last executing test programs: 12.903477886s ago: executing program 4 (id=9): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='rdma\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='ipv4\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='172.20.20.25\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000000580)='4421\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.25,trsvcid=4421\x00', 0x3c) 12.207330885s ago: executing program 1 (id=11): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000200)="01020304", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0)="01020304", 0x4, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000200)="01020304", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r2}, &(0x7f00000000c0)=""/256, 0x100, 0x0) 11.280950217s ago: executing program 1 (id=14): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc17691900010102030109022e0001010080fa0904000004ffffff0007058102000200070501020002000705820100020107050601000201"], 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 10.827965604s ago: executing program 0 (id=15): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101401111222200000102030109023e0002010080fa0904000003e00101000705810200020107050202000200070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000140)='\x00\x00\x00\x00') bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000200)="01000000") bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r1, &(0x7f0000000280)="f100040000", 0x5) 10.605828445s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/QEMU0002:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/100, 0x64) 9.748867532s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem', 0x3) 9.029945792s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x3, 0x0) write(r0, &(0x7f0000000280)='2049\n\x00', 0x5) 8.367989291s ago: executing program 3 (id=20): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000181058040550000000000001090224000100000000090400000903000000092100000001221600090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x8, "04"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x2, "ff00"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, '\a'}, @main=@item_012={0x1, 0x0, 0xb, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 8.126280128s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/vkms/mydev/crtcs/crtc0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/vkms/mydev/encoders/enc0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/vkms/mydev/connectors/conn0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 7.668914684s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)="001122", 0x3) 7.314916333s ago: executing program 2 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="3000000010000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="3000000011000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="3000000012000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="3000000013000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="3000000014000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3000000015000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="3000000016000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="3000000017000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="3000000018000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="3000000019000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="300000001a000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="300000001b000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="300000001c000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)="300000001d000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="300000001e000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="300000001f000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001080)="3000000020000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000", 0x30}], 0x1}, 0x0) nanosleep(&(0x7f0000002000)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8983, &(0x7f0000003000)="00000000657468310000000000000000000000000000000000000000000000000300"/58) ioctl(r1, 0x8983, &(0x7f0000003040)="01000000657468312e3300"/58) 6.447513739s ago: executing program 1 (id=24): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000080)="050000000100000000040000000000000100"/32}) 6.14731588s ago: executing program 0 (id=25): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) (async) 6.040696217s ago: executing program 4 (id=26): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1 1\x00', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8}}, 0x14}}, 0x0) 5.897325764s ago: executing program 2 (id=27): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c43000101020301010902190001010080fa0904000001ffffff0007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000110)={0x84, &(0x7f0000000210)={0x40, 0x2, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000310), 0x0, 0x2) 4.99624646s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem\n\x00', 0x6) 4.367957596s ago: executing program 3 (id=29): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.984094268s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063616368653100") ioctl(r0, 0xc178fd09, &(0x7f0000000138)="04000000000000000000000078010000380100000100000000000000000000000000000000000000000000000000000063616368653100") ioctl(r0, 0xc138fd06, &(0x7f00000002b0)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063616368653100") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/cache1\x00', 0x2, 0x0) read(r1, &(0x7f00000003e8), 0x1000) 3.231906427s ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) rmdir(&(0x7f0000000080)='./cgroup/syz0\x00') nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 2.985874615s ago: executing program 4 