last executing test programs: 2m24.811318595s ago: executing program 1 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0x53e1, 0x4, 0xf4, 0x2}, {0xae, 0x27, 0x2, 0x4}, {0x8, 0x63, 0x3, 0x2}, {0x6, 0x9, 0xe, 0xb}, {0x2a, 0x4, 0x1, 0xf}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000f80)={0x0, 0x3, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x5, 0xfffffffb, 0xfd, 0x4, "d206a0ebd7cedfd17ebd04c00ed476b4"}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x2aef941362ae753a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop', 0x4) 2m24.043626113s ago: executing program 1 (id=552): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xecbb, '\x00', @p_u16=0x0}}) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = openat(r2, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40042, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]}) write(r5, &(0x7f00000001c0)='1', 0x1) 2m20.611714918s ago: executing program 1 (id=554): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 2m18.352957202s ago: executing program 1 (id=558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f000000d2c0)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009b80)=""/4096, 0x1000}, 0x7}], 0x2, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000c14010025bd7000fcdbdf2508003d0036ad9e05a90000000008003d00000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) set_robust_list(&(0x7f0000000400)={0x0, 0x4}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) 2m16.508238301s ago: executing program 1 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000001040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000040)="de", 0x1, r3) request_key(&(0x7f0000001080)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4) 2m15.103046729s ago: executing program 1 (id=567): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1195, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x40208d5) 1m58.704749967s ago: executing program 32 (id=567): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1195, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x40208d5) 15.123019423s ago: executing program 4 (id=883): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='0fc', 0x3) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x5, 0x3, 0x0, 'queue1\x00', 0x2}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) 11.04970643s ago: executing program 4 (id=894): prctl$PR_SET_SECUREBITS(0x1c, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000f40)=""/4096) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001400)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1004000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) 10.061282753s ago: executing program 0 (id=895): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r2, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000040)=0x85) 9.680354481s ago: executing program 3 (id=896): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000040), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) 8.573164479s ago: executing program 3 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0x53e1, 0x4, 0xf4, 0x2}, {0xae, 0x27, 0x2, 0x4}, {0x8, 0x63, 0x3, 0x2}, {0x6, 0x9, 0xe, 0xb}, {0x2a, 0x4, 0x1, 0xf}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000f80)={0x0, 0x3, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x5, 0xfffffffb, 0xfd, 0x4, "d206a0ebd7cedfd17ebd04c00ed476b4"}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x2aef941362ae753a}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='loop', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 8.534996407s ago: executing program 0 (id=899): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000280)=0x5) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x10006, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_d\xd8_alloc', 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x2000}) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/29, 0xff1b, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0x10001}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x7}], 0x58) 7.990442408s ago: executing program 3 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) write(r4, &(0x7f0000000400)='!*:', 0x3) 7.276752695s ago: executing program 5 (id=904): recvfrom$unix(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r10, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 6.820563339s ago: executing program 3 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 6.753416063s ago: executing program 4 (id=906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) shmctl$IPC_RMID(r4, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.755800758s ago: executing program 4 (id=908): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000040), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) chmod(&(0x7f0000000000)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0) 5.638791382s ago: executing program 2 (id=909): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r2, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000040)=0x85) 5.574600115s ago: executing program 4 (id=910): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x8001, 0x0, r0}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r7, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40094) 5.394957852s ago: executing program 2 (id=911): socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x404, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x803, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.254913681s ago: executing program 3 (id=912): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x3}}, 0x2e) socket$nl_netfilter(0x10, 0x3, 0xc) 5.232854565s ago: executing program 2 (id=913): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680), 0x0, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}], 0x1}}], 0x2, 0x0) 3.45441108s ago: executing program 2 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) 3.40950381s ago: executing program 5 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) read$ptp(r3, &(0x7f00000000c0)=""/15, 0xf) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7ad07e8c5d00000000000000"]) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 3.40901452s ago: executing program 0 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r9 = syz_clone(0x2044000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x80000000, 0x0) timer_create(0x0, 0x0, 0x0) write(r8, &(0x7f0000000540)='reado', 0x5) write(r8, &(0x7f0000000580)='inact', 0x5) write(r8, &(0x7f0000000640)='readonly\n', 0x9) 3.40883081s ago: executing program 5 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x17b) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001d0000012bbd7000fddbdf250a000000", @ANYRES32=r7, @ANYBLOB="0400e1000800077d3f7626e7f5769800ffffff562af1ac2cdb87f15abd2813bd2071ff0a00020000000000000000000600050000000000080009000200000008000a0004000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x14000080) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$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") ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 3.40770637s ago: executing program 2 (id=918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, 0x0) shmctl$IPC_RMID(r4, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) 2.098967579s ago: executing program 5 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 2.098273449s ago: executing program 4 (id=920): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000040), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) chmod(&(0x7f0000000000)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0) 1.774295886s ago: executing program 5 (id=921): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r2, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000040)=0x85) 1.733716154s ago: executing program 0 (id=922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000740)="7d7cec", 0x3}], 0x1}}], 0x2, 0x0) 1.689818773s ago: executing program 2 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]}) 699.199106ms ago: executing program 0 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) 260.183476ms ago: executing program 3 (id=925): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000200)={0x0, 0x51, 0xa, 0x8, 0x0, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000ad4000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, 0xffffffffffffffff, 0x2a9f8000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 231.199292ms ago: executing program 5 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000f80)={0x0, 0x3, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x5, 0xfffffffb, 0xfd, 0x4, "d206a0ebd7cedfd17ebd04c00ed476b4"}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x2aef941362ae753a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='loop', 0x4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 0s ago: executing program 0 (id=927): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448d4, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) nanosleep(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000b000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xf40, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) pipe2$watch_queue(0x0, 0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast2, 0x4e24, 0xffff, 0x4e20, 0x6, 0x2, 0x30, 0x60, 0x2b, 0x0, 0xffffffffffffffff}, {0x100000000, 0x2, 0x4, 0x3, 0x7, 0x9, 0x7, 0x2}, {0x1, 0x8001, 0x9, 0x4}, 0x7ff, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3013015ccdd6850d}, 0x2, @in=@local, 0x0, 0x0, 0x3, 0xd, 0xfffffff9, 0x5, 0x3}}, 0xe8) kernel console output (not intermixed with test programs): GE): vxcan1: link becomes ready [ 55.199942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.210463][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.224083][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.231649][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.242884][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.267415][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.283137][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.314404][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.342384][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.349477][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.389673][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.404698][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.429360][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.439760][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.446874][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.459799][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.468958][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.477908][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.486969][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.495718][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.516938][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.526628][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.537461][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.548621][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.557599][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.566910][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.583329][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.601395][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.613506][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.622471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.630303][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 55.631059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.636548][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 55.648325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.649896][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 55.663831][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 55.664556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.678408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.686069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.704392][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 55.722333][ T4192] device veth0_vlan entered promiscuous mode [ 55.731998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.741231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.750015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.759994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.769072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.778968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.793480][ T4186] device veth0_vlan entered promiscuous mode [ 55.803548][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.815665][ T4192] device veth1_vlan entered promiscuous mode [ 55.828905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.837366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.851310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.891287][ T4186] device veth1_vlan entered promiscuous mode [ 55.898226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.907122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.915098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.922768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.931251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.939949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.979024][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.993422][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.007490][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.021437][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.041830][ T4196] device veth0_vlan entered promiscuous mode [ 56.063551][ T4186] device veth0_macvtap entered promiscuous mode [ 56.070656][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.080076][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.088989][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.097790][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.107609][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.116644][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.124431][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.138582][ T4185] device veth0_vlan entered promiscuous mode [ 56.150567][ T4196] device veth1_vlan entered promiscuous mode [ 56.162593][ T4192] device veth0_macvtap entered promiscuous mode [ 56.170521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.179220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.189359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.198017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.206421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.215985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.229099][ T4185] device veth1_vlan entered promiscuous mode [ 56.245563][ T4192] device veth1_macvtap entered promiscuous mode [ 56.255011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.263346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.273182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.281268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.289360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.299429][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.308587][ T4186] device veth1_macvtap entered promiscuous mode [ 56.342726][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.364472][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.372303][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.382101][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.390733][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.399661][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.408585][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.417484][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.426694][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.439023][ T4196] device veth0_macvtap entered promiscuous mode [ 56.450447][ T4196] device veth1_macvtap entered promiscuous mode [ 56.466854][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.477749][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.489918][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.506711][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.524451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.532418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.540864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.550811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.560656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.569244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.582591][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.593509][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.605220][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.614371][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.625737][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.635895][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.646608][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.657714][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.672150][ T4185] device veth0_macvtap entered promiscuous mode [ 56.683550][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.692689][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.703639][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.712452][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.723401][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.732851][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.741987][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.751258][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.760066][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.768934][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.778142][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.787414][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.796348][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.806515][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.815351][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.827676][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.838621][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.848728][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.859390][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.870318][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.885950][ T4185] device veth1_macvtap entered promiscuous mode [ 56.901536][ T4197] device veth0_vlan entered promiscuous mode [ 56.911282][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.920312][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.929070][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.938585][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.946850][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.958325][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.967699][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.976697][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.987380][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.018080][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.026626][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.041153][ T4197] device veth1_vlan entered promiscuous mode [ 57.110559][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.122650][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.132977][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.144368][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.154282][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.164931][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.176260][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.191163][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.201865][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.212844][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.226340][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236267][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.247253][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.258528][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.279736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.292502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.301452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.310709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.329554][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.341087][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.350154][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.359025][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.375253][ T4197] device veth0_macvtap entered promiscuous mode [ 57.382505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.391531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.401653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.428609][ T4197] device veth1_macvtap entered promiscuous mode [ 57.488665][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.512231][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.537425][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.548835][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.557361][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.561701][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.575781][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.586472][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.596553][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.607402][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.617448][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.632263][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.643411][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.654891][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.662998][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.671277][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.679437][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.688212][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.704450][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 57.710675][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 57.715727][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.719608][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 57.732419][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.733182][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.746340][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 57.753796][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.757372][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.768123][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.783372][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.793897][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 57.796475][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.809814][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.820485][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.830733][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.841397][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.852797][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.869364][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.882922][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.890966][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.899503][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.913677][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.922647][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931651][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.940579][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.988219][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.010374][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.037950][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.068213][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.089811][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.101596][ T4265] Zero length message leads to an empty skb [ 58.113531][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.123710][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.161351][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.194329][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.205361][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.221309][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.240251][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.397787][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.900502][ T4265] ODEBUG: Out of memory. ODEBUG disabled [ 58.933535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.974882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.072881][ T4275] loop4: detected capacity change from 0 to 2048 [ 59.132522][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.190640][ T4275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.200726][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.924041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.064027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.074047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.084046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.094044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.104048][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.114045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.124046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.134043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.144044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.517464][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 60.523628][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 60.529999][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 60.539671][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 60.549325][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 60.564637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.804681][ T4293] md: personality for level is not loaded! [ 65.020165][ T4314] loop2: detected capacity change from 0 to 1024 [ 68.066827][ T4328] loop0: detected capacity change from 0 to 128 [ 68.108441][ T4328] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 68.121307][ T4300] udevd[4300]: incorrect ext4 checksum on /dev/loop0 [ 68.141106][ T4331] loop1: detected capacity change from 0 to 64 [ 68.230021][ T25] audit: type=1800 audit(1790813156.135:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 69.396618][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.476076][ T4341] device syzkaller0 entered promiscuous mode [ 69.584783][ T4185] hfs: node 4:3 still has 1 user(s)! [ 70.674367][ T4354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.307354][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313859][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.621081][ T4355] device syzkaller0 entered promiscuous mode [ 71.950251][ T4374] loop3: detected capacity change from 0 to 2048 [ 72.005555][ T4374] ======================================================= [ 72.005555][ T4374] WARNING: The mand mount option has been deprecated and [ 72.005555][ T4374] and is ignored by this kernel. Remove the mand [ 72.005555][ T4374] option from the mount to silence this warning. [ 72.005555][ T4374] ======================================================= [ 72.050147][ T4377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.216793][ T4374] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 72.273297][ T4374] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 72.944338][ T4374] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 73.058720][ T4374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.133256][ T4386] device syzkaller0 entered promiscuous mode [ 73.200524][ T4386] tipc: Started in network mode [ 73.222082][ T4386] tipc: Node identity b62a5162d16e, cluster identity 4711 [ 73.305290][ T4386] tipc: Enabled bearer , priority 0 [ 73.442600][ T4386] tipc: Resetting bearer [ 74.164929][ T4388] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 74.200284][ T4388] device syzkaller0 entered promiscuous mode [ 74.323982][ T4298] tipc: Node number set to 1732530530 [ 74.379679][ T4385] tipc: Resetting bearer [ 75.029701][ T4385] tipc: Disabling bearer [ 75.169865][ T4398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.480654][ T4418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.32'. [ 76.162077][ T4423] loop0: detected capacity change from 0 to 4096 [ 77.131423][ T4419] sched: RT throttling activated [ 77.132572][ T1110] cfg80211: failed to load regulatory.db [ 77.363335][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.369782][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.376001][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.382155][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.388348][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.394615][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.400773][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.406968][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.413127][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.419349][ T4421] tc action pedit 'at' offset 19 out of bounds [ 77.425760][ T4421] 0: reclassify loop, rule prio 0, protocol 800 [ 77.488926][ T4426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.283179][ T4441] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4441] [ 79.540814][ T4446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.40'. [ 79.601232][ T4447] loop2: detected capacity change from 0 to 164 [ 79.689753][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.697893][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.765607][ T4442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.987986][ T4453] netlink: 76 bytes leftover after parsing attributes in process `syz.4.46'. [ 80.127683][ T4456] process 'syz.0.47' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 81.031995][ T4468] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 81.799163][ T4472] netlink: 84 bytes leftover after parsing attributes in process `syz.0.51'. [ 82.762658][ T4502] loop1: detected capacity change from 0 to 164 [ 83.646264][ T4509] device syzkaller0 entered promiscuous mode [ 84.751291][ T4509] tipc: Started in network mode [ 84.764498][ T4509] tipc: Node identity 8ed9e25a155e, cluster identity 4711 [ 84.785652][ T4509] tipc: Enabled bearer , priority 0 [ 84.970308][ T4520] tipc: Resetting bearer [ 85.266059][ T4507] tipc: Resetting bearer [ 85.441665][ T4507] tipc: Disabling bearer [ 86.192557][ T4533] loop2: detected capacity change from 0 to 256 [ 86.340686][ T4533] FAT-fs (loop2): Directory bread(block 1285) failed [ 86.361573][ T4533] FAT-fs (loop2): Directory bread(block 1286) failed [ 86.984529][ T4533] FAT-fs (loop2): Directory bread(block 1287) failed [ 87.063085][ T4533] FAT-fs (loop2): Directory bread(block 1288) failed [ 87.560514][ T4533] FAT-fs (loop2): Directory bread(block 1285) failed [ 87.567632][ T4533] FAT-fs (loop2): Directory bread(block 1286) failed [ 87.574815][ T4533] FAT-fs (loop2): Directory bread(block 1287) failed [ 87.583175][ T4533] FAT-fs (loop2): Directory bread(block 1288) failed [ 88.134282][ T4546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 88.152046][ T4547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 88.201168][ T4549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 88.444183][ T4287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.478204][ T4558] ALSA: mixer_oss: invalid OSS volume '' [ 90.314158][ T4287] usb 4-1: Using ep0 maxpacket: 16 [ 90.942640][ T4287] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 91.119518][ T4287] usb 4-1: can't read configurations, error -71 [ 92.142005][ T4598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.77'. [ 92.154492][ T4598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 92.364155][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.604148][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 92.724241][ T4228] usb 2-1: config 0 has no interfaces? [ 92.730063][ T4228] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.805401][ T4605] device syzkaller0 entered promiscuous mode [ 92.851649][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.146493][ T4228] usb 2-1: config 0 descriptor?? [ 93.251213][ T4607] tcf_pedit_act: 7 callbacks suppressed [ 93.251228][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.263023][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.269215][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.275404][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.281535][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.287680][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.293806][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.299953][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.306103][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.312246][ T4607] tc action pedit 'at' offset 49 out of bounds [ 93.318418][ T4607] 0: reclassify loop, rule prio 0, protocol 800 [ 93.911131][ T4228] usb 2-1: can't set config #0, error -71 [ 93.921662][ T4228] usb 2-1: USB disconnect, device number 2 [ 95.195923][ T4644] device syzkaller0 entered promiscuous mode [ 95.227382][ T4644] tipc: Enabled bearer , priority 0 [ 95.519229][ T4644] tipc: Resetting bearer [ 95.960847][ T4643] tipc: Resetting bearer [ 96.123684][ T4643] tipc: Disabling bearer [ 96.843932][ T4657] device syzkaller0 entered promiscuous mode [ 96.938831][ T4671] device syzkaller0 entered promiscuous mode [ 98.368861][ T4688] loop3: detected capacity change from 0 to 512 [ 99.854261][ T4688] EXT4-fs (loop3): Ignoring removed nobh option [ 100.093119][ T4692] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.377775][ T4688] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.94: invalid indirect mapped block 256 (level 2) [ 100.611472][ T4688] EXT4-fs (loop3): 2 truncates cleaned up [ 100.639175][ T4688] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 101.009719][ T4705] program syz.0.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.230386][ C1] hrtimer: interrupt took 43034 ns [ 101.986315][ T4686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.94: bg 0: block 5: invalid block bitmap [ 102.008402][ T4686] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 102.021867][ T4686] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.021867][ T4686] [ 102.033324][ T4686] EXT4-fs (loop3): Total free blocks count 0 [ 102.039537][ T4686] EXT4-fs (loop3): Free/Dirty block details [ 102.045549][ T4686] EXT4-fs (loop3): free_blocks=0 [ 102.050595][ T4686] EXT4-fs (loop3): dirty_blocks=33 [ 102.055784][ T4686] EXT4-fs (loop3): Block reservation details [ 102.061760][ T4686] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 102.102055][ T4716] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.175983][ T4716] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.083704][ T4724] device syzkaller0 entered promiscuous mode [ 108.006900][ T4783] device syzkaller0 entered promiscuous mode [ 109.154869][ T4805] loop3: detected capacity change from 0 to 512 [ 109.312459][ T4805] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.381326][ T4805] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.406434][ T4816] netlink: 'syz.4.122': attribute type 10 has an invalid length. [ 109.475567][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.483848][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.543081][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.550211][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.558970][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.566079][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.717778][ T4816] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.801187][ T4821] device syzkaller0 entered promiscuous mode [ 111.804448][ T4845] loop2: detected capacity change from 0 to 512 [ 112.675636][ T4845] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 113.210878][ T4845] EXT4-fs (loop2): Unrecognized mount option "fsname=/" or missing value [ 117.959145][ T4885] device syzkaller0 entered promiscuous mode [ 118.028765][ T4888] device syzkaller0 entered promiscuous mode [ 118.116900][ T4888] TC_ACT_REPEAT abuse ? [ 118.955934][ T4901] loop1: detected capacity change from 0 to 4096 [ 119.040486][ T4900] loop3: detected capacity change from 0 to 512 [ 119.074596][ T4904] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.087505][ T4903] loop0: detected capacity change from 0 to 1024 [ 119.145489][ T4900] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.042847][ T4900] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 121.150224][ T4900] jffs2: notice: (4900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.811350][ T4944] loop1: detected capacity change from 0 to 4096 [ 122.829822][ T4947] device syzkaller0 entered promiscuous mode [ 122.887911][ T4944] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 122.888919][ T4951] tcf_pedit_act: 7 callbacks suppressed [ 122.888932][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.906845][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.912919][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.919045][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.925143][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.931220][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.937342][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.943442][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.949560][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.955717][ T4951] tc action pedit 'at' offset 5 out of bounds [ 122.961809][ T4951] 0: reclassify loop, rule prio 0, protocol 800 [ 123.097880][ T4944] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.153156][ T4944] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 124.345188][ T4970] loop3: detected capacity change from 0 to 4096 [ 124.375548][ T4970] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 124.487782][ T4972] loop4: detected capacity change from 0 to 256 [ 124.662857][ T4972] FAT-fs (loop4): Directory bread(block 1285) failed [ 124.756988][ T4973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.780419][ T4972] FAT-fs (loop4): Directory bread(block 1286) failed [ 124.861700][ T4972] FAT-fs (loop4): Directory bread(block 1287) failed [ 124.931869][ T4972] FAT-fs (loop4): Directory bread(block 1288) failed [ 125.946516][ T4978] tipc: Started in network mode [ 125.951419][ T4978] tipc: Node identity 2a5a5a7b98bc, cluster identity 4711 [ 125.994553][ T4978] tipc: Enabled bearer , priority 0 [ 126.191772][ T4975] tipc: Disabling bearer [ 129.082009][ T5014] loop4: detected capacity change from 0 to 131072 [ 129.388988][ T5014] F2FS-fs (loop4): invalid crc value [ 129.568800][ T5014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.666462][ T5014] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 129.705251][ T5014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 129.752207][ T5031] loop1: detected capacity change from 0 to 1024 [ 129.896051][ T5031] EXT4-fs (loop1): Ignoring removed orlov option [ 129.978292][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 129.981968][ T5043] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.167935][ T25] audit: type=1800 audit(1790813218.015:3): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 130.189084][ T5049] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 130.477001][ T4925] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:12: Invalid inode table block 3220616831 in block_group 0 [ 131.138719][ T5057] loop1: detected capacity change from 0 to 512 [ 132.241789][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.253164][ T5057] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.855823][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867938][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.648422][ T5098] Failed to get privilege flags for destination (handle=0x2:0x0) [ 134.947760][ T5104] device syzkaller0 entered promiscuous mode [ 134.991425][ T5104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.002457][ T5104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.027432][ T5103] device syzkaller0 entered promiscuous mode [ 135.082472][ T5110] loop2: detected capacity change from 0 to 4096 [ 135.158876][ T5113] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.644288][ T5153] ALSA: mixer_oss: invalid OSS volume '' [ 137.932413][ T5157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 137.944333][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'. [ 138.748967][ T5160] loop4: detected capacity change from 0 to 512 [ 138.828254][ T5160] EXT4-fs (loop4): Ignoring removed nobh option [ 138.966498][ T5160] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.195: invalid indirect mapped block 256 (level 2) [ 138.986175][ T5167] Failed to get privilege flags for destination (handle=0x2:0x0) [ 139.227887][ T5160] EXT4-fs (loop4): 2 truncates cleaned up [ 139.321714][ T5160] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 140.770313][ T5159] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.195: bg 0: block 5: invalid block bitmap [ 140.796776][ T5159] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 140.809105][ T5159] EXT4-fs (loop4): This should not happen!! Data will be lost [ 140.809105][ T5159] [ 140.818748][ T5159] EXT4-fs (loop4): Total free blocks count 0 [ 140.825198][ T5159] EXT4-fs (loop4): Free/Dirty block details [ 140.831091][ T5159] EXT4-fs (loop4): free_blocks=0 [ 140.836047][ T5159] EXT4-fs (loop4): dirty_blocks=33 [ 140.841141][ T5159] EXT4-fs (loop4): Block reservation details [ 140.847159][ T5159] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 141.141904][ T5172] device syzkaller0 entered promiscuous mode [ 141.354343][ T5176] mmap: syz.0.199 (5176) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 141.403904][ T5178] block device autoloading is deprecated and will be removed. [ 144.326980][ T5196] syz.2.205 uses obsolete (PF_INET,SOCK_PACKET) [ 144.340234][ T5200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.873772][ T5218] loop3: detected capacity change from 0 to 256 [ 146.075626][ T5218] FAT-fs (loop3): Directory bread(block 1285) failed [ 146.217063][ T5218] FAT-fs (loop3): Directory bread(block 1286) failed [ 146.332016][ T5218] FAT-fs (loop3): Directory bread(block 1287) failed [ 146.425546][ T5218] FAT-fs (loop3): Directory bread(block 1288) failed [ 147.264202][ T5222] loop1: detected capacity change from 0 to 32768 [ 147.500319][ T5222] (syz.1.210,5222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.520245][ T5222] (syz.1.210,5222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.335082][ T5222] JBD2: Ignoring recovery information on journal [ 148.488896][ T5222] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.651497][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.823118][ T5243] device syzkaller0 entered promiscuous mode [ 149.933953][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 152.741315][ T5277] loop4: detected capacity change from 0 to 16 [ 152.913322][ T5277] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 156.313739][ T1091] block nbd3: Attempted send on invalid socket [ 156.320613][ T1091] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 156.333342][ T1091] gfs2: error 10 reading superblock [ 156.441917][ T5303] device syzkaller0 entered promiscuous mode [ 156.662947][ T5311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.622910][ T5327] sctp: failed to load transform for md5: -2 [ 166.168710][ T5409] binder: 5402:5409 ioctl c0306201 0 returned -14 [ 169.571064][ T5424] loop2: detected capacity change from 0 to 512 [ 169.674220][ T5424] EXT4-fs (loop2): Ignoring removed nobh option [ 169.713173][ T5424] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.257: invalid indirect mapped block 256 (level 2) [ 170.217271][ T5436] loop4: detected capacity change from 0 to 1024 [ 170.359325][ T5424] EXT4-fs (loop2): 2 truncates cleaned up [ 170.464301][ T5424] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 171.537547][ T5423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.257: bg 0: block 5: invalid block bitmap [ 171.647819][ T5423] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 171.661648][ T5423] EXT4-fs (loop2): This should not happen!! Data will be lost [ 171.661648][ T5423] [ 171.671381][ T5423] EXT4-fs (loop2): Total free blocks count 0 [ 171.677425][ T5423] EXT4-fs (loop2): Free/Dirty block details [ 171.683327][ T5423] EXT4-fs (loop2): free_blocks=0 [ 171.688295][ T5423] EXT4-fs (loop2): dirty_blocks=33 [ 171.693407][ T5423] EXT4-fs (loop2): Block reservation details [ 171.699651][ T5423] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 173.718914][ T5470] md: could not open device unknown-block(1,0). [ 173.873106][ T5474] No such timeout policy "syz1" [ 174.378310][ T5478] Console: switching to colour VGA+ 80x25 [ 175.784053][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.967490][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 175.974069][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 177.680645][ T5504] affs: No valid root block on device nullb0 [ 180.463109][ T5527] sctp: failed to load transform for md5: -2 [ 181.123743][ T5537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 182.259691][ T5545] loop1: detected capacity change from 0 to 8192 [ 184.739915][ T5561] loop2: detected capacity change from 0 to 2048 [ 185.958221][ T5561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.383994][ T5588] nvmet: adding nsid 1 to subsystem testsubsys [ 187.393585][ T5588] nvmet: failed to open block device (null): (-22) [ 187.543736][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 188.625638][ T5611] loop2: detected capacity change from 0 to 128 [ 188.656802][ T5611] FAT-fs (loop2): Unrecognized mount option "shor name=lower" or missing value [ 189.073733][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 189.250462][ T5620] loop3: detected capacity change from 0 to 2048 [ 189.464686][ T5620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.424996][ T5636] netlink: 84 bytes leftover after parsing attributes in process `syz.1.312'. [ 190.578805][ T5632] FAULT_INJECTION: forcing a failure. [ 190.578805][ T5632] name failslab, interval 1, probability 0, space 0, times 1 [ 190.604983][ T5632] CPU: 0 PID: 5632 Comm: syz.4.311 Not tainted syzkaller #0 [ 190.612305][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.622373][ T5632] Call Trace: [ 190.625653][ T5632] [ 190.628582][ T5632] dump_stack_lvl+0x188/0x250 [ 190.633282][ T5632] ? show_regs_print_info+0x20/0x20 [ 190.638483][ T5632] ? load_image+0x410/0x410 [ 190.642989][ T5632] ? __might_sleep+0xf0/0xf0 [ 190.647605][ T5632] ? __lock_acquire+0x7b50/0x7b50 [ 190.652631][ T5632] should_fail+0x383/0x4b0 [ 190.657061][ T5632] should_failslab+0x5/0x20 [ 190.661562][ T5632] slab_pre_alloc_hook+0x51/0xc0 [ 190.666503][ T5632] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 190.672241][ T5632] ? init_rescuer+0x91/0x290 [ 190.676839][ T5632] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 190.682136][ T5632] init_rescuer+0x91/0x290 [ 190.686562][ T5632] alloc_workqueue+0xfb8/0x1450 [ 190.691411][ T5632] ? vsnprintf+0x1b22/0x1c20 [ 190.696010][ T5632] ? snprintf+0xe5/0x140 [ 190.700252][ T5632] ? lockdep_init_map_type+0x98/0x900 [ 190.705631][ T5632] ? apply_workqueue_attrs+0x170/0x170 [ 190.711088][ T5632] ? memset+0x1e/0x40 [ 190.715068][ T5632] ? lockdep_init_map_type+0x98/0x900 [ 190.720449][ T5632] nci_register_device+0x3fc/0x9f0 [ 190.725572][ T5632] ? nci_free_device+0x90/0x90 [ 190.730351][ T5632] ? nci_hci_allocate+0x1dd/0x2a0 [ 190.735392][ T5632] ? nci_allocate_device+0x241/0x350 [ 190.740689][ T5632] virtual_ncidev_open+0x55/0xc0 [ 190.745627][ T5632] ? virtual_ncidev_ioctl+0x90/0x90 [ 190.750826][ T5632] misc_open+0x31f/0x390 [ 190.755077][ T5632] chrdev_open+0x585/0x5f0 [ 190.759500][ T5632] ? cd_forget+0x160/0x160 [ 190.763919][ T5632] ? fsnotify_perm+0x3a7/0x560 [ 190.768690][ T5632] ? cd_forget+0x160/0x160 [ 190.773117][ T5632] do_dentry_open+0x7f7/0xf90 [ 190.777816][ T5632] ? vfs_open+0x2b/0x80 [ 190.781994][ T5632] path_openat+0x2718/0x2fb0 [ 190.786626][ T5632] ? __kasan_slab_alloc+0xa9/0xc0 [ 190.791672][ T5632] ? do_filp_open+0x400/0x400 [ 190.796383][ T5632] do_filp_open+0x1df/0x400 [ 190.800908][ T5632] ? vfs_tmpfile+0x300/0x300 [ 190.805535][ T5632] ? _raw_spin_unlock+0x24/0x40 [ 190.810399][ T5632] ? alloc_fd+0x59e/0x650 [ 190.814755][ T5632] do_sys_openat2+0x14b/0x500 [ 190.819471][ T5632] ? __lock_acquire+0x7b50/0x7b50 [ 190.824511][ T5632] ? do_sys_open+0xe0/0xe0 [ 190.828941][ T5632] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.834945][ T5632] ? lock_chain_count+0x20/0x20 [ 190.839819][ T5632] __x64_sys_openat+0x135/0x160 [ 190.844693][ T5632] do_syscall_64+0x4c/0xa0 [ 190.849121][ T5632] ? clear_bhb_loop+0x30/0x80 [ 190.853818][ T5632] ? clear_bhb_loop+0x30/0x80 [ 190.858511][ T5632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.864429][ T5632] RIP: 0033:0x7fa0b5bd3159 [ 190.868858][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.888475][ T5632] RSP: 002b:00007fa0b3e2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.896908][ T5632] RAX: ffffffffffffffda RBX: 00007fa0b5e5afa0 RCX: 00007fa0b5bd3159 [ 190.904897][ T5632] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 190.912887][ T5632] RBP: 00007fa0b5c6a06b R08: 0000000000000000 R09: 0000000000000000 [ 190.920870][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.928854][ T5632] R13: 00007fa0b5e5b038 R14: 00007fa0b5e5afa0 R15: 00007ffd1def2948 [ 190.936858][ T5632] [ 191.263512][ T5644] loop1: detected capacity change from 0 to 128 [ 191.391835][ T5644] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.526858][ T5644] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.711030][ T5634] loop4: detected capacity change from 0 to 512 [ 192.598224][ T150] block nbd0: Attempted send on invalid socket [ 192.605495][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 192.618103][ T150] gfs2: error 10 reading superblock [ 192.639916][ T5634] EXT4-fs (loop4): 1 truncate cleaned up [ 192.689609][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 195.389287][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.396512][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.735018][ T4298] Bluetooth: hci2: command 0x0401 tx timeout [ 198.027692][ T5707] loop1: detected capacity change from 0 to 1024 [ 200.173684][ T5706] 9pnet: Insufficient options for proto=fd [ 203.455106][ T5559] Bluetooth: hci4: command 0x0407 tx timeout [ 207.116181][ T5764] loop3: detected capacity change from 0 to 1024 [ 208.406947][ T5771] loop4: detected capacity change from 0 to 1024 [ 208.521314][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.853301][ T5798] atomic_op ffff888022df7998 conn xmit_atomic 0000000000000000 [ 215.825877][ T5836] syz.1.361 (5836) used greatest stack depth: 20560 bytes left [ 216.256388][ T5840] loop2: detected capacity change from 0 to 512 [ 217.703383][ T5840] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.775566][ T5868] overlayfs: missing 'lowerdir' [ 220.368018][ T5876] device syzkaller0 entered promiscuous mode [ 221.635288][ T5881] loop1: detected capacity change from 0 to 32768 [ 222.478738][ T5881] JBD2: Ignoring recovery information on journal [ 222.486382][ T5881] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 222.495000][ T5881] JBD2: bad block at offset 32 [ 222.517624][ T5881] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.805221][ T5896] loop4: detected capacity change from 0 to 512 [ 223.391789][ T5901] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 223.414383][ T5901] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 223.424331][ T5901] OCFS2: File system is now read-only. [ 223.430915][ T5901] (syz.1.373,5901,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 223.439333][ T5901] (syz.1.373,5901,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 223.447547][ T5901] (syz.1.373,5901,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 223.455717][ T5901] (syz.1.373,5901,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 223.464330][ T5901] (syz.1.373,5901,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 223.472220][ T5901] (syz.1.373,5901,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 223.480832][ T5901] (syz.1.373,5901,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 223.489532][ T5901] (syz.1.373,5901,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 223.611277][ T5896] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 223.732441][ T5896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 224.070324][ T5896] EXT4-fs (loop4): 1 truncate cleaned up [ 224.163447][ T5896] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 224.414679][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 224.888555][ T5929] loop3: detected capacity change from 0 to 512 [ 227.993068][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.008829][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.073508][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.394'. [ 230.703741][ T5997] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 230.703741][ T5997] program syz.0.396 not setting count and/or reply_len properly [ 230.989977][ T5990] loop1: detected capacity change from 0 to 128 [ 231.009989][ T6003] using random self ethernet address [ 231.015703][ T6003] using random host ethernet address [ 231.070020][ T5990] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 231.084334][ T5995] udevd[5995]: incorrect ext4 checksum on /dev/loop1 [ 232.080261][ T6013] block device autoloading is deprecated and will be removed. [ 232.088260][ T6013] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 233.817664][ T6033] tmpfs: Unknown parameter 'nr_bl' [ 234.694730][ T6040] loop3: detected capacity change from 0 to 512 [ 234.874011][ T6040] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 234.911489][ T6040] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.410: invalid indirect mapped block 256 (level 1) [ 234.941696][ T6045] loop2: detected capacity change from 0 to 512 [ 234.971488][ T6046] loop4: detected capacity change from 0 to 512 [ 234.998053][ T6045] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 235.015790][ T6040] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.410: invalid indirect mapped block 2683928664 (level 1) [ 235.063683][ T6046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 235.080202][ T6046] System zones: 1-12 [ 235.097635][ T6045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 235.112212][ T6046] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.399: missing EA_INODE flag [ 235.136958][ T6040] EXT4-fs (loop3): 1 truncate cleaned up [ 235.151510][ T6045] System zones: 1-12 [ 235.158027][ T6040] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 235.205661][ T6045] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.398: Bad quota inum: 2934046720, type: 1 [ 235.218770][ T6046] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.399: error while reading EA inode 12 err=-117 [ 235.250747][ T6046] EXT4-fs (loop4): 1 orphan inode deleted [ 235.264052][ T6045] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 235.310742][ T6046] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 236.052971][ T6045] EXT4-fs (loop2): mount failed [ 236.308212][ T6055] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.410: Invalid block bitmap block 3 in block_group 0 [ 240.628277][ T6101] "syz.4.419" (6101) uses obsolete ecb(arc4) skcipher [ 242.541990][ T25] audit: type=1400 audit(1790813325.059:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6104 comm="syz.2.422" [ 246.740414][ T6150] loop4: detected capacity change from 0 to 128 [ 246.931787][ T6150] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 246.954204][ T6153] udevd[6153]: incorrect ext4 checksum on /dev/loop4 [ 247.748880][ T6163] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 247.773780][ T6123] ima: policy update failed [ 247.779703][ T25] audit: type=1802 audit(1790813330.807:5): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.425" res=0 errno=0 [ 248.728008][ T6177] loop3: detected capacity change from 0 to 512 [ 249.418061][ T6185] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.897550][ T4298] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 250.442409][ T6177] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 250.452262][ T6177] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 250.460914][ T6177] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.440: iget: bad i_size value: 12154757448730 [ 250.854336][ T6177] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.440: couldn't read orphan inode 13 (err -117) [ 250.931291][ T6177] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 252.326290][ T6201] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 253.083340][ T6204] misc userio: No port type given on /dev/userio [ 253.213593][ T4298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.289057][ T4298] usb 5-1: too many configurations: 230, using maximum allowed: 8 [ 253.856927][ T6221] usb usb8: usbfs: process 6221 (syz.4.452) did not claim interface 6 before use [ 253.871734][ T6221] loop4: detected capacity change from 0 to 512 [ 254.188632][ T4298] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 254.196230][ T4298] usb 5-1: can't read configurations, error -71 [ 255.631705][ T6221] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.452: bg 0: block 184: padding at end of block bitmap is not set [ 256.200028][ T6246] loop3: detected capacity change from 0 to 8 [ 257.652620][ T6250] loop3: detected capacity change from 0 to 164 [ 258.702163][ T6221] EXT4-fs (loop4): Remounting filesystem read-only [ 258.708848][ T6221] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 258.718067][ T6221] EXT4-fs (loop4): Remounting filesystem read-only [ 258.724960][ T6221] EXT4-fs (loop4): 1 truncate cleaned up [ 258.730679][ T6221] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 258.744885][ T6221] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.921423][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 261.591613][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.598137][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.611442][ T6277] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 261.904934][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 261.951475][ T4310] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 262.029209][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 262.254889][ T6291] autofs4:pid:6291:autofs_fill_super: called with bogus options [ 262.316849][ T4262] usb 1-1: device descriptor read/64, error -71 [ 263.066534][ T4310] (NULL device *): queue 0 connect admin queue failed (-6). [ 263.091292][ T4310] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 263.112286][ T4310] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 263.122382][ T6277] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys" [ 263.309542][ T6298] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 263.845793][ T4262] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.310046][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 265.987439][ T1107] (NULL device *): Create Association LS failed: Association Allocation Failed [ 265.996691][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 266.087056][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 266.240988][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 266.528112][ T6314] loop4: detected capacity change from 0 to 512 [ 266.575428][ T6314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.613522][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 268.981708][ T6314] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.474: bad orphan inode 131083 [ 269.016503][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 269.039083][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 269.046405][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 269.098812][ T6314] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 269.121583][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 271.377179][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 272.056058][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 272.065441][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 272.073028][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 272.080613][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 273.471769][ T6352] loop1: detected capacity change from 0 to 128 [ 273.694905][ T6360] kAFS: unparsable volume name [ 274.326014][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 274.474531][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.770434][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 276.926005][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 276.935335][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 276.953588][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 278.033149][ T6390] loop2: detected capacity change from 0 to 24 [ 278.056313][ T6390] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 279.303842][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 279.352247][ T6393] loop0: detected capacity change from 0 to 128 [ 279.358884][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 279.368464][ T6390] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 279.387934][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 279.405590][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 279.439623][ T6393] EXT4-fs (loop0): Test dummy encryption mode enabled [ 280.819716][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 280.836521][ T6393] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 281.899780][ T6393] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.215560][ T4288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 283.339293][ T6397] (NULL device *): Create Association LS failed: Association Allocation Failed [ 284.028848][ T4288] (NULL device *): queue 0 connect admin queue failed (-6). [ 284.219961][ T26] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 284.269858][ T4288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 284.480465][ T4288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 286.636713][ T26] usb 2-1: device descriptor read/all, error -71 [ 286.697934][ T6441] loop1: detected capacity change from 0 to 128 [ 286.715473][ T6439] loop2: detected capacity change from 0 to 2048 [ 286.776833][ T6441] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.829267][ T6437] loop0: detected capacity change from 0 to 32768 [ 286.837211][ T4925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 286.982311][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 286.993098][ T6449] loop3: detected capacity change from 0 to 64 [ 287.028325][ T4925] (NULL device *): queue 0 connect admin queue failed (-6). [ 287.096326][ T4925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 287.181099][ T6439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.233557][ T4925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 287.297341][ T6437] XFS (loop0): Mounting V5 Filesystem [ 288.276163][ T6437] XFS (loop0): Ending clean mount [ 288.828829][ T6470] loop2: detected capacity change from 0 to 128 [ 289.631133][ T6473] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6473] [ 289.717055][ T6475] loop1: detected capacity change from 0 to 16 [ 289.733635][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 289.762615][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 289.772272][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 289.779880][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 289.906914][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 290.201069][ T6480] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.666745][ T6475] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.688199][ T6481] loop4: detected capacity change from 0 to 164 [ 290.746670][ T6437] XFS (loop0): Quotacheck needed: Please wait. [ 290.888367][ T6437] XFS (loop0): Quotacheck: Done. [ 291.934143][ T6491] loop1: detected capacity change from 0 to 32768 [ 292.011588][ T6489] loop2: detected capacity change from 0 to 1024 [ 292.107280][ T4192] XFS (loop0): Unmounting Filesystem [ 292.196795][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 292.242166][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 292.251493][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 292.258796][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 292.266477][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 292.328795][ T6491] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 292.588436][ T6504] hfsplus: bad catalog entry type [ 294.407768][ T6491] syz.1.515 (6491) used greatest stack depth: 19136 bytes left [ 294.571556][ T4288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 294.587618][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 294.596975][ T4288] (NULL device *): queue 0 connect admin queue failed (-6). [ 294.604961][ T4288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 294.612651][ T4288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 294.623838][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 294.800386][ T6518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.252436][ T6520] comedi comedi0: No hardware detected at I/O base 0x300 [ 296.871300][ T4925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 296.884944][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 296.894367][ T4925] (NULL device *): queue 0 connect admin queue failed (-6). [ 296.902174][ T4925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 296.909941][ T4925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 298.229098][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 298.240069][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 299.790321][ T6561] loop2: detected capacity change from 0 to 32768 [ 300.162361][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 300.252271][ T6561] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 300.418584][ T13] (NULL device *): Create Association LS failed: Association Allocation Failed [ 300.512463][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 300.566512][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 300.584237][ T6566] loop0: detected capacity change from 0 to 164 [ 300.593265][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 300.596968][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 300.836047][ T6580] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 302.179929][ T6588] loop4: detected capacity change from 0 to 2048 [ 302.850000][ T4310] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 303.446530][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 303.457429][ T4310] (NULL device *): queue 0 connect admin queue failed (-6). [ 303.464736][ T4310] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 303.473018][ T4310] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 303.628092][ T6589] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.582690][ T6598] loop3: detected capacity change from 0 to 256 [ 305.725626][ T4288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 305.771181][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.778048][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.784813][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.791631][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.798427][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.805221][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.812012][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.818768][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.825575][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.832357][ T6610] tc action pedit offset must be on 32 bit boundaries [ 305.839130][ T6610] 0: reclassify loop, rule prio 0, protocol 800 [ 306.604129][ T6598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 307.570638][ T6622] overlayfs: missing 'lowerdir' [ 307.725475][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 307.951132][ T4288] (NULL device *): queue 0 connect admin queue failed (-6). [ 307.991509][ T4288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 308.131019][ T4288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 308.460185][ T6631] tcf_pedit_act: 7 callbacks suppressed [ 308.460200][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.465906][ T6633] device syzkaller0 entered promiscuous mode [ 308.472011][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.484170][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.490325][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.496472][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.502601][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.508800][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.514955][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.521103][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.527234][ T6631] tc action pedit 'at' offset 19 out of bounds [ 308.533398][ T6631] 0: reclassify loop, rule prio 0, protocol 800 [ 309.479751][ T6642] loop2: detected capacity change from 0 to 2048 [ 309.577897][ T6642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.601169][ T6645] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 310.479797][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 312.337375][ T4229] (NULL device *): Create Association LS failed: Association Allocation Failed [ 312.347178][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 312.355038][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 312.362930][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 312.375633][ T6647] device syzkaller0 entered promiscuous mode [ 313.040230][ T25] audit: type=1326 audit(1790813391.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.087614][ T25] audit: type=1326 audit(1790813391.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.129976][ T6659] loop3: detected capacity change from 0 to 512 [ 314.133793][ T25] audit: type=1326 audit(1790813391.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f252f32a98e code=0x7ffc0000 [ 314.384739][ T6661] loop0: detected capacity change from 0 to 32768 [ 314.403352][ T6658] ip_tables: iptables: counters copy to user failed while replacing table [ 314.491574][ T25] audit: type=1326 audit(1790813391.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.580851][ T25] audit: type=1326 audit(1790813391.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.652338][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 314.684777][ T4262] (NULL device *): Create Association LS failed: Association Allocation Failed [ 314.699613][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 314.708083][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 314.715632][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 314.729148][ T25] audit: type=1326 audit(1790813391.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.755902][ T25] audit: type=1326 audit(1790813391.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.780263][ T25] audit: type=1326 audit(1790813391.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.805513][ T25] audit: type=1326 audit(1790813391.