [ 51.985394][ T80] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 51.991096][ T5987] nvme nvme2: creating 4 I/O queues. [ 51.995571][ T5987] nvme nvme2: new ctrl: "testnqn" [ 52.185374][ T5991] nvmet: disable ns before setting buffered_io value. [ 52.189932][ T5991] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 52.220546][ T5995] se_device not configured yet, cannot port link [ 52.246614][ T218] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 52.251196][ T5998] se_device not configured yet, cannot port link [ 52.254857][ T5991] nvme nvme3: creating 4 I/O queues. [ 52.261354][ T6001] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 52.266431][ T5991] nvme nvme3: new ctrl: "testnqn" [ 52.284245][ T138] nvme nvme1: Removing ctrl: NQN "testnqn" [ 52.284281][ T1166] nvme nvme2: Removing ctrl: NQN "testnqn" [ 52.284306][ T80] nvme nvme3: Removing ctrl: NQN "testnqn" [ 52.297039][ T48] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 52.303598][ T6002] nvme nvme4: creating 4 I/O queues. [ 52.309014][ T6002] nvme nvme4: new ctrl: "testnqn" [ 52.374050][ T6009] nvmet: disable ns before setting buffered_io value. [ 52.377026][ T6009] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 52.400231][ T36] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 52.408670][ T6009] nvme nvme5: creating 4 I/O queues. [ 52.412766][ T6009] nvme nvme5: new ctrl: "testnqn" [ 52.539014][ T6013] loop1: detected capacity change from 0 to 8192 [ 52.596957][ T6015] se_device not configured yet, cannot port link [ 52.669437][ T6018] nvmet: disable ns before setting buffered_io value. [ 52.672523][ T6018] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 52.774827][ T5097] Bluetooth: hci1: command tx timeout [ 52.774862][ T64] Bluetooth: hci2: command tx timeout [ 52.774907][ T5751] Bluetooth: hci3: command tx timeout [ 52.774964][ T5744] Bluetooth: hci0: command tx timeout [ 52.951463][ T6023] se_device not configured yet, cannot port link [ 53.066313][ T6026] nvmet: disable ns before setting buffered_io value. [ 53.069908][ T6026] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.097942][ T1166] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.104219][ T6029] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.104529][ T6026] nvme nvme1: creating 4 I/O queues. [ 53.111072][ T6026] nvme nvme1: new ctrl: "testnqn" [ 53.129593][ T138] nvme nvme4: Removing ctrl: NQN "testnqn" [ 53.130847][ T48] nvme nvme5: Removing ctrl: NQN "testnqn" [ 53.133366][ T60] nvme nvme1: Removing ctrl: NQN "testnqn" [ 53.133536][ T1169] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.140629][ T6030] nvme nvme2: creating 4 I/O queues. [ 53.150567][ T6030] nvme nvme2: new ctrl: "testnqn" [ 53.179039][ T6033] nvmet: disable ns before setting buffered_io value. [ 53.203989][ T1166] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.212654][ T6033] nvme nvme3: creating 4 I/O queues. [ 53.219224][ T6033] nvme nvme3: new ctrl: "testnqn" [ 53.440415][ T6039] loop1: detected capacity change from 0 to 8192 [ 53.460883][ T6041] nvmet: disable ns before setting buffered_io value. [ 53.464222][ T6041] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.475929][ T6043] nvmet: disable ns before setting buffered_io value. [ 53.479648][ T6043] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.494935][ T6039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.508916][ T218] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.527375][ T6041] nvme nvme5: creating 4 I/O queues. [ 53.536623][ T6041] nvme nvme5: new ctrl: "testnqn" [ 53.564621][ T48] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.570493][ T6043] nvme nvme1: creating 4 I/O queues. [ 53.575327][ T6043] nvme nvme1: new ctrl: "testnqn" [ 53.687212][ T6050] nvmet: disable ns before setting buffered_io value. [ 53.690734][ T6050] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.763935][ T6053] se_device not configured yet, cannot port link [ 53.789458][ T6055] null_blk: nullb1: using native zone append [ 53.819128][ T6059] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.829539][ T6055] null_blk: disk nullb1 created [ 53.840782][ T1174] nvme nvme2: Removing ctrl: NQN "testnqn" [ 53.842304][ T1166] nvme nvme5: Removing ctrl: NQN "testnqn" [ 53.842640][ T60] nvme nvme1: Removing ctrl: NQN "testnqn" [ 53.844466][ T218] nvme nvme3: Removing ctrl: NQN "testnqn" [ 53.856534][ T36] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.857690][ T6055] device-mapper: table: 248:0: zero-length target [ 53.862030][ T6061] nvme nvme4: creating 4 I/O queues. [ 53.863941][ T6055] device-mapper: ioctl: error adding target to table [ 53.869860][ T6061] nvme nvme4: new ctrl: "testnqn" [ 53.917817][ T6065] nvmet: disable ns before setting buffered_io value. [ 53.921411][ T6065] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 53.928411][ T6067] se_device not configured yet, cannot port link [ 53.946960][ T138] nvmet: Created nvm controller 6 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 53.961495][ T6065] nvme nvme6: creating 4 I/O queues. [ 53.972029][ T6065] nvme nvme6: new ctrl: "testnqn" [ 53.999779][ T6073] nvmet: disable ns before setting buffered_io value. [ 54.023001][ T36] nvmet: Created nvm controller 7 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 54.036197][ T6073] nvme nvme7: creating 4 I/O queues. [ 54.043261][ T6073] nvme nvme7: new ctrl: "testnqn" [ 54.270015][ T6078] loop1: detected capacity change from 0 to 8192 [ 54.284042][ T6078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.309427][ T6080] se_device not configured yet, cannot port link [ 54.335573][ T6078] md: could not open device unknown-block(7,0). [ 54.440882][ T6083] nvmet: disable ns before setting buffered_io value. [ 54.444576][ T6083] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 54.470922][ T1174] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 54.476862][ T6083] nvme nvme1: creating 4 I/O queues. [ 54.482349][ T6083] nvme nvme1: new ctrl: "testnqn" [ 54.624211][ T6086] se_device not configured yet, cannot port link [ 54.727917][ T6089] nvmet: disable ns before setting buffered_io value. [ 54.732615][ T6089] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 54.758397][ T218] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 54.764430][ T6089] nvme nvme2: creating 4 I/O queues. [ 54.772356][ T6089] nvme nvme2: new ctrl: "testnqn" [ 54.818754][ T6095] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 54.843980][ T218] nvme nvme4: Removing ctrl: NQN "testnqn" [ 54.844023][ T48] nvme nvme7: Removing ctrl: NQN "testnqn" [ 54.844838][ T1174] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:511aef7d-9747-410d-a672-569b18e9fe1b. [ 54.844981][ T1174] nvme nvme1: Removing ctrl: NQN "testnqn" [ 54.845254][ T60] nvme nvme6: Removing ctrl: NQN "testnqn" [ 54.846440][ T80] nvme nvme2: Removing ctrl: NQN "testnqn" [ 54.851060][ T6096] nvme nvme3: creating 4 I/O queues. [ 54.865156][ T64] Bluetooth: hci2: command tx timeout [ 54.865187][ T5097] Bluetooth: hci0: command tx timeout [ 54.865229][ T5751] Bluetooth: hci3: command tx timeout [ 54.865256][ T5744] Bluetooth: hci1: command tx timeout [ 54.870789][ T1166] ================================================================== [ 54.874976][ T1166] BUG: KASAN: slab-out-of-bounds in nvmet_install_queue+0x522/0x590 [ 54.878033][ T1166] Read of size 8 at addr ffff888058219a70 by task kworker/u33:8/1166 [ 54.882837][ T1166] [ 54.883836][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 54.883858][ T1166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.883877][ T1166] Workqueue: nvmet-wq nvme_loop_execute_work [ 54.883910][ T1166] Call Trace: [ 54.883925][ T1166] [ 54.883933][ T1166] dump_stack_lvl+0x100/0x190 [ 54.883981][ T1166] print_report+0x13d/0x4b0 [ 54.884006][ T1166] ? __virt_addr_valid+0x239/0x430 [ 54.884027][ T1166] ? nvmet_install_queue+0x522/0x590 [ 54.884045][ T1166] kasan_report+0xdf/0x1c0 [ 54.884068][ T1166] ? nvmet_install_queue+0x522/0x590 [ 54.884088][ T1166] nvmet_install_queue+0x522/0x590 [ 54.884109][ T1166] nvmet_execute_io_connect+0x294/0x490 [ 54.884129][ T1166] process_one_work+0xa23/0x1940 [ 54.884151][ T1166] ? __pfx_process_one_work+0x10/0x10 [ 54.884171][ T1166] ? __pfx_nvme_loop_execute_work+0x10/0x10 [ 54.884189][ T1166] worker_thread+0x5ef/0xe50 [ 54.884208][ T1166] ? kthread+0x13a/0x450 [ 54.884221][ T1166] ? __pfx_worker_thread+0x10/0x10 [ 54.884236][ T1166] kthread+0x370/0x450 [ 54.884249][ T1166] ? __pfx_kthread+0x10/0x10 [ 54.884263][ T1166] ret_from_fork+0x72b/0xd50 [ 54.884284][ T1166] ? __pfx_ret_from_fork+0x10/0x10 [ 54.884306][ T1166] ? __switch_to+0x800/0x10f0 [ 54.884321][ T1166] ? __pfx_kthread+0x10/0x10 [ 54.884335][ T1166] ret_from_fork_asm+0x1a/0x30 [ 54.884358][ T1166] [ 54.884363][ T1166] [ 54.940591][ T1166] Allocated by task 1174: [ 54.942336][ T1166] kasan_save_stack+0x30/0x50 [ 54.944221][ T1166] kasan_save_track+0x14/0x30 [ 54.945682][ T1166] __kasan_kmalloc+0xaa/0xb0 [ 54.947107][ T1166] __kmalloc_noprof+0x322/0x820 [ 54.948618][ T1166] nvmet_alloc_ctrl+0x9c2/0x1560 [ 54.950160][ T1166] nvmet_execute_admin_connect+0x3c3/0x5b0 [ 54.951933][ T1166] process_one_work+0xa23/0x1940 [ 54.953447][ T1166] worker_thread+0x5ef/0xe50 [ 54.954837][ T1166] kthread+0x370/0x450 [ 54.956113][ T1166] ret_from_fork+0x72b/0xd50 [ 54.957547][ T1166] ret_from_fork_asm+0x1a/0x30 [ 54.958957][ T1166] [ 54.959691][ T1166] The buggy address belongs to the object at ffff888058219a60 [ 54.959691][ T1166] which belongs to the cache kmalloc-16 of size 16 [ 54.963717][ T1166] The buggy address is located 0 bytes to the right of [ 54.963717][ T1166] allocated 16-byte region [ffff888058219a60, ffff888058219a70) [ 54.967911][ T1166] [ 54.968663][ T1166] The buggy address belongs to the physical page: [ 54.970579][ T1166] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058219f80 pfn:0x58219 [ 54.973536][ T1166] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 54.975872][ T1166] page_type: f5(slab) [ 54.977113][ T1166] raw: 00fff00000000200 ffff88801bc42640 ffffea000169a050 ffffea00015fa390 [ 54.979638][ T1166] raw: ffff888058219f80 000000080080007f 00000000f5000000 0000000000000000 [ 54.982250][ T1166] page dumped because: kasan: bad access detected [ 54.984164][ T1166] page_owner tracks the page as allocated [ 54.985960][ T1166] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5739, tgid 5739 (syz-executor), ts 50610714726, free_ts 49976327990 [ 54.992055][ T1166] register_dummy_stack+0x74/0xb0 [ 54.993651][ T1166] init_page_owner+0x42/0xa10 [ 54.995155][ T1166] page_ext_init+0x71d/0x780 [ 54.996639][ T1166] mm_core_init+0x229/0x270 [ 54.998073][ T1166] page last free pid 33 tgid 33 stack trace: [ 54.999955][ T1166] __free_frozen_pages+0x79f/0x1090 [ 55.001527][ T1166] tlb_remove_table_rcu+0x2cf/0x380 [ 55.003145][ T1166] rcu_core+0x5a2/0x10d0 [ 55.004510][ T1166] handle_softirqs+0x1ea/0x9b0 [ 55.005970][ T1166] run_ksoftirqd+0x38/0x60 [ 55.007377][ T1166] smpboot_thread_fn+0x3d3/0xaa0 [ 55.008857][ T1166] kthread+0x370/0x450 [ 55.010150][ T1166] ret_from_fork+0x72b/0xd50 [ 55.011561][ T1166] ret_from_fork_asm+0x1a/0x30 [ 55.013001][ T1166] [ 55.013729][ T1166] Memory state around the buggy address: [ 55.015426][ T1166] ffff888058219900: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 55.017817][ T1166] ffff888058219980: fa fb fc fc fa fb fc fc fa fb fc fc 00 02 fc fc [ 55.020204][ T1166] >ffff888058219a00: 00 00 fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 55.022554][ T1166] ^ [ 55.024840][ T1166] ffff888058219a80: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 55.027246][ T1166] ffff888058219b00: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 55.029635][ T1166] ================================================================== [ 55.033270][ T1166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.035489][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 55.038404][ T1166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.041462][ T1166] Workqueue: nvmet-wq nvme_loop_execute_work [ 55.043287][ T1166] Call Trace: [ 55.044303][ T1166] [ 55.045222][ T1166] dump_stack_lvl+0x100/0x190 [ 55.046627][ T1166] vpanic+0x552/0x970 [ 55.047879][ T1166] ? __pfx_vpanic+0x10/0x10 [ 55.049269][ T1166] ? mark_held_locks+0x40/0x70 [ 55.050679][ T1166] ? nvmet_install_queue+0x522/0x590 [ 55.052280][ T1166] panic+0xd1/0xe0 [ 55.053403][ T1166] ? __pfx_panic+0x10/0x10 [ 55.054739][ T1166] ? nvmet_install_queue+0x522/0x590 [ 55.056319][ T1166] ? preempt_schedule_common+0x42/0xc0 [ 55.057959][ T1166] ? check_panic_on_warn+0x1f/0x90 [ 55.059503][ T1166] check_panic_on_warn.cold+0x19/0x34 [ 55.061118][ T1166] end_report.part.0+0x3a/0x90 [ 55.062572][ T1166] kasan_report.cold+0xe/0x18 [ 55.063998][ T1166] ? nvmet_install_queue+0x522/0x590 [ 55.065594][ T1166] nvmet_install_queue+0x522/0x590 [ 55.067244][ T1166] nvmet_execute_io_connect+0x294/0x490 [ 55.068902][ T1166] process_one_work+0xa23/0x1940 [ 55.070383][ T1166] ? __pfx_process_one_work+0x10/0x10 [ 55.071960][ T1166] ? __pfx_nvme_loop_execute_work+0x10/0x10 [ 55.073769][ T1166] worker_thread+0x5ef/0xe50 [ 55.075213][ T1166] ? kthread+0x13a/0x450 [ 55.076532][ T1166] ? __pfx_worker_thread+0x10/0x10 [ 55.078144][ T1166] kthread+0x370/0x450 [ 55.079361][ T1166] ? __pfx_kthread+0x10/0x10 [ 55.080759][ T1166] ret_from_fork+0x72b/0xd50 [ 55.082137][ T1166] ? __pfx_ret_from_fork+0x10/0x10 [ 55.083696][ T1166] ? __switch_to+0x800/0x10f0 [ 55.085210][ T1166] ? __pfx_kthread+0x10/0x10 [ 55.086645][ T1166] ret_from_fork_asm+0x1a/0x30 [ 55.088163][ T1166] [ 55.089647][ T1166] Kernel Offset: disabled [ 55.090948][ T1166] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:17:30 Registers: info registers vcpu 0 CPU#0 RAX=ffff888031a0a540 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8bbe25ea