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./merge\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file\x00', 0x81c0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./merge\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./merge\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='file\x00', &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, &(0x7f0000000340), 0x0) close(r0) umount2(&(0x7f0000000380)='./merge\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./merge\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, 0x0) 2.466895592s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/acpi/devices/device:00/eject\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/device:01/eject\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/acpi/devices/device:02/eject\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/device:03/eject\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/device:04/eject\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/device:05/eject\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/acpi/devices/device:06/eject\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/device:07/eject\x00', 0x2, 0x0) write(r7, &(0x7f0000000440)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/acpi/devices/device:08/eject\x00', 0x2, 0x0) write(r8, &(0x7f00000004c0)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/devices/device:09/eject\x00', 0x2, 0x0) write(r9, &(0x7f0000000540)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/devices/device:0a/eject\x00', 0x2, 0x0) write(r10, &(0x7f00000005c0)='1\x00', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/device:0b/eject\x00', 0x2, 0x0) write(r11, &(0x7f0000000640)='1\x00', 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/acpi/devices/device:0c/eject\x00', 0x2, 0x0) write(r12, &(0x7f00000006c0)='1\x00', 0x2) r13 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/acpi/devices/device:0d/eject\x00', 0x2, 0x0) write(r13, &(0x7f0000000740)='1\x00', 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/acpi/devices/device:0e/eject\x00', 0x2, 0x0) write(r14, &(0x7f00000007c0)='1\x00', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/acpi/devices/device:0f/eject\x00', 0x2, 0x0) write(r15, &(0x7f0000000840)='1\x00', 0x2) 2.235943701s ago: executing program 0 (id=34): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 2.011420523s ago: executing program 1 (id=35): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr1_input\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr1_input\x00', 0x0, 0x0) 1.927912239s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='i915\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0000:00:02.0\x00', 0xd) 1.32418538s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b7000000000000009500000000000000"], &(0x7f0000004000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r2, 0x0, 0xe, 0x80, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", &(0x7f0000000400)=""/128, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.272449878s ago: executing program 3 (id=38): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2c0000001a000100000000000000000002000000000000000000000008000100e00102030800030001000000", 0x2c) 946.152185ms ago: executing program 3 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 627.66029ms ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="789cecdbbf6f1cc50207f0d9b5df8b9d97e4f9577e27d2e9bd020b90754e05a4202486281222d8fc10a28875b62f89e17c67d967948202441f09890251d324a24749957f8182b4942902050d8206a3bbdbb36ff7eec829f86c123e1f2959efecceecc85fefdc8cc68e13d5ebcbebb9e5f55ca19cab2c5e5d3f93fba852da5829867897ecf5f3e94d3f7292fddeb97ce1b5b7de3d13c28defc7feb3b9b9b9196a464247d32d5ffff2f3c78badc7a63853a7d66ee7d676cafb218489b67ed50c8410defb36842884309a948d25c7e110c281d0b8f6d937b7e68676a837030f6ecfde9a9db979e7e1cafde10b57725d6f8c42f8aa74fcf96b2b3ffe7fe0ec0fcfeed0e30100e04f5d9cbbfcce9bf9e9702f0a87ee0eb6cfd78f26c76ef3e34d7af272ffa304000080aeb6d7ff23511cb5afff9b3b6b5db6048385ed93edd21b97675ecd4f27fbbf51dbf51792a29f5e19a8efa166f77db3fbbfa399fa9df77fdb9ff3b89afd6b3e772444f154ea3c8ea7a642983edf383f16ed8f4b95f5ea73572b1be5a51debc6132b9d7f63f73e954eb2a1df6bfe6399f6fbbfff3fdef6d3543bcfeddc8fd8532d9dff40d7fbbefe34ea29fff14cbdddc89fc797ce7fb05ef6bfd61b728d01a096ffe7838fce7f22d37ebff23f541bdba35a5f875223406d0e532bef365f212d9dffbfea65a9a133f946767bff7fcbe47f38d3fe5e8dff93e7fbfbd4a7453aff7fd7cbd2bfb4b6fdfe8fc68f7eff8f64dadf8bfc6bfd9ff4f9df9374fefb1a85e9c1b3fe9dec75fc3f9a69bf5ff95f1c4efa79280ae32dbf757a77b0f1e1d0dcafae2f696a9757fbd18b275f3afff65dfeedf55fdcd3fcef58a6fe6eadff9acf6daeff9aeb90c9a8b1fea3b374fec35defebf5fd3f9ea9d7f7f13f1ab202f80bd2f9ef6f14769800f69aff894cfbfdcabf3ee20f35f3dfeef0effb1ae579f3bf9ea4f34fa24a7d0c7c52ffbf3eff8bda73ff3593ffc94cfb7b31ffabf57f32fb87287494ceff40d7fb6af97fd7c3e7ffa94cbdfee71f42de5cffb1a5f33fd8f5befafb3ff4e8fc4f67eaf53bff67fad93800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c03fc058721c09513c953a8fe3a9a910c693f363617fb450589a5f2855163f5c0f612229cf85b1e85aa9b25028cd2f972b4bc5f942a954590ce170727d220c45eba54a757ea5b07a64abade1e87ab1b0565d2816aa2184a349f9a970b0d9d6c27275a5b05abfb779edbf71656df57aa13cbfb4bcf6523e9fcf87e35b7d188d8a37aac572b5f1f4c6d5104e6cd51d895a3a57bf7c72ab2f07a20f2a1b6be542a95e7eaaa54ea9b25828b5d4399d5cfb228c46d5b58df262a15a9c2f55ae359fb797ce25c7994b736fcfbd3edd763d17358e63bbdb2d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe66ee9d7df1cb10c260e32c0e219c6b7e1125ff52061edc9ebd353b73f3cec395fbc317aee43add0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcc10e1c080000000000f9bf36425555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555555551576e91fa581208a03f09bb150b0514b4f60b5ec76b68a2236ae089e209748916be6182952a609816416c2fe81340929beaf79303f66de83790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000703dbefedaffdfba894871b7bd8d982f9fee8ff3e752ebf7f1fb37179891f3f9fe693f3eeba6fc7b1ae4afe568f596f7e966bd98c548ed34bd3de9efd3c1b04fdfd4be4dcdd7f57d8894ab88782cf94bcab9aa4e7b0b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076eccea10980501804e0ffb7da2caea1531815c13d8c8ee712cea34930185e79edfbd2c17170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009499d6795b8631ce8ce6ce8ce3eada6fdfbf61ffdf67fd8b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0c30e1cc80000000008f3b7cea3fd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073050000fffff2fac457", 