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 314.830556][ T25] audit: type=1326 audit(1790813391.050:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.1.554" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252f36a159 code=0x7ffc0000 [ 315.672074][ T6659] EXT4-fs: error -4 creating inode table initialization thread [ 315.816120][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'. [ 316.492819][ T6659] EXT4-fs (loop3): mount failed [ 316.534433][ T6661] XFS (loop0): Mounting V5 Filesystem [ 316.982473][ T4288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 317.186697][ T4231] (NULL device *): Create Association LS failed: Association Allocation Failed [ 317.317178][ T6661] XFS (loop0): Ending clean mount [ 317.324486][ T6661] XFS (loop0): Quotacheck needed: Please wait. [ 317.325039][ T4288] (NULL device *): queue 0 connect admin queue failed (-6). [ 317.344779][ T4288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 317.375605][ T4288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 317.388222][ T6661] XFS (loop0): Quotacheck: Done. [ 317.408142][ T4192] XFS (loop0): Unmounting Filesystem [ 318.785254][ T6714] loop2: detected capacity change from 0 to 256 [ 319.671656][ T4925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 319.785460][ T6710] (NULL device *): Create Association LS failed: Association Allocation Failed [ 319.799448][ T4925] (NULL device *): queue 0 connect admin queue failed (-6). [ 320.058064][ T4925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 320.818333][ T4925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 322.424792][ T6756] bridge0: port 3(syz_tun) entered blocking state [ 322.445294][ T6756] bridge0: port 3(syz_tun) entered disabled state [ 322.495903][ T6756] device syz_tun entered promiscuous mode [ 322.673996][ T6756] bridge0: port 3(syz_tun) entered blocking state [ 322.680512][ T6756] bridge0: port 3(syz_tun) entered forwarding state [ 322.693073][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.700308][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.737589][ T6764] device bridge_slave_1 left promiscuous mode [ 322.840114][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.365332][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 323.539281][ T13] (NULL device *): Create Association LS failed: Association Allocation Failed [ 323.549065][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 323.585954][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 323.787458][ T6764] device bridge_slave_0 left promiscuous mode [ 323.799527][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 323.806848][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.460072][ T6781] xt_policy: output policy not valid in PREROUTING and INPUT [ 325.198685][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 325.208041][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 325.883903][ T6791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.999597][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 326.101888][ T1107] (NULL device *): Create Association LS failed: Association Allocation Failed [ 326.133481][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 326.143515][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 326.155153][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 327.347387][ T6806] loop2: detected capacity change from 0 to 256 [ 328.168682][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.175098][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.202391][ T6806] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 328.340614][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 328.386753][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 328.436822][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 328.466577][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 328.540348][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 328.680242][ T6813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.494812][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 331.750372][ T6834] loop2: detected capacity change from 0 to 128 [ 331.758493][ T4231] (NULL device *): Create Association LS failed: Association Allocation Failed [ 331.776321][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 332.476750][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 332.502892][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 332.573175][ T6834] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 332.613395][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 332.613409][ T25] audit: type=1800 audit(1790813409.089:26): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.600" name="bus" dev="loop2" ino=1048594 res=0 errno=0 [ 332.716338][ T6834] capability: warning: `syz.2.600' uses 32-bit capabilities (legacy support in use) [ 333.300399][ T6851] loop0: detected capacity change from 0 to 512 [ 333.590277][ T6851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.964437][ T6850] Invalid ELF header len 10 [ 334.014396][ T4288] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 334.280017][ T6853] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 335.305849][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.313435][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.363477][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 335.425780][ T6863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.002827][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 336.013606][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 336.021064][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 336.094599][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 338.452660][ T4925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 338.620803][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 338.630259][ T4925] (NULL device *): queue 0 connect admin queue failed (-6). [ 338.652565][ T4925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 338.661009][ T4925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 339.040931][ T6894] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 339.053747][ T6894] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 339.060545][ T6894] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 339.067261][ T6894] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 339.074088][ T6894] comedi comedi1: 8255: I/O port conflict (0x14000000,4) [ 339.081474][ T6894] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 339.090479][ T6894] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 339.097531][ T6894] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 339.104532][ T6894] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 339.111306][ T6894] comedi comedi1: 8255: I/O port conflict (0x16,4) [ 339.118214][ T6894] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 339.124938][ T6894] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 339.131777][ T6894] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4) [ 339.139008][ T6894] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 339.145976][ T6894] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 339.152744][ T6894] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 339.159652][ T6894] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 339.166365][ T6894] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4) [ 339.173856][ T6894] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 339.203205][ T6894] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 339.209791][ T6894] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 339.243146][ T6894] loop3: detected capacity change from 0 to 1024 [ 339.289177][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 339.350761][ T6894] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.615: Invalid block bitmap block 0 in block_group 0 [ 339.368521][ T6894] Quota error (device loop3): write_blk: dquota write failed [ 339.376484][ T6894] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 339.386614][ T6894] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.615: Failed to acquire dquot type 0 [ 339.401085][ T6894] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.615: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.419770][ T6894] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.615: Invalid inode bitmap blk 0 in block_group 0 [ 339.433323][ T6894] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 339.443843][ T6894] EXT4-fs (loop3): 1 orphan inode deleted [ 339.449646][ T6894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 339.468125][ T4295] Quota error (device loop3): remove_tree: Getting block too big (0 >= 8) [ 339.610746][ T4295] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 340.847412][ T4793] Bluetooth: hci5: command 0x0409 tx timeout [ 340.912213][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 342.891617][ T5559] (NULL device *): Create Association LS failed: Association Allocation Failed [ 342.901349][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 342.908771][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 342.916850][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 343.079891][ T4793] Bluetooth: hci5: command 0x041b tx timeout [ 343.091114][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.098186][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.167831][ T6873] device bridge_slave_0 entered promiscuous mode [ 343.167934][ T6912] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 343.189725][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.221281][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.254576][ T6873] device bridge_slave_1 entered promiscuous mode [ 343.346362][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.371486][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.587063][ T6927] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 345.171484][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 345.876323][ T4793] Bluetooth: hci5: command 0x040f tx timeout [ 347.154728][ T5559] (NULL device *): Create Association LS failed: Association Allocation Failed [ 347.163838][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 347.179630][ T6873] team0: Port device team_slave_0 added [ 347.182329][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 347.252888][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 347.271019][ T6873] team0: Port device team_slave_1 added [ 347.348613][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.399184][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.464141][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.511287][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.520572][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.361528][ T4793] Bluetooth: hci5: command 0x0419 tx timeout [ 348.417685][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.475778][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.483339][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.494296][ T6935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.816423][ T6941] fuse: Bad value for 'fd' [ 350.606667][ T6950] loop3: detected capacity change from 0 to 32768 [ 350.942222][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 351.077763][ T6950] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 351.393841][ T1107] (NULL device *): Create Association LS failed: Association Allocation Failed [ 351.403459][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 351.410764][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 351.418707][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 354.054122][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 354.389604][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 354.418857][ T6873] device hsr_slave_0 entered promiscuous mode [ 354.420797][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 354.433883][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 354.447547][ T6873] device hsr_slave_1 entered promiscuous mode [ 354.466224][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 354.514649][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 355.714236][ T6873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.743168][ T6873] Cannot create hsr debugfs directory [ 357.906016][ T9] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 358.106124][ T6985] loop0: detected capacity change from 0 to 8192 [ 358.165475][ T6397] (NULL device *): Create Association LS failed: Association Allocation Failed [ 358.176462][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 358.184173][ T9] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 358.193076][ T9] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 358.322737][ T6873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.398790][ T6873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.465370][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 358.535461][ T6873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.592124][ T6873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.420412][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 360.488080][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.500951][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 360.505646][ T6873] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.687753][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.706278][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 360.761971][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 361.397511][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 361.406415][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.436057][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.450437][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.583588][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.590794][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.604157][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.639303][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 363.684516][ T7029] loop2: detected capacity change from 0 to 512 [ 363.704245][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.853644][ T4298] (NULL device *): Create Association LS failed: Association Allocation Failed [ 363.859652][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.869675][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.887835][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 363.930006][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 363.952070][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.974155][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 363.997660][ T7029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.020315][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.079885][ T7029] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.315457][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 364.323512][ T7025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 364.515197][ T7039] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 364.614421][ T7025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.899077][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.909867][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.920509][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.934978][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.147485][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.184370][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.422935][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.229406][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 366.671640][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.526496][ T4229] (NULL device *): Create Association LS failed: Association Allocation Failed [ 367.539125][ T6873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.585871][ T7030] ima: policy update failed [ 367.590542][ T25] audit: type=1802 audit(1790813441.356:27): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.650" res=0 errno=0 [ 367.615912][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 367.638832][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.657096][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 367.706725][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 367.720422][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.738347][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.341732][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.366336][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.416746][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.582995][ T7075] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 370.706624][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 371.528870][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 371.621959][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 