RDI=fffffbfff372e156 RBP=ffffffff9b970ab0 RSP=ffffc90003ecfa90 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff912286d7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5f5a5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556e44d500 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001020 CR3=000000003cd44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e716e74736574 3d6e716e2c706f6f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6b604076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6b604076 00007fff6b60407c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b18355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b183562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b1835793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b1835621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006570797472745f 726464612f312f73 74726f702f74656d 766e2f6769666e6f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b19f25f8 00007fb5b19f25c8 00007fb5b19f2600 00007fb5b19f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a30275 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc900063b75d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3238353038386552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b6fe20b R15=ffffffff85a30210 RIP=ffffffff85a3029f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560356f9f274 CR3=000000003cdd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cc160081 Opmask01=0000000000000001 Opmask02=00000000ffff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000019000017d2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000019 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560356f7b0f0 0000560356ffc570 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560356f7f9d0 0000560356f7fa80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a6425006469 702e73257325002f 6e75722f7261762f 0036353261687300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a410000414c 550b56005600000a 4b50570a5744530a 00131017444d5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00060014 28e677c581aa9ecb 00000000000080fe 0001001400000007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000a7500000a75 ffffffffffffffff 0006001488c8a614 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c90dbca500000000 000080fe00010014 00000008fd80400a 97c67f806a71f46e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000a6b00000a6b ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006001428e677c5 81aa9ecb00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640a2065200a6961 2020352020206420 2020610a00632000 3520366564203220 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63c800 RCX=ffffffff81fdee14 RDX=ffff88801eec0000 RSI=ffffffff81fdedee RDI=ffff88801eec0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733c60 R12=0000000000000003 R13=ffffed100d4c7901 R14=ffff88806a63c808 R15=0000000000000001 RIP=ffffffff810014b0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001000 CR3=0000000058ef6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545b75d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeccabd006 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeccabd006 00007ffeccabd00c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545aa355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545aa3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545aa35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545aa35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545abf2600 00007f545abf25e0 00007f545abf25e8 00007f545abf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f545abf25f8 00007f545abf25c8 00007f545abf2600 00007f545abf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000059699 RBX=ffff88801eef2540 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a8186 RDI=ffffffff8c402680 RBP=ffffed1003dde4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe32976f52 CR3=000000005a1c9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c83b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcea814c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcea814c6 00007fffcea814cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82e355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82e3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82e35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82e35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82ff2600 00007f2c82ff25e0 00007f2c82ff25e8 00007f2c82ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c82ff25f8 00007f2c82ff25c8 00007f2c82ff2600 00007f2c82ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000