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)='ocfs2\x00', 0x0, &(0x7f0000000700)='heartbeat=none\x00') pwrite64(r1, &(0x7f0000000800)='garbage\x00', 0x7, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/node\x00', 0x81ff, 0x0) 443.281167ms ago: executing program 2 (id=41): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c800000110aaaaaaaaaa00000000000000"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000140)='1', 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000240)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280)='payload', 0x7, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000140)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='naa.6001405123456789\x00', 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000000800)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000840)={0x1}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x1c) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f00000008c0)=""/28}, &(0x7f0000000900)="5f000000000000001c00", &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 100.624337][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 105.691533][ T5588] cgroup: Unknown subsys name 'net' [ 105.943834][ T5588] cgroup: Unknown subsys name 'cpuset' [ 106.026164][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 108.354711][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.627746][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.716244][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.724112][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.748272][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.758476][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.787965][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.814744][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.818316][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.841780][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.851704][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.853238][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.862067][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.866630][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.873481][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.874433][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.874516][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.906708][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.906776][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.914712][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.950326][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.963428][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.987397][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.009599][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.062003][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.104523][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.055915][ T4914] Bluetooth: hci3: command tx timeout [ 114.056998][ T5626] Bluetooth: hci0: command tx timeout [ 114.138654][ T5626] Bluetooth: hci4: command tx timeout [ 114.216068][ T5626] Bluetooth: hci2: command tx timeout [ 114.297029][ T5626] Bluetooth: hci1: command tx timeout [ 115.379536][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.381016][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.381230][ T5608] bridge_slave_0: entered allmulticast mode [ 115.383703][ T5608] bridge_slave_0: entered promiscuous mode [ 115.421799][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.421929][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.422173][ T5607] bridge_slave_0: entered allmulticast mode [ 115.428361][ T5607] bridge_slave_0: entered promiscuous mode [ 115.456929][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.457047][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.457221][ T5609] bridge_slave_0: entered allmulticast mode [ 115.460234][ T5609] bridge_slave_0: entered promiscuous mode [ 115.519444][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.519535][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.519937][ T5608] bridge_slave_1: entered allmulticast mode [ 115.521972][ T5608] bridge_slave_1: entered promiscuous mode [ 115.523364][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.523477][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.523636][ T5607] bridge_slave_1: entered allmulticast mode [ 115.543597][ T5607] bridge_slave_1: entered promiscuous mode [ 115.563459][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.564178][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.593547][ T5609] bridge_slave_1: entered allmulticast mode [ 115.603672][ T5609] bridge_slave_1: entered promiscuous mode [ 115.689113][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.689226][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.689716][ T5610] bridge_slave_0: entered allmulticast mode [ 115.691955][ T5610] bridge_slave_0: entered promiscuous mode [ 115.693804][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.693924][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.694091][ T5612] bridge_slave_0: entered allmulticast mode [ 115.719074][ T5612] bridge_slave_0: entered promiscuous mode [ 115.794720][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.794914][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.798302][ T5610] bridge_slave_1: entered allmulticast mode [ 115.814190][ T5610] bridge_slave_1: entered promiscuous mode [ 115.823968][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.824092][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.824543][ T5612] bridge_slave_1: entered allmulticast mode [ 115.832893][ T5612] bridge_slave_1: entered promiscuous mode [ 115.856021][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.859727][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.863435][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.925882][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.928952][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.931764][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.036197][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.041058][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.111664][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.114515][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.133976][ T5608] team0: Port device team_slave_0 added [ 116.140220][ T4914] Bluetooth: hci0: command tx timeout [ 116.140344][ T5626] Bluetooth: hci3: command tx timeout [ 116.143843][ T5607] team0: Port device team_slave_0 added [ 116.154425][ T5609] team0: Port device team_slave_0 added [ 116.210696][ T5608] team0: Port device team_slave_1 added [ 116.214049][ T5607] team0: Port device team_slave_1 added [ 116.216830][ T5626] Bluetooth: hci4: command tx timeout [ 116.232160][ T5609] team0: Port device team_slave_1 added [ 116.295214][ T5626] Bluetooth: hci2: command tx timeout [ 116.330076][ T5610] team0: Port device team_slave_0 added [ 116.332671][ T5612] team0: Port device team_slave_0 added [ 116.375178][ T5626] Bluetooth: hci1: command tx timeout [ 116.399080][ T5610] team0: Port device team_slave_1 added [ 116.402053][ T5612] team0: Port device team_slave_1 added [ 116.403397][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.403414][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.403435][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.453868][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.453929][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.454046][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.467020][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.467073][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.470484][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.582142][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.582164][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.582195][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.654205][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.654226][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.654280][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.703985][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.704001][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.704023][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.238807][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.238823][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.238842][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.240651][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.240670][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.240698][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.339121][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.339140][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.339170][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.341094][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.341110][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.341139][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.568294][ T5609] hsr_slave_0: entered promiscuous mode [ 117.569728][ T5609] hsr_slave_1: entered promiscuous mode [ 117.591586][ T5608] hsr_slave_0: entered promiscuous mode [ 117.592810][ T5608] hsr_slave_1: entered promiscuous mode [ 117.593808][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 117.593905][ T5608] Cannot create hsr debugfs directory [ 117.626771][ T5607] hsr_slave_0: entered promiscuous mode [ 117.627908][ T5607] hsr_slave_1: entered promiscuous mode [ 117.628690][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 117.628710][ T5607] Cannot create hsr debugfs directory [ 117.724219][ T5610] hsr_slave_0: entered promiscuous mode [ 117.727969][ T5610] hsr_slave_1: entered promiscuous mode [ 117.730565][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 117.730631][ T5610] Cannot create hsr debugfs directory [ 117.770911][ T5612] hsr_slave_0: entered promiscuous mode [ 117.772268][ T5612] hsr_slave_1: entered promiscuous mode [ 117.773141][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 117.773169][ T5612] Cannot create hsr debugfs directory [ 118.215264][ T4914] Bluetooth: hci0: command tx timeout [ 118.215367][ T5626] Bluetooth: hci3: command tx timeout [ 118.295292][ T5626] Bluetooth: hci4: command tx timeout [ 118.375219][ T5626] Bluetooth: hci2: command tx timeout [ 118.455527][ T5626] Bluetooth: hci1: command tx timeout [ 