371.634117][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 371.653082][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 371.932809][ T7104] tipc: Started in network mode [ 371.937764][ T7104] tipc: Node identity 4, cluster identity 4711 [ 371.944034][ T7104] tipc: Node number set to 4 [ 372.192159][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.258811][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.362137][ T6873] device veth0_vlan entered promiscuous mode [ 372.766930][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.819215][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.862537][ T6873] device veth1_vlan entered promiscuous mode [ 372.869983][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.889447][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.910764][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.074268][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.281814][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.315139][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.383421][ T6873] device veth0_macvtap entered promiscuous mode [ 373.407404][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.456906][ T6873] device veth1_macvtap entered promiscuous mode [ 373.494860][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.509068][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.519919][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.531940][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.543396][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.557660][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.567950][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.578987][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.589029][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.599711][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.620865][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.630000][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.652466][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.832561][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.853727][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.864349][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.876985][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.909955][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.981637][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.489166][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 374.536779][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 374.580013][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.599813][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 374.613576][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.623477][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.635684][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.647648][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.655643][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 374.681043][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.703752][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.770849][ T6873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.779718][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 374.786945][ T6873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.796079][ T6873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.810012][ T6873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.458499][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.466602][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.663784][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.078736][ T7155] "syz.2.678" (7155) uses obsolete ecb(arc4) skcipher [ 376.116257][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.165312][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.210969][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.644874][ T7163] comedi comedi0: No hardware detected at I/O base 0x300 [ 377.997423][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 378.015960][ T4287] (NULL device *): Create Association LS failed: Association Allocation Failed [ 378.027327][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 378.035358][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 378.043148][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 378.453707][ T7183] overlayfs: missing 'lowerdir' [ 380.635197][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 380.664437][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 380.682653][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 380.799014][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 380.818078][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 380.846543][ T7211] loop3: detected capacity change from 0 to 128 [ 381.308341][ T7211] EXT4-fs (loop3): Test dummy encryption mode enabled [ 381.727460][ T7211] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 381.770772][ T7211] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.807364][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.5.698'. [ 383.194959][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 383.238200][ T4298] (NULL device *): Create Association LS failed: Association Allocation Failed [ 383.250058][ T7211] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 383.267587][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 383.422565][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 383.810503][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 386.181480][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 386.206354][ T4287] (NULL device *): Create Association LS failed: Association Allocation Failed [ 386.264239][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 386.275028][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 386.310475][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 387.980933][ T7270] kAFS: bad VL server IP address [ 388.598272][ T9] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 389.216019][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 389.261361][ T9] (NULL device *): queue 0 connect admin queue failed (-6). [ 389.269030][ T9] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 389.319744][ T9] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 390.396817][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.404221][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.595640][ T7330] device bridge_slave_1 left promiscuous mode [ 390.701903][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.360902][ T7330] device bridge_slave_0 left promiscuous mode [ 391.393439][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.685077][ T7354] overlayfs: failed to clone upperpath [ 391.694482][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.736'. [ 392.182813][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 392.664923][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 392.692531][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 392.739397][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 392.862668][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 394.756407][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.762839][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.724249][ T4295] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 396.034495][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 396.241624][ T7409] overlayfs: missing 'lowerdir' [ 397.013753][ T4295] (NULL device *): queue 0 connect admin queue failed (-6). [ 397.032909][ T4295] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 397.225087][ T4295] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 397.231696][ T7383] kAFS: bad VL server IP address [ 398.384047][ T7433] atomic_op ffff888076cda198 conn xmit_atomic 0000000000000000 [ 399.576602][ T4310] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 399.593629][ T7435] overlayfs: missing 'lowerdir' [ 399.599062][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 399.609002][ T4310] (NULL device *): queue 0 connect admin queue failed (-6). [ 399.650230][ T4310] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 399.880360][ T4310] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 403.424526][ T144] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 403.449926][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 403.459888][ T144] (NULL device *): queue 0 connect admin queue failed (-6). [ 403.477358][ T144] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 403.485322][ T144] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 403.496346][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 404.544893][ T7491] loop0: detected capacity change from 0 to 2048 [ 405.136871][ T7491] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.082278][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 406.229872][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 406.239286][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 406.246851][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 406.254915][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 407.661816][ T7536] ip_tables: iptables: counters copy to user failed while replacing table [ 408.470217][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 408.676118][ T4228] (NULL device *): Create Association LS failed: Association Allocation Failed [ 408.698489][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 408.712358][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 408.794569][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 409.802251][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 409.877466][ T7551] loop3: detected capacity change from 0 to 128 [ 410.509165][ T7558] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7558] [ 411.459750][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 411.642707][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 411.651808][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 411.659111][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 411.667481][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 411.957721][ T7567] loop3: detected capacity change from 0 to 40427 [ 411.984905][ T7567] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 411.999575][ T7567] F2FS-fs (loop3): invalid crc value [ 412.006423][ T7567] F2FS-fs (loop3): invalid crc value [ 412.012086][ T7567] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 412.039204][ T7575] xt_hashlimit: size too large, truncated to 1048576 [ 412.046318][ T7575] xt_hashlimit: max too large, truncated to 1048576 [ 412.884483][ T7583] netlink: 'syz.2.797': attribute type 27 has an invalid length. [ 413.434578][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 413.451006][ T7583] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 413.915483][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 414.388507][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 414.397666][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 414.405105][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 414.412730][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 415.115147][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 415.123525][ T7614] loop3: detected capacity change from 0 to 128 [ 415.203342][ T7614] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.368755][ T7638] fuse: Bad value for 'fd' [ 416.830100][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 416.883708][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 417.018900][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 417.037544][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 417.058732][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 419.301900][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 420.152345][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 420.163121][ T4283] (NULL device *): queue 0 connect admin queue failed (-6). [ 420.170534][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 420.178150][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 420.312559][ T7663] loop3: detected capacity change from 0 to 4096 [ 420.451957][ T7663] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=1) [ 422.463856][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 422.512691][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 422.527906][ T4283] (NULL device *): queue 0 connect admin queue failed (-6). [ 422.537075][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 422.877854][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 423.800489][ T7703] loop0: detected capacity change from 0 to 128 [ 424.863046][ T7718] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7718] [ 424.892993][ T7718] netlink: 260 bytes leftover after parsing attributes in process `syz.0.838'. [ 424.902279][ T7718] netlink: 104 bytes leftover after parsing attributes in process `syz.0.838'. [ 424.911336][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 425.125952][ T4191] Bluetooth: Wrong link type (-22) [ 425.295400][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 425.485793][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 425.495674][ T4283] (NULL device *): queue 0 connect admin queue failed (-6). [ 425.503121][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 425.510888][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 425.878513][ T7726] fuse: Bad value for 'fd' [ 426.271323][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 426.282547][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 427.483489][ T7748] netlink: 88 bytes leftover after parsing attributes in process `syz.5.849'. [ 427.919782][ T4283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 427.941848][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 427.951925][ T4283] (NULL device *): queue 0 connect admin queue failed (-6). [ 427.959703][ T4283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 429.023424][ T4283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 429.043630][ T7752] input: syz0 as /devices/virtual/input/input8 [ 431.266493][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 431.310853][ T4233] (NULL device *): Create Association LS failed: Association Allocation Failed [ 431.313012][ T7796] syz.5.864 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 431.323313][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 431.736951][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 431.815259][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 434.116840][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 434.426789][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 434.453122][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 