118.872006][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.934196][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.957269][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.993759][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.006699][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.030956][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.063443][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.101217][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.260447][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.289012][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.293246][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.363909][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.378911][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.408934][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.441401][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.473446][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.637582][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.673907][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.716487][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.751400][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.754728][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.791271][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.834713][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.869311][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.134097][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.159085][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.174710][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.210491][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.227494][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.269043][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.296989][ T4914] Bluetooth: hci0: command tx timeout [ 120.297087][ T5626] Bluetooth: hci3: command tx timeout [ 120.333924][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.371819][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.375364][ T5626] Bluetooth: hci4: command tx timeout [ 120.436474][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.456538][ T5626] Bluetooth: hci2: command tx timeout [ 120.545203][ T5626] Bluetooth: hci1: command tx timeout [ 120.612485][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.640179][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.664300][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.703129][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.724024][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.737736][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.779431][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.784809][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.836754][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.894367][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.894910][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.981572][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.981686][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.020689][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.212733][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.261738][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.284633][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.296315][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.364699][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.364841][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.480269][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.537095][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.635002][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.638440][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.726325][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.726470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.848963][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.914488][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.914713][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.964049][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.012197][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.012350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.239739][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.316646][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.316957][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.489664][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.489822][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.842803][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.930223][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.973006][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.373058][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.422332][ T5607] veth0_vlan: entered promiscuous mode [ 124.452392][ T5609] veth0_vlan: entered promiscuous mode [ 124.475393][ T5612] veth0_vlan: entered promiscuous mode [ 124.523096][ T5607] veth1_vlan: entered promiscuous mode [ 124.544262][ T5609] veth1_vlan: entered promiscuous mode [ 124.566145][ T5612] veth1_vlan: entered promiscuous mode [ 124.614456][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.788904][ T5608] veth0_vlan: entered promiscuous mode [ 124.808424][ T5609] veth0_macvtap: entered promiscuous mode [ 124.812640][ T5607] veth0_macvtap: entered promiscuous mode [ 124.860954][ T5612] veth0_macvtap: entered promiscuous mode [ 124.874068][ T5609] veth1_macvtap: entered promiscuous mode [ 124.906136][ T5607] veth1_macvtap: entered promiscuous mode [ 124.933107][ T5608] veth1_vlan: entered promiscuous mode [ 124.976014][ T5612] veth1_macvtap: entered promiscuous mode [ 125.212455][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.232063][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.232316][ T5610] veth0_vlan: entered promiscuous mode [ 125.293847][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.303551][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.324672][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.368416][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.388314][ T5610] veth1_vlan: entered promiscuous mode [ 125.451131][ T5608] veth0_macvtap: entered promiscuous mode [ 125.567745][ T5608] veth1_macvtap: entered promiscuous mode [ 126.504701][ T5610] veth0_macvtap: entered promiscuous mode [ 126.535928][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.611329][ T5610] veth1_macvtap: entered promiscuous mode [ 126.634608][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.737666][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.737702][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.816238][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.816264][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.977174][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.036138][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.036160][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.041729][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.302978][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.302999][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.538079][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.538104][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.835488][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.835544][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.461536][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.461561][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.570100][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.570126][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.570453][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.646478][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.647021][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.647452][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.717175][ T1504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.748090][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.904876][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.904900][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.166147][ T1504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.170228][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.170251][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.532832][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.602849][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.603214][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.603640][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.603863][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.604039][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.604211][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.604371][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.604849][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.895440][ T5805] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 129.911213][ T5805] CIFS: Attempting to mount //127.0.0.1/test [ 129.944092][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.977099][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.977628][ T3324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.978079][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.207656][ T5805] CIFS: VFS: Error connecting to socket. Aborting operation. [ 130.207835][ T5805] CIFS: VFS: cifs_mount failed w/return code = -4 [ 130.263478][ T5784] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.609535][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 130.706050][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.706091][ T5784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.706140][ T5784] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 130.706166][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.209235][ T5784] usb 3-1: config 0 descriptor?? [ 131.902451][ T5784] kye 0003:0458:5005.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 132.423245][ T5784] kye 0003:0458:5005.0001: hidraw0: USB HID v0.00 Mouse [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 132.423284][ T5784] kye 0003:0458:5005.0001: invalid tablet-enabling feature report [ 132.423299][ T5784] kye 0003:0458:5005.0001: tablet enabling failed [ 133.206248][ T5833] nvmet: adding nsid 1 to subsystem testnqn [ 133.479665][ T5784] usb 3-1: USB disconnect, device number 2 [ 134.219366][ T37] audit: type=1800 audit(1785858059.296:2): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.9" name="addr_trtype" dev="configfs" ino=9301 res=0 errno=0 [ 134.561630][ T5825] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 134.561684][ T5825] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 134.561773][ T5825] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 134.597005][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.714531][ T5825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.904299][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 134.904345][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.904365][ T9] usb 2-1: Product: syz [ 134.904380][ T9] usb 2-1: Manufacturer: syz [ 134.904396][ T9] usb 2-1: SerialNumber: syz [ 135.026284][ T5825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.274106][ T9] usb 2-1: selecting invalid altsetting 1 [ 135.274152][ T9] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 135.274167][ T9] usb 2-1: unable to init card! (ret=-5) [ 135.376057][ T4980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.404517][ T9] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 135.967121][ T5829] nvme nvme0: rdma connection establishment failed (-512) [ 135.991567][ T4980] usb 1-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 0.00 [ 135.991600][ T4980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.991620][ T4980] usb 1-1: Product: syz [ 135.991635][ T4980] usb 1-1: Manufacturer: syz [ 135.991649][ T4980] usb 1-1: SerialNumber: syz [ 136.285408][ T200] usb 2-1: USB disconnect, device number 2 [ 137.367002][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.585177][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 137.634289][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.634324][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.634367][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 137.634389][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.902788][ T37] audit: type=1800 audit(1785858063.036:3): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.22" name="idVendor" dev="configfs" ino=9359 res=0 errno=0 [ 137.960824][ T10] usb 4-1: config 0 descriptor?? [ 137.965088][ T37] audit: type=1800 audit(1785858063.076:4): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.22" name="idProduct" dev="configfs" ino=9360 res=0 errno=0 [ 138.261343][ T37] audit: type=1800 audit(1785858063.396:5): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.22" name="UDC" dev="configfs" ino=8504 res=0 errno=0 [ 138.331690][ T5885] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 138.759467][ T5626] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 138.989502][ T10] kye 0003:0458:5005.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 139.122128][ T10] kye 0003:0458:5005.0002: hidraw0: USB HID v0.00 Mouse [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 139.122168][ T10] kye 0003:0458:5005.0002: tablet-enabling feature report not found [ 139.122183][ T10] kye 0003:0458:5005.0002: tablet enabling failed [ 139.165252][ T5725] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.235943][ T4980] usb 1-1: USB disconnect, device number 2 [ 139.340331][ T5725] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 139.340364][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.745149][ T5725] usbtest 2-1:1.0: Linux gadget zero [ 139.745174][ T5725] usbtest 2-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 139.855968][ T36] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.130854][ T31] usb 4-1: USB disconnect, device number 2 [ 140.164422][ T36] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 140.164488][ T36] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 140.164507][ T36] usb 3-1: Product: syz [ 140.164521][ T36] usb 3-1: Manufacturer: syz [ 140.164536][ T36] usb 3-1: SerialNumber: syz [ 140.397301][ T36] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 140.397346][ T36] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 141.064424][ T36] em28xx 3-1:1.0: unknown em28xx chip ID (64) [ 141.602853][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.617642][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.761190][ T5917] device-mapper: table: 248:0: zero-length target [ 141.761212][ T5917] device-mapper: ioctl: error adding target to table [ 141.815281][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.003244][ T5850] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 142.003279][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.152176][ T5850] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 142.568416][ T10] usb 2-1: USB disconnect, device number 3 [ 142.751101][ T5928] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 143.215194][ T5621] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.317107][ T5850] usb 4-1: USB disconnect, device number 3 [ 143.356488][ T5850] idmouse 4-1:1.0: disconnected [ 143.374482][ T5621] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 143.374516][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.476790][ T5621] usbtest 1-1:1.0: Linux gadget zero [ 143.476815][ T5621] usbtest 1-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 143.717028][ T4980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.929631][ T36] em28xx 3-1:1.0: read from i2c device at 0xa0 failed with unknown error (status=254) [ 143.929690][ T36] em28xx 3-1:1.0: board has no eeprom [ 144.131722][ T4980] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 1.00 [ 144.131758][ T4980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.385289][ T36] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 144.385339][ T36] em28xx 3-1:1.0: dvb set to bulk mode. [ 144.425437][ T5725] em28xx 3-1:1.0: Binding DVB extension [ 144.574642][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 144.688890][ T5850] usb 1-1: USB disconnect, device number 3 [ 144.878970][ T5725] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 144.879003][ T5725] zl10353_read_register: readreg error (reg=127, ret==-5) [ 144.879094][ T5725] em28xx 3-1:1.0: frontend initialization failed [ 144.915157][ T36] usb 3-1: USB disconnect, device number 3 [ 144.976604][ T5725] em28xx 3-1:1.0: Remote control support is not available for this card. [ 144.977358][ T36] em28xx 3-1:1.0: Disconnecting em28xx [ 144.977466][ T36] em28xx 3-1:1.0: Closing input extension [ 145.129087][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 145.129140][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.129175][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.129189][ T5626] Workqueue: hci1 hci_rx_work [ 145.129239][ T5626] Call Trace: [ 145.129265][ T5626] [ 145.129282][ T5626] dump_stack_lvl+0xe8/0x150 [ 145.129324][ T5626] sysfs_create_dir_ns+0x271/0x2a0 [ 145.129348][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.129377][ T5626] ? rt_spin_unlock+0x163/0x200 [ 145.129401][ T5626] kobject_add_internal+0x62c/0xce0 [ 145.129425][ T5626] kobject_add+0x163/0x240 [ 145.129440][ T5626] ? rt_spin_unlock+0x157/0x200 [ 145.129464][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 145.129498][ T5626] ? get_device_parent+0x370/0x3a0 [ 145.129528][ T5626] device_add+0x3fa/0xb80 [ 145.129562][ T5626] hci_conn_add_sysfs+0xd5/0x210 [ 145.129589][ T5626] le_conn_complete_evt+0xfef/0x1580 [ 145.129631][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.129668][ T5626] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.129694][ T5626] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 145.129721][ T5626] ? rt_mutex_slowunlock+0x219/0x460 [ 145.129740][ T5626] ? skb_pull_data+0xf0/0x200 [ 145.129772][ T5626] hci_le_conn_complete_evt+0x187/0x470 [ 145.129805][ T5626] hci_event_packet+0x67a/0xf10 [ 145.129833][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.129858][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 145.129882][ T5626] ? rt_spin_unlock+0x157/0x200 [ 145.129908][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 145.129928][ T5626] hci_rx_work+0x3ee/0x1020 [ 145.129958][ T5626] ? process_scheduled_works+0xa20/0x14e0 [ 145.130008][ T5626] process_scheduled_works+0xa8e/0x14e0 [ 145.130055][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.130084][ T5626] ? assign_work+0x3cf/0x5d0 [ 145.130110][ T5626] worker_thread+0xa47/0xfb0 [ 145.130145][ T5626] ? __kthread_parkme+0x71/0x1f0 [ 145.130179][ T5626] kthread+0x388/0x470 [ 145.130207][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 145.130228][ T5626] ? __pfx_kthread+0x10/0x10 [ 145.130256][ T5626] ret_from_fork+0x514/0xb70 [ 145.130287][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 145.130315][ T5626] ? __switch_to+0xc89/0x1420 [ 145.130342][ T5626] ? __pfx_kthread+0x10/0x10 [ 145.130371][ T5626] ret_from_fork_asm+0x1a/0x30 [ 145.130402][ T5626] [ 145.131371][ T5626] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.131434][ T5626] Bluetooth: hci1: failed to register connection device [ 145.481310][ T37] audit: type=1800 audit(1785858070.616:6): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="enable" dev="configfs" ino=8618 res=0 errno=0 [ 145.544637][ T37] audit: type=1800 audit(1785858070.676:7): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="idVendor" dev="configfs" ino=8619 res=0 errno=0 [ 145.544692][ T37] audit: type=1800 audit(1785858070.676:8): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="idProduct" dev="configfs" ino=8620 res=0 errno=0 [ 145.615281][ T5961] INFO: trying to register non-static key. [ 145.615304][ T5961] The code is fine but needs lockdep annotation, or maybe [ 145.615317][ T5961] you didn't initialize this object before use? [ 145.615325][ T5961] turning off the locking correctness validator. [ 145.615348][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.615375][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.615388][ T5961] Call Trace: [ 145.615396][ T5961] [ 145.615406][ T5961] dump_stack_lvl+0xe8/0x150 [ 145.615457][ T5961] assign_lock_key+0x133/0x150 [ 145.615486][ T5961] register_lock_class+0xcc/0x2e0 [ 145.615511][ T5961] __lock_acquire+0xab/0x2ce0 [ 145.615534][ T5961] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.615565][ T5961] ? rt_mutex_slowlock+0x422/0x780 [ 145.615587][ T5961] ? rt_mutex_slowlock+0x1f2/0x780 [ 145.615608][ T5961] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 145.615634][ T5961] ? usbg_make_tpg+0x147/0x590 [ 145.615663][ T5961] lock_acquire+0x106/0x350 [ 145.615684][ T5961] ? usbg_make_tpg+0x147/0x590 [ 145.615717][ T5961] ? usbg_make_tpg+0x147/0x590 [ 145.615748][ T5961] ? usbg_make_tpg+0x147/0x590 [ 145.615780][ T5961] mutex_lock_nested+0x5a/0x1d0 [ 145.615801][ T5961] ? usbg_make_tpg+0x147/0x590 [ 145.615833][ T5961] usbg_make_tpg+0x147/0x590 [ 145.615867][ T5961] ? __pfx_usbg_make_tpg+0x10/0x10 [ 145.615900][ T5961] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.615931][ T5961] target_fabric_make_tpg+0xa8/0x6d0 [ 145.615957][ T5961] configfs_mkdir+0x4f6/0x9e0 [ 145.615989][ T5961] ? __pfx_configfs_mkdir+0x10/0x10 [ 145.616016][ T5961] ? generic_permission+0x2bf/0x670 [ 145.616043][ T5961] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 145.616075][ T5961] vfs_mkdir+0x402/0x620 [ 145.616107][ T5961] filename_mkdirat+0x289/0x520 [ 145.616139][ T5961] ? __pfx_filename_mkdirat+0x10/0x10 [ 145.616171][ T5961] ? do_getname+0x151/0x250 [ 145.616189][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.616212][ T5961] __se_sys_mkdirat+0x35/0x150 [ 145.616241][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.616263][ T5961] do_syscall_64+0x174/0x580 [ 145.616292][ T5961] ? trace_irq_disable+0x3b/0x140 [ 145.616313][ T5961] ? clear_bhb_loop+0x40/0x90 [ 145.616338][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.616448][ T5961] RIP: 0033:0x7f0ea03ae019 [ 145.616477][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.616507][ T5961] RSP: 002b:00007f0e9e5c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 145.616541][ T5961] RAX: ffffffffffffffda RBX: 00007f0ea0636180 RCX: 00007f0ea03ae019 [ 145.616559][ T5961] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 145.616575][ T5961] RBP: 00007f0ea044500c R08: 0000000000000000 R09: 0000000000000000 [ 145.616590][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.616608][ T5961] R13: 00007f0ea0636218 R14: 00007f0ea0636180 R15: 00007ffdd6e20e28 [ 145.616634][ T5961] [ 145.617524][ T5952] (syz.4.40,5952,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 145.617564][ T5952] (syz.4.40,5952,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 145.617590][ T5952] (syz.4.40,5952,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 145.617621][ T5952] (syz.4.40,5952,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 145.631960][ T4980] corsair-psu 0003:1B1C:1C03.0003: hidraw0: USB HID v1.11 Device [HID 1b1c:1c03] on usb-dummy_hcd.1-1/input0 [ 145.945155][ T4980] corsair-psu 0003:1B1C:1C03.0003: unable to initialize device (-110) [ 145.983018][ T36] em28xx 3-1:1.0: Freeing device [ 145.991520][ T37] audit: type=1800 audit(1785858071.106:9): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.42" name="UDC" dev="configfs" ino=9462 res=0 errno=0 [ 146.016340][ T4980] corsair-psu 0003:1B1C:1C03.0003: probe with driver corsair-psu failed with error -110 [ 147.175204][ T5626] Bluetooth: hci1: command 0x2016 tx timeout [ 148.245891][ T5621] usb 2-1: USB disconnect, device number 4 [ 149.257810][ T4914] Bluetooth: hci1: command 0x2016 tx timeout