434.467160][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 434.484434][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 435.747244][ T7833] bridge0: port 3(wlan1) entered blocking state [ 435.759582][ T7833] bridge0: port 3(wlan1) entered disabled state [ 436.060823][ T7833] device wlan1 entered promiscuous mode [ 436.637077][ T7834] bridge0: port 3(wlan1) entered disabled state [ 436.791259][ T7834] device wlan1 left promiscuous mode [ 436.806430][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 436.839696][ T7834] bridge0: port 3(wlan1) entered disabled state [ 436.870780][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 436.879910][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 436.966192][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 437.010940][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 438.237288][ T7869] overlayfs: failed to clone upperpath [ 439.010652][ T7867] 9pnet: Insufficient options for proto=fd [ 439.243184][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 439.275583][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 439.284727][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 439.331700][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 439.339372][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 439.892106][ T7883] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.584137][ T4540] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 441.625807][ T4263] (NULL device *): Create Association LS failed: Association Allocation Failed [ 441.642173][ T4540] (NULL device *): queue 0 connect admin queue failed (-6). [ 441.659835][ T4540] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 441.678642][ T4540] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 443.024955][ T7908] overlayfs: failed to clone upperpath [ 443.914177][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 444.001169][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 444.077933][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 444.150174][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 444.441263][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 446.901244][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 447.030218][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 447.066552][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 447.258443][ T7946] usb0: HOST MAC de:89:01:fe:94:a8 [ 447.273953][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 447.293269][ T7946] usb0: MAC ee:10:83:2c:a2:fd [ 447.377854][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 448.979375][ T4287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 449.419031][ T7991] md: could not open device unknown-block(1,0). [ 450.105675][ T4288] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 450.135173][ T4287] usb 1-1: Dual-Role OTG device on HNP port [ 450.157372][ T4287] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 450.724031][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 450.733195][ T4288] (NULL device *): queue 0 connect admin queue failed (-6). [ 450.837089][ T4287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.850365][ T4288] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 450.938745][ T4288] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 451.117617][ T7999] md: pers->run() failed ... [ 451.291283][ T4287] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, de:89:01:fe:94:a8 [ 451.485926][ T8017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.493414][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.518242][ T8017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.525685][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.596161][ T8023] netlink: 64 bytes leftover after parsing attributes in process `syz.0.922'. [ 453.120539][ T8042] capability: warning: `syz.0.927' uses deprecated v2 capabilities in a way that may be insecure [ 453.169192][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 453.179502][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 453.187061][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.197148][ T4191] Workqueue: hci2 hci_rx_work [ 453.201841][ T4191] Call Trace: [ 453.205119][ T4191] [ 453.208049][ T4191] dump_stack_lvl+0x188/0x250 [ 453.212734][ T4191] ? show_regs_print_info+0x20/0x20 [ 453.217937][ T4191] ? load_image+0x410/0x410 [ 453.222457][ T4191] sysfs_create_dir_ns+0x26a/0x290 [ 453.227583][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 453.232266][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 453.237473][ T4191] kobject_add_internal+0x5ba/0xcd0 [ 453.242686][ T4191] kobject_add+0x160/0x230 [ 453.247110][ T4191] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 453.253274][ T4191] ? kobject_init+0x1c0/0x1c0 [ 453.257964][ T4191] ? get_device_parent+0x121/0x3e0 [ 453.263081][ T4191] device_add+0x470/0x1050 [ 453.267517][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 453.272721][ T4191] hci_sync_conn_complete_evt+0x647/0x9d0 [ 453.278464][ T4191] ? __rwlock_init+0x140/0x140 [ 453.283238][ T4191] hci_event_packet+0x8cf/0x1310 [ 453.288183][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 453.293049][ T4191] ? rcu_lock_release+0x20/0x20 [ 453.297908][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 453.303106][ T4191] hci_rx_work+0x255/0xa10 [ 453.307638][ T4191] process_one_work+0x867/0xff0 [ 453.312496][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 453.318123][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 453.323402][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 453.328439][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 453.333971][ T4191] ? wq_worker_running+0x97/0x170 [ 453.338990][ T4191] worker_thread+0xad7/0x12a0 [ 453.343685][ T4191] kthread+0x42e/0x520 [ 453.347825][ T4191] ? rcu_lock_release+0x20/0x20 [ 453.352663][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 453.357241][ T4191] ret_from_fork+0x1f/0x30 [ 453.361663][ T4191] [ 453.366306][ T4249] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 453.367081][ T4191] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 453.392562][ T4191] Bluetooth: hci2: failed to register connection device [ 453.399743][ T4191] [ 453.402069][ T4191] ====================================================== [ 453.409075][ T4191] WARNING: possible circular locking dependency detected [ 453.414982][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 453.416088][ T4191] syzkaller #0 Not tainted [ 453.416097][ T4191] ------------------------------------------------------ [ 453.436386][ T4191] kworker/u5:2/4191 is trying to acquire lock: [ 453.439186][ T4249] (NULL device *): queue 0 connect admin queue failed (-6). [ 453.442526][ T4191] ffff88804de43120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00 [ 453.442571][ T4191] [ 453.442571][ T4191] but task is already holding lock: [ 453.442576][ T4191] ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 453.473085][ T4249] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 453.478155][ T4191] [ 453.478155][ T4191] which lock already depends on the new lock. [ 453.478155][ T4191] [ 453.478162][ T4191] [ 453.478162][ T4191] the existing dependency chain (in reverse order) is: [ 453.478167][ T4191] [ 453.478167][ T4191] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 453.478192][ T4191] __mutex_lock_common+0x1e5/0x2400 [ 453.478215][ T4191] mutex_lock_nested+0x17/0x20 [ 453.478226][ T4191] hci_remote_features_evt+0x5d9/0xa10 [ 453.478239][ T4191] hci_event_packet+0x600/0x1310 [ 453.478251][ T4191] hci_rx_work+0x255/0xa10 [ 453.529289][ T4249] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 453.529747][ T4191] process_one_work+0x867/0xff0 [ 453.529769][ T4191] worker_thread+0xad7/0x12a0 [ 453.557642][ T4191] kthread+0x42e/0x520 [ 453.562244][ T4191] ret_from_fork+0x1f/0x30 [ 453.567187][ T4191] [ 453.567187][ T4191] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 453.574491][ T4191] __mutex_lock_common+0x1e5/0x2400 [ 453.580211][ T4191] mutex_lock_nested+0x17/0x20 [ 453.585492][ T4191] sco_sock_connect+0x189/0x940 [ 453.590866][ T4191] __sys_connect+0x3cb/0x450 [ 453.595974][ T4191] __x64_sys_connect+0x76/0x80 [ 453.601257][ T4191] do_syscall_64+0x4c/0xa0 [ 453.606193][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.612615][ T4191] [ 453.612615][ T4191] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 453.621724][ T4191] __lock_acquire+0x2c66/0x7b50 [ 453.627093][ T4191] lock_acquire+0x19e/0x400 [ 453.632102][ T4191] lock_sock_nested+0x44/0x100 [ 453.637370][ T4191] sco_connect_cfm+0x70a/0xd00 [ 453.642638][ T4191] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 453.648856][ T4191] hci_event_packet+0x8cf/0x1310 [ 453.654301][ T4191] hci_rx_work+0x255/0xa10 [ 453.659223][ T4191] process_one_work+0x867/0xff0 [ 453.664579][ T4191] worker_thread+0xad7/0x12a0 [ 453.669754][ T4191] kthread+0x42e/0x520 [ 453.674585][ T4191] ret_from_fork+0x1f/0x30 [ 453.679521][ T4191] [ 453.679521][ T4191] other info that might help us debug this: [ 453.679521][ T4191] [ 453.689726][ T4191] Chain exists of: [ 453.689726][ T4191] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 453.689726][ T4191] [ 453.703947][ T4191] Possible unsafe locking scenario: [ 453.703947][ T4191] [ 453.711372][ T4191] CPU0 CPU1 [ 453.716719][ T4191] ---- ---- [ 453.722057][ T4191] lock(hci_cb_list_lock); [ 453.726535][ T4191] lock(&hdev->lock); [ 453.733108][ T4191] lock(hci_cb_list_lock); [ 453.740104][ T4191] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 453.745974][ T4191] [ 453.745974][ T4191] *** DEADLOCK *** [ 453.745974][ T4191] [ 453.754093][ T4191] 4 locks held by kworker/u5:2/4191: [ 453.759351][ T4191] #0: ffff88807a782138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 453.769596][ T4191] #1: ffffc90002f6fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 453.780875][ T4191] #2: ffff888025100478 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb8/0x9d0 [ 453.791024][ T4191] #3: ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 453.801703][ T4191] [ 453.801703][ T4191] stack backtrace: [ 453.807565][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 453.815097][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.825131][ T4191] Workqueue: hci2 hci_rx_work [ 453.829796][ T4191] Call Trace: [ 453.833056][ T4191] [ 453.835971][ T4191] dump_stack_lvl+0x188/0x250 [ 453.840629][ T4191] ? load_image+0x410/0x410 [ 453.845112][ T4191] ? show_regs_print_info+0x20/0x20 [ 453.850290][ T4191] ? print_circular_bug+0x12b/0x1a0 [ 453.855479][ T4191] check_noncircular+0x296/0x330 [ 453.860394][ T4191] ? stack_trace_snprint+0xe0/0xe0 [ 453.865484][ T4191] ? add_chain_block+0x9b0/0x9b0 [ 453.870401][ T4191] ? lockdep_lock+0xf1/0x1f0 [ 453.874973][ T4191] ? mark_lock+0x94/0x320 [ 453.879280][ T4191] ? _find_first_zero_bit+0xd1/0xf0 [ 453.884460][ T4191] __lock_acquire+0x2c66/0x7b50 [ 453.889303][ T4191] ? verify_lock_unused+0x140/0x140 [ 453.894481][ T4191] ? verify_lock_unused+0x140/0x140 [ 453.899658][ T4191] ? hci_rx_work+0x255/0xa10 [ 453.904230][ T4191] ? process_one_work+0x867/0xff0 [ 453.909232][ T4191] ? worker_thread+0xad7/0x12a0 [ 453.914060][ T4191] ? kthread+0x42e/0x520 [ 453.918277][ T4191] ? ret_from_fork+0x1f/0x30 [ 453.922848][ T4191] lock_acquire+0x19e/0x400 [ 453.927334][ T4191] ? sco_connect_cfm+0x70a/0xd00 [ 453.932251][ T4191] ? sco_connect_cfm+0x6fa/0xd00 [ 453.937168][ T4191] ? read_lock_is_recursive+0x10/0x10 [ 453.942525][ T4191] ? __lock_acquire+0x7b50/0x7b50 [ 453.947529][ T4191] ? do_raw_spin_lock+0x128/0x2f0 [ 453.952533][ T4191] ? __rwlock_init+0x140/0x140 [ 453.957278][ T4191] lock_sock_nested+0x44/0x100 [ 453.962023][ T4191] ? sco_connect_cfm+0x70a/0xd00 [ 453.966942][ T4191] sco_connect_cfm+0x70a/0xd00 [ 453.971686][ T4191] ? sco_skb_put_cmsg+0xa0/0xa0 [ 453.976517][ T4191] ? sco_skb_put_cmsg+0xa0/0xa0 [ 453.981346][ T4191] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 453.987045][ T4191] ? __rwlock_init+0x140/0x140 [ 453.991787][ T4191] hci_event_packet+0x8cf/0x1310 [ 453.996740][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 454.001595][ T4191] ? rcu_lock_release+0x20/0x20 [ 454.006433][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 454.011622][ T4191] hci_rx_work+0x255/0xa10 [ 454.016031][ T4191] process_one_work+0x867/0xff0 [ 454.020869][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 454.026483][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 454.031758][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 454.036766][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 454.042294][ T4191] ? wq_worker_running+0x97/0x170 [ 454.047303][ T4191] worker_thread+0xad7/0x12a0 [ 454.051976][ T4191] kthread+0x42e/0x520 [ 454.056024][ T4191] ? rcu_lock_release+0x20/0x20 [ 454.060858][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 454.065433][ T4191] ret_from_fork+0x1f/0x30 [ 454.069834][ T4191] [ 455.358878][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 455.716501][ T154] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 455.729585][ T4793] (NULL device *): Create Association LS failed: Association Allocation Failed [ 455.738943][ T154] (NULL device *): queue 0 connect admin queue failed (-6). [ 455.746255][ T154] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 455.753861][ T154] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 457.613117][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 457.959944][ T154] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 457.973458][ T26] (NULL device *): Create Association LS failed: Association Allocation Failed [ 457.982739][ T154] (NULL device *): queue 0 connect admin queue failed (-6). [ 457.990054][ T154] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 457.998089][ T154] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 460.214157][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 460.228817][ T1107] (NULL device *): Create Association LS failed: Association Allocation Failed [ 460.237830][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 460.245108][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 460.252669][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 461.342340][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.348704][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.468460][ T1487] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 462.482200][ T7] (NULL device *): Create Association LS failed: Association Allocation Failed [ 462.492314][ T1487] (NULL device *): queue 0 connect admin queue failed (-6). [ 462.499613][ T1487] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 462.507630][ T1487] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds